last executing test programs: 1m7.58636111s ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xc7}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008a0}, 0x20000000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000847000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1a8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x7, &(0x7f0000000080)={0xfd, "90f50000000000000000e5f144d76e44c7b2986eb5e56814e7cb83930000000040"}}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf, 0x3, 0x68, @mcast2, @mcast2={0xff, 0x5}, 0x40, 0x40, 0xe3e1, 0xd00}}) 1m7.516151592s ago: executing program 1 (id=10): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000300)='y\x105\xf5\xf7\x1exa\xa3\x00\x00\aLk\xfd\xc7\x87\t\xf3\xf1<\x18}\xbe\x1c\x11x\x0f\xa1\xcf\x1a\x98S\xe5\xff7\xc9\x00\x00\x00\x00\x00\x00\xeb\x00\x00\x00\x00\xb9\x84v-\xd2\x14#\xfaes', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x1d, 0x2) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x10, 0x0, '\x00', @d}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) 1m4.984601323s ago: executing program 1 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x4000, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 1m4.37005377s ago: executing program 1 (id=40): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x448, &(0x7f0000000e40)="$eJzs28tvG8UfAPDv2kn6Sx+/mKo8+gACBVHxSJq0lB64tAKJA0hIcCjHkKRVqNugJki0iiAgVI6oEncENyT+Ak5wQcAJiSvcUaUK5dLCyWhtb+K4tuukTpzEn4+0yczurGa+nh17dscOoGcNp3+SiL0R8UdEDFWyqwsMV/7dWVqY/GdpYTKJUumtv5NyudtLC5NZ0ey8PVmmEJH7LInDDeqdu3rt4kSxOH2lmh+dv/T+6NzVay/MXJq4MH1h+vL46dMnT4y9dGr8xY7EmcZ1+9BHs0cOvvbOjTcmz91495fvkiz+ujg6ZLjVwadLpQ5X1137atJJX9unlXIb0hralY+ItLv6y+N/KPKx0nlD8eqnXW0csKEGWh9eLAE7WDqbB3pR9kGf3v9m2yZMO7aMW2di+TnGnepWOdIXlXvTZEPrH46Ic4v/fpVuUfscIr+h1QIAPeyHMxHxfKP5Xy4eqin3/+oaSiEiHoiI/RFxKiIORMSDEeWyD0fEI2usv36R5O75Z+7mugJrUzr/e7m6trV6/re8MlHIV3P7yvH3J+dnitPHq6/JsejflebHWtTx4yu/f9HsWO38L93S+rO5YLUdN/t2rT5namJ+4n5irnXrk4hDfY3iT5ZXAtIZ8MGIOLTOOmae/fZIs2P3jr+F9teZmip9HfFMpf8Xoy7+TNJ6fXL0f1GcPj6aXRV3+/W36282q/++4u+AtP93N7z+l+MvJLXrtXNrr+P6n583vadc7/U/kLy9at+HE/PzV8YiBpLXK42u3T9eV258pXwa/7GjafxZxCvjf3+svBKHIyK9iB+NiMci4vFq25+IiCcj4miL+H8++9R7649/Y6XxT62p/1cSA1G/p3Eif/Gn71dVWlhL/Gn/nyynjlX3NHv/G6xJt9Ou9V3NAAAAsP3kImJvJLmR5XQuNzJS+Q7/gdidK87OzT93fvaDy1OV3wgUoj+XPekaqnkeOla9rc/y43X5E9Xnxl/mB8v5kcnZ4lS3g4cet6fJ+E/95TsosPN1YB0N2KaMf+hdxj/0LuMfeleD8T/YjXYAm688/ut+5/pxl9oCbK66z3/LftBD3P9D7zL+oXcZ/9CT5gbj3j+S36aJb85uiWbs0ETk1nRWadcWaLNE+4luvzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD//y8A3oc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x111) r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x220402, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000"], 0x22}}], 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) ftruncate(r2, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0x2, 0xfffffffd}}, 0x0) 1m4.311490286s ago: executing program 1 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x10}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x60, 0x1, 0x18c49}]}}]}, 0x54}, 0x1, 0xfffd, 0x0, 0x40004}, 0x4000800) 1m0.95800054s ago: executing program 1 (id=72): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_mount_image$ext4(&(0x7f0000001480)='ext2\x00', &(0x7f0000001440)='./file0\x00', 0x300884c, &(0x7f0000000140), 0x3, 0x52d, &(0x7f0000001980)="$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") ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfff, 0x3, 0x8fff}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x10000002, 0x1, 0x2, 0x0, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r7 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000000)={0x6, 0x1, 0x1, "0000087aba10fdfffff8ed001400", 0x31384142}) write$binfmt_elf64(r0, &(0x7f00000010c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x9, 0xff, 0x6, 0x4, 0x2, 0x3e, 0xa, 0x18a, 0x40, 0x1b3, 0x5, 0x5, 0x38, 0x4, 0x6, 0x8, 0xba}, [{0x7, 0x2, 0xd, 0x60000000000000, 0xc, 0x200, 0x7, 0x6}, {0x7, 0xbf0, 0xaa27, 0xa0, 0xfffffffffffffffb, 0x2, 0x80000001, 0x9}, {0x3, 0x2, 0x4, 0x2, 0x1, 0x7fffffffffffffff, 0x4, 0x4}, {0x3, 0xffffffff, 0x8, 0x10000, 0x7, 0x5, 0xfffffffffffffffb, 0x8}], "028401424ad5053d9a0e6f6913c7beb9a33456b21e13468482ae162bffc9cbbc8dac690a4605", ['\x00', '\x00']}, 0x346) 1m0.878869083s ago: executing program 32 (id=72): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_mount_image$ext4(&(0x7f0000001480)='ext2\x00', &(0x7f0000001440)='./file0\x00', 0x300884c, &(0x7f0000000140), 0x3, 0x52d, &(0x7f0000001980)="$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") ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfff, 0x3, 0x8fff}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x10000002, 0x1, 0x2, 0x0, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r7 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000000)={0x6, 0x1, 0x1, "0000087aba10fdfffff8ed001400", 0x31384142}) write$binfmt_elf64(r0, &(0x7f00000010c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x9, 0xff, 0x6, 0x4, 0x2, 0x3e, 0xa, 0x18a, 0x40, 0x1b3, 0x5, 0x5, 0x38, 0x4, 0x6, 0x8, 0xba}, [{0x7, 0x2, 0xd, 0x60000000000000, 0xc, 0x200, 0x7, 0x6}, {0x7, 0xbf0, 0xaa27, 0xa0, 0xfffffffffffffffb, 0x2, 0x80000001, 0x9}, {0x3, 0x2, 0x4, 0x2, 0x1, 0x7fffffffffffffff, 0x4, 0x4}, {0x3, 0xffffffff, 0x8, 0x10000, 0x7, 0x5, 0xfffffffffffffffb, 0x8}], "028401424ad5053d9a0e6f6913c7beb9a33456b21e13468482ae162bffc9cbbc8dac690a4605", ['\x00', '\x00']}, 0x346) 4.534830935s ago: executing program 2 (id=715): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002100)=0x18c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4604}, 0x24044800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff6401010214000300ff"], 0x5c}}, 0x20040040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="12de4bd58b878e4f58884ce5990517c32c90d37474f96953c38095664a4e662a90aa2322f39266bda4b0b9209c54381ceb721b2a7f3780f02d54ddccec06b3f16dfc79eb7e4dd882cce96300768e6514dde82b223d962f5259ccb5deb2bf8db91d425b6a26f5acf44547fe1bef7cb6d0fbffffffbab6964444a0474fe6e6dead4abf849ca0"], 0x1c}}, 0x4000054) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r9, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000800)={r10}, &(0x7f0000000180)=0x8) 3.6140352s ago: executing program 2 (id=729): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffe7d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 2.559635997s ago: executing program 2 (id=745): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x80, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffff8, 0x95, 0x6, {0x9, 0x2, 0x400, 0x1, 0x5b40}, {0x9e, 0x0, 0x3, 0x7fff, 0x2, 0xff}, 0x800, 0x0, 0x56db}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.490014063s ago: executing program 4 (id=746): syz_io_uring_complete(0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x11, 0x3, 0xd, 0x8000, 0x2, "70e6de6caaad1cbaa511ec16a8c99b346b9137", 0xffff0000, 0x41}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d000000010902"], 0x0) 2.488965965s ago: executing program 0 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x4, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xfff, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc40}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x2, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x8}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0xd, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.460769677s ago: executing program 0 (id=749): r0 = userfaultfd(0x80001) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000030c0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2.422943872s ago: executing program 2 (id=750): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000023c0)={0x0, 0x3, 0x0, [0x4, 0x5, 0x7, 0x2949, 0x7fff], [0x8, 0x800, 0x8000, 0x7fffffff, 0x8, 0xfffffffffffffff7, 0x9, 0x6, 0xa, 0xfffffffeffffffff, 0x8, 0x629, 0x40, 0x3, 0x1, 0x0, 0x2, 0x101, 0x6, 0xd28, 0x100000001, 0x7, 0x4, 0x1ff, 0x3, 0x7fff, 0x81, 0x2, 0x200, 0x7f, 0x0, 0x9, 0x2e4c, 0xa4a, 0x92, 0x10, 0x5, 0x6, 0x100000001, 0x4, 0x0, 0x5, 0x9, 0x1, 0x8, 0x100000001, 0xffffffff, 0x1, 0x5, 0x3, 0x401, 0x13a93e03, 0x3, 0x12f00000000000, 0x1ff, 0xe1, 0x2, 0x7, 0x8000000000000001, 0xf, 0x9, 0x400000000, 0x3, 0x101, 0x0, 0x0, 0x10001, 0x1, 0xac2, 0xfc5d, 0x264, 0x3, 0x1, 0x2, 0x3, 0x8, 0x4, 0x142, 0x100, 0xd, 0x9, 0x4d9, 0x3, 0x0, 0x8, 0xfffffffffffffff1, 0x9, 0x6, 0xa, 0x2, 0x8000, 0x120000, 0x7, 0x0, 0x3, 0x2, 0x3, 0x5, 0x4, 0x8000000000000001, 0xf69, 0x6, 0xc, 0x7, 0x5, 0x8, 0x4, 0x1ff, 0xda, 0x1000, 0x6, 0xfffffffffffffff9, 0x10001, 0x10000, 0x0, 0x7, 0x5, 0x8, 0xffff, 0x5, 0xa8d5]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000002c40)={0x0, 0x6, {0xde34, @struct={0xfd54, 0x7}, 0x0, 0x3, 0x81, 0x8, 0x7, 0xf, 0xa8, @struct={0x5, 0x6}, 0x6, 0xd8fa, [0x4, 0x7, 0xd5, 0xffff, 0xffffffffffffff5f, 0x6]}, {0xece, @struct={0x3, 0x2}, r5, 0x9, 0x5, 0xffffffffffffffff, 0xf, 0xfffffffffffffffe, 0x2, @usage=0x2, 0x5, 0x8001, [0x7, 0xc9, 0x5, 0x401, 0x100]}, {0x1, @usage=0x3, 0x0, 0xdf5, 0x5, 0x101, 0x10, 0x3, 0x4c2, @usage=0x5, 0x3, 0x9, [0x7, 0x4, 0xffffffffffffffff, 0x8, 0xffffffffffffffab, 0x7]}, {0x7, 0x8, 0x1}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.157988737s ago: executing program 5 (id=754): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.138228227s ago: executing program 5 (id=755): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000340)={[{@dioread_nolock}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket$inet(0x2, 0x3, 0xd) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.930041347s ago: executing program 4 (id=758): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) 1.929495566s ago: executing program 3 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x4, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xfff, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc40}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x2, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x8}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0xd, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.713209085s ago: executing program 4 (id=760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.660461999s ago: executing program 4 (id=761): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x80, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffff8, 0x95, 0x6, {0x9, 0x2, 0x400, 0x1, 0x5b40}, {0x9e, 0x0, 0x3, 0x7fff, 0x2, 0xff}, 0x800, 0x0, 0x56db}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.618897659s ago: executing program 3 (id=762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'macsec0\x00', @ifru_mtu=0xfffffffc}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="074000000000000000000200000014000180060001000200000008000300ac1414aa26e1"], 0x28}}, 0x0) 1.603826468s ago: executing program 0 (id=763): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1.57421389s ago: executing program 0 (id=764): socket$kcm(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000019400)={[{@mb_optimize_scan}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x2c}}], 0x2c}, 0x42, 0x4fc, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) getuid() r3 = syz_io_uring_setup(0x3158, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000000)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00)=[{0x0, 0xf0ff1f00000000}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) 1.573984732s ago: executing program 4 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.498049648s ago: executing program 2 (id=766): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.151661466s ago: executing program 5 (id=767): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x10, 0x8007, 0x100, 0x5}}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00), 0x0, 0x4000841) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.108782206s ago: executing program 5 (id=768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = fsopen(&(0x7f0000004900)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000004940)='inode32', &(0x7f0000000180)="eeaa9c836f52ef60fb28a6ce40926db5bdea84f843eccb83e2ca12b596b9d773ae7220d45b9af0b2b397f82843071e7ea168dd135fb7736b847a614a95223e89de572ca410e698a26484e5", 0x4b) 1.042047266s ago: executing program 5 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r6, {0x10}, {0xb}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 840.575717ms ago: executing program 2 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000000001010400000000000000000200000024000180140001"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x42e}]}}]}, 0x3c}}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 824.503495ms ago: executing program 3 (id=771): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 802.797411ms ago: executing program 4 (id=772): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000001c0)={@local, @remote, 0x1, "f4b6f2317bd831cee7ddf4585530a883e22af6122946a695b29772a4aed0af04", 0x9, 0x40, 0x1, 0x5c}, 0x3c) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 745.263066ms ago: executing program 5 (id=773): r0 = userfaultfd(0x80001) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000030c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 744.162244ms ago: executing program 3 (id=774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 725.044444ms ago: executing program 3 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 85.313482ms ago: executing program 0 (id=776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff0200"/51], 0xfdef) 9.501317ms ago: executing program 3 (id=777): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 0 (id=778): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r6, r8, &(0x7f0000000780)={0x0, 0x280f, 0x1000, 0x2, 0x102, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe30b, 0x10000, 0x0, 0x2de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf845, 0x80081, 0x2, 0x3c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5432, 0x4, 0x4, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1be3, 0x4, 0x3, 0x12f, 0x0, r6}}], 0x4, &(0x7f0000001fc0)={0x2e, 0x4, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x547}, 0x0, r7, '\x00', {0x3, 0x31b, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): [ 33.592625][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.613780][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.629931][ T4707] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.631911][ T4707] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.633945][ T4707] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.652219][ T4707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.666106][ T4707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.913267][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.914741][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.916406][ T4705] bridge_slave_0: entered allmulticast mode [ 33.918871][ T4705] bridge_slave_0: entered promiscuous mode [ 33.921202][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.922624][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.924273][ T4705] bridge_slave_1: entered allmulticast mode [ 33.924715][ T4705] bridge_slave_1: entered promiscuous mode [ 33.952001][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.955064][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.990096][ T4705] team0: Port device team_slave_0 added [ 33.991967][ T4705] team0: Port device team_slave_1 added [ 34.023979][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.025359][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.029555][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.037446][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.038684][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.039923][ T4715] bridge_slave_0: entered allmulticast mode [ 34.041382][ T4715] bridge_slave_0: entered promiscuous mode [ 34.045416][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.046671][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.051017][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.057080][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.057127][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.057228][ T4709] bridge_slave_0: entered allmulticast mode [ 34.057697][ T4709] bridge_slave_0: entered promiscuous mode [ 34.058467][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.062663][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.063903][ T4709] bridge_slave_1: entered allmulticast mode [ 34.064327][ T4709] bridge_slave_1: entered promiscuous mode [ 34.065032][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.065058][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.065109][ T4715] bridge_slave_1: entered allmulticast mode [ 34.065537][ T4715] bridge_slave_1: entered promiscuous mode [ 34.077660][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.078965][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.080227][ T4704] bridge_slave_0: entered allmulticast mode [ 34.081738][ T4704] bridge_slave_0: entered promiscuous mode [ 34.085426][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.086707][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.087960][ T4704] bridge_slave_1: entered allmulticast mode [ 34.089333][ T4704] bridge_slave_1: entered promiscuous mode [ 34.094519][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.097132][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.124828][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.125790][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.129334][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.132596][ T4705] hsr_slave_0: entered promiscuous mode [ 34.133616][ T4705] hsr_slave_1: entered promiscuous mode [ 34.137598][ T4715] team0: Port device team_slave_0 added [ 34.140798][ T4715] team0: Port device team_slave_1 added [ 34.142246][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.154713][ T4709] team0: Port device team_slave_0 added [ 34.169560][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.171005][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.172950][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.174239][ T4709] team0: Port device team_slave_1 added [ 34.177666][ T4704] team0: Port device team_slave_0 added [ 34.178640][ T4704] team0: Port device team_slave_1 added [ 34.181686][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.181733][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.181784][ T4720] bridge_slave_0: entered allmulticast mode [ 34.182560][ T4720] bridge_slave_0: entered promiscuous mode [ 34.186254][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.186270][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.186292][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.194498][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.194566][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.194632][ T4720] bridge_slave_1: entered allmulticast mode [ 34.195251][ T4720] bridge_slave_1: entered promiscuous mode [ 34.204332][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.204366][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.204378][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.208507][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.208516][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.208532][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.213994][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.219490][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.219499][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.219515][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.220280][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.220290][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.220306][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.221680][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.227205][ T4715] hsr_slave_0: entered promiscuous mode [ 34.227543][ T4715] hsr_slave_1: entered promiscuous mode [ 34.227743][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 34.227781][ T4715] Cannot create hsr debugfs directory [ 34.257573][ T4720] team0: Port device team_slave_0 added [ 34.258982][ T4720] team0: Port device team_slave_1 added [ 34.266881][ T4709] hsr_slave_0: entered promiscuous mode [ 34.267235][ T4709] hsr_slave_1: entered promiscuous mode [ 34.267436][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 34.267448][ T4709] Cannot create hsr debugfs directory [ 34.288683][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.288715][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.288742][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.298978][ T4704] hsr_slave_0: entered promiscuous mode [ 34.299548][ T4704] hsr_slave_1: entered promiscuous mode [ 34.299828][ T4704] debugfs: 'hsr0' already exists in 'hsr' [ 34.299839][ T4704] Cannot create hsr debugfs directory [ 34.300140][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.300146][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.300158][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.350975][ T4720] hsr_slave_0: entered promiscuous mode [ 34.351333][ T4720] hsr_slave_1: entered promiscuous mode [ 34.351536][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 34.351546][ T4720] Cannot create hsr debugfs directory [ 34.393162][ T4705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.397497][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.406435][ T4705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.408645][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.416444][ T4705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.418642][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.427100][ T4705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.429439][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.450638][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.452849][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.454425][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.456644][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.458168][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.460491][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.465135][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.467247][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.482121][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.482173][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.482332][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.482361][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.487411][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.487450][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.487526][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.487563][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.505587][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.508195][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.509789][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.511752][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.513486][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.515500][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.517073][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.519159][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.544567][ T4704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.547431][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.548919][ T4704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.550958][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.555665][ T4704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.558147][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.560083][ T4704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.562053][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.570475][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.572575][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.572623][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.572708][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.572745][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.586665][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.594203][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.595507][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.598509][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.599843][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.600978][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.602251][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.610738][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.616823][ T4720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.618953][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.620497][ T4720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.622601][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.627248][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.627308][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.632028][ T4720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.635064][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.643711][ T4720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.645602][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.649294][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.649334][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.658786][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.662142][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.665053][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.665093][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.681742][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.687800][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.687839][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.688204][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.688223][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.694433][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.694472][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.708785][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.708819][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.720975][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.729032][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.730989][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.758008][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.771874][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.779018][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.779060][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.781819][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.800985][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.801028][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.801488][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.801507][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.824876][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.824924][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.832209][ T4704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.835951][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.901114][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.917728][ T4715] veth0_vlan: entered promiscuous mode [ 34.919398][ T4715] veth1_vlan: entered promiscuous mode [ 34.946551][ T4715] veth0_macvtap: entered promiscuous mode [ 34.962603][ T4715] veth1_macvtap: entered promiscuous mode [ 34.968818][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.971631][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.977903][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.981771][ T4854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.981872][ T4854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.981896][ T4854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.981910][ T4854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.003491][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.006473][ T4705] veth0_vlan: entered promiscuous mode [ 35.009856][ T4705] veth1_vlan: entered promiscuous mode [ 35.027779][ T4705] veth0_macvtap: entered promiscuous mode [ 35.051227][ T4705] veth1_macvtap: entered promiscuous mode [ 35.058131][ T4854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.058157][ T4854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.067101][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.068069][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.071625][ T3081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.077709][ T1299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.077965][ T1299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.078050][ T1299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.092043][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.118021][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.118051][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.158601][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.158636][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.163539][ T4720] veth0_vlan: entered promiscuous mode [ 35.168460][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.177282][ T4720] veth1_vlan: entered promiscuous mode [ 35.186613][ T4709] veth0_vlan: entered promiscuous mode [ 35.196156][ T4704] veth0_vlan: entered promiscuous mode [ 35.197889][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.197916][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.201867][ T4704] veth1_vlan: entered promiscuous mode [ 35.203694][ T4715] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.205992][ T4709] veth1_vlan: entered promiscuous mode [ 35.213436][ T4704] veth0_macvtap: entered promiscuous mode [ 35.215580][ T4704] veth1_macvtap: entered promiscuous mode [ 35.222244][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.224940][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.245606][ T4720] veth0_macvtap: entered promiscuous mode [ 35.252395][ T1120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.252484][ T1120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.252538][ T1120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.262603][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.264937][ T4720] veth1_macvtap: entered promiscuous mode [ 35.267773][ T4709] veth0_macvtap: entered promiscuous mode [ 35.278738][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.280833][ T4709] veth1_macvtap: entered promiscuous mode [ 35.292180][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.309495][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.310571][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.318621][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318804][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318831][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318849][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318865][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318880][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318895][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318909][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.336884][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 35.343069][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.344359][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.364453][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.364478][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.392285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.394683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.418706][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.418736][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.423891][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.423918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.445501][ T4895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7'. [ 35.459592][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.459619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.462171][ T4894] loop3: detected capacity change from 0 to 4096 [ 35.483841][ T4894] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.489136][ T4894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.493220][ T4904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9'. [ 35.551853][ T4908] loop1: detected capacity change from 0 to 128 [ 35.558533][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.566035][ T4908] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.582240][ T4908] syzkaller0: entered promiscuous mode [ 35.583456][ T4908] syzkaller0: entered allmulticast mode [ 35.597950][ T4908] syz.1.10 (pid 4908) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 35.598472][ T4908] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 35.598569][ T4908] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 35.613296][ T4712] Bluetooth: hci3: command tx timeout [ 35.613470][ T4712] Bluetooth: hci1: command tx timeout [ 35.613547][ T4712] Bluetooth: hci0: command tx timeout [ 35.637326][ T4918] loop2: detected capacity change from 0 to 256 [ 35.707928][ T4707] Bluetooth: hci4: command tx timeout [ 35.708262][ T4707] Bluetooth: hci2: command tx timeout [ 35.821793][ T30] audit: type=1326 audit(35.800:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4915 comm="syz.2.12" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95777b68 code=0x0 [ 35.939826][ T30] audit: type=1326 audit(35.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.942030][ T30] audit: type=1326 audit(35.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.948290][ T30] audit: type=1326 audit(35.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.949649][ T30] audit: type=1326 audit(35.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.952397][ T30] audit: type=1326 audit(35.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.952417][ T30] audit: type=1326 audit(35.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.952432][ T30] audit: type=1326 audit(35.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.952489][ T30] audit: type=1326 audit(35.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 35.952578][ T30] audit: type=1326 audit(35.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4922 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x7ffc0000 [ 36.004308][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.006175][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.011378][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.015871][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.134019][ T4929] loop3: detected capacity change from 0 to 8 [ 36.138715][ T4929] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 36.138749][ T4929] unable to read xattr id index table [ 36.618638][ T4936] loop2: detected capacity change from 0 to 2048 [ 36.635755][ T4936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.650959][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 36.888389][ T4955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22'. [ 36.989346][ T4965] loop3: detected capacity change from 0 to 256 [ 37.422584][ T4937] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 37.434196][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.585105][ T4975] ======================================================= [ 37.585105][ T4975] WARNING: The mand mount option has been deprecated and [ 37.585105][ T4975] and is ignored by this kernel. Remove the mand [ 37.585105][ T4975] option from the mount to silence this warning. [ 37.585105][ T4975] ======================================================= [ 37.587320][ T4975] hsr0: entered promiscuous mode [ 37.650893][ T4977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.651082][ T4977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.692936][ T4707] Bluetooth: hci3: command tx timeout [ 37.693726][ T4712] Bluetooth: hci1: command tx timeout [ 37.783129][ T4707] Bluetooth: hci4: command tx timeout [ 37.783232][ T4712] Bluetooth: hci2: command tx timeout [ 37.827648][ T4980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29'. [ 37.847442][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 38.054708][ T4704] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.069673][ T4993] loop0: detected capacity change from 0 to 512 [ 38.085742][ T4993] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 38.090023][ T4994] loop3: detected capacity change from 0 to 8 [ 38.091925][ T4994] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 38.091943][ T4994] unable to read xattr id index table [ 38.108644][ T4697] udevd[4697]: incorrect ext4 checksum on /dev/loop0 [ 38.124515][ T4697] udevd[4697]: incorrect ext4 checksum on /dev/loop0 [ 38.242391][ T4996] C: renamed from veth1_to_team (while UP) [ 38.244744][ T4996] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 38.246529][ T4996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.37'. [ 38.248798][ T4996] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 38.628343][ T5008] loop4: detected capacity change from 0 to 512 [ 38.629404][ T5009] loop1: detected capacity change from 0 to 512 [ 38.631685][ T5009] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.631715][ T5009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.632204][ T5008] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.632232][ T5008] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 38.638210][ T5009] EXT4-fs (loop1): 1 truncate cleaned up [ 38.642327][ T5009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.691367][ T5012] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.40: bg 0: block 4: invalid block bitmap [ 39.179230][ T5028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 39.227000][ T5026] warning: `syz.3.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.311557][ T5035] C: renamed from veth1_to_team (while UP) [ 39.314177][ T5035] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 39.314208][ T5035] netlink: 152 bytes leftover after parsing attributes in process `syz.0.49'. [ 39.314656][ T5035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 39.605735][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'. [ 39.704806][ T5050] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 39.706688][ T4697] udevd[4697]: incorrect ext4 checksum on /dev/loop0 [ 39.773638][ T4707] Bluetooth: hci3: command tx timeout [ 39.774060][ T4712] Bluetooth: hci1: command tx timeout [ 39.986802][ T4712] Bluetooth: hci2: command 0x040f tx timeout [ 39.986986][ T4712] Bluetooth: hci4: command tx timeout [ 40.305381][ T5066] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 40.305410][ T5066] unable to read xattr id index table [ 40.454371][ T5072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.894468][ T5087] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 40.997696][ T5089] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.65'. [ 41.009148][ T5084] netlink: 'syz.3.65': attribute type 49 has an invalid length. [ 41.301332][ T5093] set_capacity_and_notify: 3 callbacks suppressed [ 41.303740][ T5093] loop4: detected capacity change from 0 to 1024 [ 41.315126][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.337826][ T5093] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.67: Attempting to read directory block (623) that is past i_size (638464) [ 41.342443][ T5093] EXT4-fs (loop4): Remounting filesystem read-only [ 41.545896][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.568324][ T5097] loop4: detected capacity change from 0 to 1024 [ 41.569273][ T5097] EXT4-fs: Ignoring removed orlov option [ 41.569983][ T5097] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.585046][ T5097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.586754][ T5097] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 41.677207][ T5102] loop3: detected capacity change from 0 to 128 [ 41.747595][ T5107] capability: warning: `syz.4.68' uses deprecated v2 capabilities in a way that may be insecure [ 41.966280][ T4707] Bluetooth: hci1: command tx timeout [ 41.966308][ T4707] Bluetooth: hci3: command tx timeout [ 41.990413][ T5107] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 41.990462][ T5107] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.68: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 41.996481][ T5107] EXT4-fs (loop4): Remounting filesystem read-only [ 41.998744][ T5102] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.017457][ T5012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.023010][ T4707] Bluetooth: hci2: command 0x040f tx timeout [ 42.024273][ T4712] Bluetooth: hci4: command tx timeout [ 42.121294][ T5041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.437713][ T5041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.475491][ T5133] loop0: detected capacity change from 0 to 8 [ 42.484323][ T5133] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 42.486824][ T5133] unable to read xattr id index table [ 42.487699][ T5133] unable to read inode lookup table [ 42.493697][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.495726][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.497703][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.499326][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.500967][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.514069][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.530148][ T5139] loop0: detected capacity change from 0 to 512 [ 42.835130][ T4705] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.845780][ T5041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.872329][ T5153] loop4: detected capacity change from 0 to 256 [ 42.879059][ T5139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.898190][ T5139] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.78: corrupted inode contents [ 42.899044][ T5139] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.78: mark_inode_dirty error [ 42.899377][ T5139] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.78: corrupted inode contents [ 42.899516][ T5139] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.78: mark_inode_dirty error [ 42.911600][ T5157] loop3: detected capacity change from 0 to 256 [ 42.983906][ T5041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.990870][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.025046][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 43.025084][ T30] audit: type=1326 audit(43.010:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5152 comm="syz.4.80" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94d77b68 code=0x0 [ 43.031027][ T5165] FAULT_INJECTION: forcing a failure. [ 43.031027][ T5165] name failslab, interval 1, probability 0, space 0, times 1 [ 43.031042][ T5165] CPU: 0 UID: 0 PID: 5165 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT [ 43.031051][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 43.031056][ T5165] Call trace: [ 43.031059][ T5165] show_stack+0x2c/0x3c (C) [ 43.031084][ T5165] __dump_stack+0x30/0x40 [ 43.031095][ T5165] dump_stack_lvl+0xd8/0x12c [ 43.031105][ T5165] dump_stack+0x1c/0x28 [ 43.031114][ T5165] should_fail_ex+0x41c/0x590 [ 43.031124][ T5165] should_failslab+0xc4/0x120 [ 43.031132][ T5165] __kvmalloc_node_noprof+0x160/0x880 [ 43.031142][ T5165] bpf_int_jit_compile+0x55c/0xf90 [ 43.031151][ T5165] __bpf_prog_select_runtime+0x36c/0x6cc [ 43.031162][ T5165] bpf_prog_select_runtime+0x2c/0x3c [ 43.031172][ T5165] bpf_prepare_filter+0xc58/0xd60 [ 43.031180][ T5165] bpf_prog_create_from_user+0x1c4/0x26c [ 43.031187][ T5165] do_seccomp+0x6fc/0xbfc [ 43.031194][ T5165] __arm64_sys_seccomp+0x7c/0x90 [ 43.031201][ T5165] invoke_syscall+0x98/0x244 [ 43.031211][ T5165] el0_svc_common+0xec/0x23c [ 43.031220][ T5165] do_el0_svc+0x4c/0x5c [ 43.031229][ T5165] el0_svc+0x64/0x260 [ 43.031237][ T5165] el0t_64_sync_handler+0x48/0x148 [ 43.031244][ T5165] el0t_64_sync+0x198/0x19c [ 43.100595][ T5162] loop0: detected capacity change from 0 to 8 [ 43.102529][ T5162] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 43.102556][ T5162] unable to read xattr id index table [ 43.293288][ T5041] bridge_slave_1: left allmulticast mode [ 43.293333][ T5041] bridge_slave_1: left promiscuous mode [ 43.293726][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.308153][ T5041] bridge_slave_0: left allmulticast mode [ 43.308180][ T5041] bridge_slave_0: left promiscuous mode [ 43.308509][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.431711][ T5041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.465180][ T5041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.493842][ T5041] bond0 (unregistering): Released all slaves [ 44.022714][ T5218] loop3: detected capacity change from 0 to 256 [ 44.026785][ T5218] vfat: Deprecated parameter 'posix' [ 44.028835][ T5218] FAT-fs: "posix" option is obsolete, not supported now [ 44.041123][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 44.064594][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 44.103881][ T4712] Bluetooth: hci2: command 0x040f tx timeout [ 44.451617][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 44.521163][ T5041] hsr_slave_0: left promiscuous mode [ 44.522285][ T5041] hsr_slave_1: left promiscuous mode [ 44.523751][ T5041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.523788][ T5041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.526694][ T5041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.526729][ T5041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.543090][ T5041] veth1_macvtap: left promiscuous mode [ 44.543134][ T5041] veth0_macvtap: left promiscuous mode [ 44.543171][ T5041] veth1_vlan: left promiscuous mode [ 44.543221][ T5041] veth0_vlan: left promiscuous mode [ 44.683926][ T5041] team0 (unregistering): Port device team_slave_1 removed [ 44.688536][ T5041] team0 (unregistering): Port device team_slave_0 removed [ 44.702007][ T5245] loop2: detected capacity change from 0 to 2048 [ 44.748404][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.748458][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.748935][ T5134] bridge_slave_0: entered allmulticast mode [ 44.749608][ T5134] bridge_slave_0: entered promiscuous mode [ 44.750540][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.750559][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.750618][ T5134] bridge_slave_1: entered allmulticast mode [ 44.751266][ T5134] bridge_slave_1: entered promiscuous mode [ 44.753754][ T5241] tipc: Started in network mode [ 44.753772][ T5241] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 44.754080][ T5241] tipc: Enabled bearer , priority 17 [ 44.770710][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.774125][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.791460][ T5134] team0: Port device team_slave_0 added [ 44.797588][ T5134] team0: Port device team_slave_1 added [ 44.814405][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.814430][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.814457][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.815048][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.815062][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.815081][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.834188][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.861466][ T5134] hsr_slave_0: entered promiscuous mode [ 44.863326][ T5134] hsr_slave_1: entered promiscuous mode [ 44.865751][ T5134] debugfs: 'hsr0' already exists in 'hsr' [ 44.866808][ T5134] Cannot create hsr debugfs directory [ 44.945428][ T5254] syzkaller0: entered promiscuous mode [ 44.946571][ T5254] syzkaller0: entered allmulticast mode [ 45.003109][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 45.008544][ T24] usb 1-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 45.008588][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.008604][ T24] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 45.008614][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.017893][ T24] usb 1-1: config 0 descriptor?? [ 45.525040][ T5278] syz.2.102 (5278): /proc/5277/oom_adj is deprecated, please use /proc/5277/oom_score_adj instead. [ 45.537746][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x2 [ 45.537781][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538226][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538429][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538456][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538473][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538516][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538530][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538543][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.538556][ T24] zydacron 0003:13EC:0006.0001: unknown main item tag 0x0 [ 45.551751][ T24] zydacron 0003:13EC:0006.0001: hidraw0: USB HID v0.06 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 45.554501][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.653198][ T5134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.659626][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.662744][ T5134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.668437][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.735751][ T24] usb 1-1: USB disconnect, device number 2 [ 45.738881][ T5134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.746151][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.084410][ T5134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.097515][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.097732][ T26] tipc: Node number set to 10005162 [ 46.149240][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.160512][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.167970][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.168004][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.186400][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.186449][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.199744][ T5134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.315129][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.392382][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.404882][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 46.551941][ T5134] veth0_vlan: entered promiscuous mode [ 46.563138][ T5134] veth1_vlan: entered promiscuous mode [ 46.569837][ T5134] veth0_macvtap: entered promiscuous mode [ 46.572624][ T5134] veth1_macvtap: entered promiscuous mode [ 46.577963][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.580285][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.640333][ T1120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.640387][ T1120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.640413][ T1120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.640431][ T1120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.772102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.775254][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.777249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.783465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.843564][ T5377] syzkaller0: entered promiscuous mode [ 46.843601][ T5377] syzkaller0: entered allmulticast mode [ 46.864561][ T5377] tipc: Started in network mode [ 46.864593][ T5377] tipc: Node identity 7ab20102371f, cluster identity 4711 [ 46.867083][ T5377] tipc: Enabled bearer , priority 0 [ 46.885266][ T5377] tipc: Resetting bearer [ 46.893507][ T5375] tipc: Resetting bearer [ 46.906297][ T5375] tipc: Disabling bearer [ 46.928339][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 47.002330][ T5388] loop5: detected capacity change from 0 to 128 [ 47.022762][ T5388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.085281][ T5392] syz.3.127 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.149067][ T5388] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 47.514610][ T5134] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.572571][ T24] kernel read not supported for file /ppp (pid: 24 comm: kworker/1:0) [ 47.739036][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 47.744575][ T5425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.774476][ T5425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.804206][ T5425] bond0 (unregistering): Released all slaves [ 47.898405][ T5429] loop4: detected capacity change from 0 to 512 [ 47.900390][ T5429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.903121][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.906291][ T5429] EXT4-fs (loop4): 1 truncate cleaned up [ 47.906749][ T5429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.910283][ T5429] ieee802154 phy0 wpan0: encryption failed: -90 [ 47.950256][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.986908][ T5437] loop4: detected capacity change from 0 to 1024 [ 48.006688][ T5437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.027071][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.065412][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 48.065445][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 48.065455][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 48.065469][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 48.065480][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 48.066596][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 48.066607][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 48.066615][ T24] usb 1-1: Product: syz [ 48.066622][ T24] usb 1-1: Manufacturer: syz [ 48.075987][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 48.075997][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 48.085903][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 48.085937][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 48.447873][ T4351] usb 1-1: USB disconnect, device number 3 [ 49.238824][ T5485] loop4: detected capacity change from 0 to 128 [ 49.239490][ T5485] Smack: duplicate mount options [ 50.086337][ T5507] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.116774][ T5512] trusted_key: syz.5.161 sent an empty control message without MSG_MORE. [ 50.124238][ T5511] syzkaller1: entered promiscuous mode [ 50.125389][ T5511] syzkaller1: entered allmulticast mode [ 50.150256][ T5509] bridge_slave_0: left allmulticast mode [ 50.150341][ T5509] bridge_slave_0: left promiscuous mode [ 50.150431][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.158592][ T5509] bridge_slave_1: left allmulticast mode [ 50.158652][ T5509] bridge_slave_1: left promiscuous mode [ 50.158732][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.202810][ T5509] bond0: (slave bond_slave_0): Releasing backup interface [ 50.307536][ T5509] bond0: (slave bond_slave_1): Releasing backup interface [ 50.358425][ T5509] team0: Port device team_slave_0 removed [ 50.364919][ T5509] team0: Port device team_slave_1 removed [ 50.365233][ T5509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.365245][ T5509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.366738][ T5509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.366748][ T5509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.368368][ T5509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.477780][ T5517] loop4: detected capacity change from 0 to 512 [ 50.486050][ T5517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.511900][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.547022][ T5521] loop0: detected capacity change from 0 to 512 [ 50.551838][ T5524] loop3: detected capacity change from 0 to 128 [ 50.568833][ T5521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.580367][ T5524] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.582116][ T5521] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.170: bg 0: block 228: padding at end of block bitmap is not set [ 50.620427][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.667823][ T5524] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 50.693868][ T4705] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.797049][ T5540] netlink: 292 bytes leftover after parsing attributes in process `syz.3.174'. [ 50.800539][ T5540] netlink: 292 bytes leftover after parsing attributes in process `syz.3.174'. [ 51.258234][ T5561] loop3: detected capacity change from 0 to 512 [ 51.265372][ T5561] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.179: missing EA_INODE flag [ 51.265443][ T5561] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.271291][ T5561] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.179: error while reading EA inode 12 err=-117 [ 51.273003][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.273019][ C0] EXT4-fs (loop3): initial error at time 51: ext4_xattr_inode_iget:441: inode 12 [ 51.273040][ C0] EXT4-fs (loop3): last error at time 51: ext4_xattr_inode_iget:441: inode 12 [ 51.280830][ T5561] loop3: lost filesystem error report for type 5 error -117 [ 51.281574][ T5561] EXT4-fs (loop3): 1 orphan inode deleted [ 51.285632][ T5561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.343509][ T5563] tmpfs: Bad value for 'mpol' [ 52.246198][ T5576] loop2: detected capacity change from 0 to 512 [ 52.251001][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.261896][ T5576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.304517][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.326867][ T5582] syzkaller0: entered promiscuous mode [ 52.326901][ T5582] syzkaller0: entered allmulticast mode [ 52.363006][ T5584] loop4: detected capacity change from 0 to 4096 [ 52.394373][ T5584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.769407][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.194874][ T5607] loop4: detected capacity change from 0 to 512 [ 53.196932][ T5607] ext4: Unknown parameter 'audit' [ 53.960864][ T5620] input: syz0 as /devices/virtual/input/input2 [ 55.616430][ T5624] tipc: Cannot configure node identity twice [ 55.828883][ T5636] loop4: detected capacity change from 0 to 4096 [ 55.833088][ T5636] EXT4-fs: inline encryption not supported [ 55.841054][ T5636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.841080][ T5636] EXT4-fs (loop4): Test dummy encryption mode enabled [ 55.841751][ T5636] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 55.841783][ T5636] System zones: 0-5 [ 55.842756][ T5636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.893778][ T5649] loop3: detected capacity change from 0 to 128 [ 55.909878][ T5653] loop5: detected capacity change from 0 to 128 [ 55.915253][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.924652][ T5653] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.929667][ T5649] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 55.992550][ T5662] loop0: detected capacity change from 0 to 1024 [ 55.995546][ T5134] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.015041][ T5662] EXT4-fs: inline encryption not supported [ 56.018212][ T4705] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.042670][ T5662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.051607][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.051798][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.056181][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.209'. [ 56.081442][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.414112][ T5690] Bluetooth: MGMT ver 1.23 [ 56.903914][ T5697] process 'syz.2.216' launched '/dev/fd/6' with NULL argv: empty string added [ 56.922340][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.923325][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.312446][ T5707] loop3: detected capacity change from 0 to 8 [ 57.472392][ T5707] Filesystem uses "zstd" compression. This is not supported [ 57.599530][ T5718] loop4: detected capacity change from 0 to 1024 [ 57.615532][ T5718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.725916][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 58.021539][ T5726] loop3: detected capacity change from 0 to 512 [ 58.030115][ T5726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.056980][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.149710][ T5739] syzkaller0: entered promiscuous mode [ 58.149742][ T5739] syzkaller0: entered allmulticast mode [ 58.157160][ T5739] tipc: Enabled bearer , priority 0 [ 58.160166][ T5739] tipc: Resetting bearer [ 58.161278][ T5738] tipc: Resetting bearer [ 58.167167][ T5738] tipc: Disabling bearer [ 58.484438][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.129861][ T5793] tipc: Started in network mode [ 59.129896][ T5793] tipc: Node identity 0e740a62eab7, cluster identity 4711 [ 59.129990][ T5793] tipc: Enabled bearer , priority 0 [ 59.135231][ T5793] syzkaller0: entered promiscuous mode [ 59.136183][ T5793] syzkaller0: entered allmulticast mode [ 59.138844][ T5799] loop5: detected capacity change from 0 to 1024 [ 59.142426][ T5799] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 59.142499][ T5799] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.390121][ T5802] tipc: Resetting bearer [ 59.400308][ T5792] tipc: Resetting bearer [ 59.407053][ T5799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.416725][ T5792] tipc: Disabling bearer [ 59.475146][ T5799] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 59.504255][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.645845][ T5821] loop0: detected capacity change from 0 to 256 [ 59.908169][ T5833] netlink: 84 bytes leftover after parsing attributes in process `syz.2.242'. [ 59.974146][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.976865][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.392327][ T5875] input: syz0 as /devices/virtual/input/input3 [ 60.657236][ T5892] netlink: 75 bytes leftover after parsing attributes in process `syz.3.254'. [ 60.954723][ T5894] syzkaller0: entered promiscuous mode [ 60.954762][ T5894] syzkaller0: entered allmulticast mode [ 60.999934][ T5894] tc action pedit offset 4096 out of bounds [ 61.094277][ T5909] input: syz0 as /devices/virtual/input/input4 [ 61.199272][ T5912] block device autoloading is deprecated and will be removed. [ 62.492759][ T5932] xt_hashlimit: size too large, truncated to 1048576 [ 62.510787][ T5935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 62.742249][ T5945] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 62.763935][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.769851][ T5945] bond0: (slave ip6erspan0): making interface the new active one [ 62.771783][ T5945] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 62.914467][ T4712] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 62.921623][ T5962] netlink: 'syz.2.280': attribute type 4 has an invalid length. [ 63.042585][ T5971] binder: 5968:5971 ioctl c0306201 0 returned -14 [ 63.047975][ T5971] binder: 5968:5971 got transaction to invalid handle, 1 [ 63.048272][ T5971] binder: 5968:5971 cannot find target node [ 63.048288][ T5971] binder: 5968:5971 transaction call to 0:0 failed 1/29201/-22, code 0 size 0-0 line 3236 [ 63.049527][ T4806] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.312438][ T5975] loop2: detected capacity change from 0 to 1024 [ 63.329638][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.335165][ T5980] netlink: 56 bytes leftover after parsing attributes in process `syz.4.286'. [ 63.933755][ T6016] input: syz0 as /devices/virtual/input/input5 [ 64.104844][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.167870][ T6022] loop2: detected capacity change from 0 to 4096 [ 64.168205][ T6022] EXT4-fs: inline encryption not supported [ 64.171157][ T6022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.171578][ T6022] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.177446][ T6022] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 64.177523][ T6022] System zones: 0-5 [ 64.180829][ T6022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.214337][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.312464][ T6038] loop0: detected capacity change from 0 to 512 [ 64.318049][ T6038] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.308: iget: bad i_size value: 38620345925642 [ 64.320821][ T6038] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.322887][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 64.322920][ C0] EXT4-fs (loop0): initial error at time 64: ext4_orphan_get:1397: inode 15 [ 64.322964][ C0] EXT4-fs (loop0): last error at time 64: ext4_orphan_get:1397: inode 15 [ 64.329230][ T6038] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.308: couldn't read orphan inode 15 (err -117) [ 64.329263][ T6038] loop0: lost filesystem error report for type 5 error -117 [ 64.330109][ T6038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.496709][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498177][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.614364][ T10] cfg80211: failed to load regulatory.db [ 64.769604][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 64.770709][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 64.783976][ T6060] loop3: detected capacity change from 0 to 4096 [ 64.785568][ T6060] EXT4-fs: inline encryption not supported [ 64.792782][ T6060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.792811][ T6060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 64.805796][ T6060] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 64.805890][ T6060] System zones: 0-5 [ 64.808753][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.830473][ T6067] syzkaller0: entered promiscuous mode [ 64.831477][ T6067] syzkaller0: entered allmulticast mode [ 64.837326][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.861052][ T6070] loop5: detected capacity change from 0 to 512 [ 64.865744][ T6070] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.868750][ T6070] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 64.879872][ T6070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 64.879983][ T6070] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.885350][ T6070] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.319: bg 0: block 361: padding at end of block bitmap is not set [ 64.887740][ T6070] loop5: lost filesystem error report for type 5 error -117 [ 64.889870][ T6070] EXT4-fs (loop5): Remounting filesystem read-only [ 64.892521][ T6070] EXT4-fs (loop5): 1 truncate cleaned up [ 64.893611][ T6070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 65.057990][ T6078] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.319: dx entry: limit 0 != root limit 125 [ 65.058151][ T6078] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.319: Corrupt directory, running e2fsck is recommended [ 65.270287][ T3081] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 65.276043][ T3081] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 65.278862][ T3081] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.278862][ T3081] [ 65.280993][ T3081] EXT4-fs (loop0): Total free blocks count 0 [ 65.282140][ T3081] EXT4-fs (loop0): Free/Dirty block details [ 65.282165][ T3081] EXT4-fs (loop0): free_blocks=0 [ 65.282182][ T3081] EXT4-fs (loop0): dirty_blocks=65 [ 65.282194][ T3081] EXT4-fs (loop0): Block reservation details [ 65.282204][ T3081] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 65.283545][ T4720] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 65.284297][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.340256][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.340436][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.526065][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.529362][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.721227][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 65.886557][ T6095] syzkaller0: entered promiscuous mode [ 65.886603][ T6095] syzkaller0: entered allmulticast mode [ 65.906394][ T4921] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.930900][ T4921] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.930954][ T4921] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.217028][ T6112] input: syz0 as /devices/virtual/input/input6 [ 66.598595][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.330'. [ 66.604789][ T4921] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.665747][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 66.700665][ T6131] syzkaller0: entered promiscuous mode [ 66.702014][ T6131] syzkaller0: entered allmulticast mode [ 66.983668][ T6140] loop3: detected capacity change from 0 to 512 [ 66.987279][ T6140] ext4: Unknown parameter 'audit' [ 67.074279][ T6140] loop3: detected capacity change from 0 to 512 [ 67.240465][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.892374][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.903147][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 67.930284][ T6170] pimreg: entered allmulticast mode [ 68.075213][ T6196] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 68.075830][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.076433][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.691327][ T6207] loop4: detected capacity change from 0 to 8192 [ 68.762458][ T6211] loop4: detected capacity change from 0 to 512 [ 68.768786][ T6211] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.358: iget: bad i_size value: 38620345925642 [ 68.768833][ T6211] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.769984][ T6211] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.358: couldn't read orphan inode 15 (err -117) [ 68.770008][ T6211] loop4: lost filesystem error report for type 5 error -117 [ 68.770597][ T6211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.622419][ T4921] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 69.625452][ T4921] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 69.625476][ T4921] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.625476][ T4921] [ 69.625498][ T4921] EXT4-fs (loop4): Total free blocks count 0 [ 69.625506][ T4921] EXT4-fs (loop4): Free/Dirty block details [ 69.625514][ T4921] EXT4-fs (loop4): free_blocks=0 [ 69.625522][ T4921] EXT4-fs (loop4): dirty_blocks=65 [ 69.625528][ T4921] EXT4-fs (loop4): Block reservation details [ 69.625534][ T4921] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 69.636159][ T6123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.643059][ T4709] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 69.644852][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.714593][ T6232] Zero length message leads to an empty skb [ 69.892229][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.892432][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.171746][ T4885] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 70.513897][ T4885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.534566][ T4885] usb 1-1: not running at top speed; connect to a high speed hub [ 70.539438][ T4885] usb 1-1: config 13 has an invalid interface number: 169 but max is 0 [ 70.539464][ T4885] usb 1-1: config 13 has no interface number 0 [ 70.539478][ T4885] usb 1-1: config 13 interface 169 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 70.539490][ T4885] usb 1-1: config 13 interface 169 has no altsetting 0 [ 70.546422][ T4885] usb 1-1: New USB device found, idVendor=0c52, idProduct=2423, bcdDevice=8b.b7 [ 70.546454][ T4885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.546475][ T4885] usb 1-1: Product: syz [ 70.546484][ T4885] usb 1-1: Manufacturer: syz [ 70.546491][ T4885] usb 1-1: SerialNumber: syz [ 70.626168][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.628204][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.773879][ T4885] ftdi_sio 1-1:13.169: FTDI USB Serial Device converter detected [ 70.774400][ T4885] ftdi_sio ttyUSB0: unknown device type: 0x8bb7 [ 70.777649][ T4885] usb 1-1: USB disconnect, device number 4 [ 70.778946][ T4885] ftdi_sio 1-1:13.169: device disconnected [ 70.871341][ T6275] loop3: detected capacity change from 0 to 4096 [ 70.873159][ T6275] EXT4-fs: inline encryption not supported [ 70.876521][ T6275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.879202][ T6275] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.881268][ T6275] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 70.881319][ T6275] System zones: 0-5 [ 70.889089][ T6275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.904470][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.924705][ T5301] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.924759][ T5301] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.924805][ T5301] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.924830][ T5301] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.441104][ T6290] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.381'. [ 71.666542][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.666764][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.700406][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.702735][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.135540][ T6306] loop3: detected capacity change from 0 to 256 [ 72.163962][ T6308] loop4: detected capacity change from 0 to 4096 [ 72.164618][ T6308] EXT4-fs: inline encryption not supported [ 72.165448][ T6308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.165457][ T6308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.169392][ T6308] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 72.169451][ T6308] System zones: 0-5 [ 72.172756][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.200738][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.720091][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.720246][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.857749][ T6342] loop2: detected capacity change from 0 to 512 [ 72.889641][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.894795][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.914965][ T6330] tipc: Resetting bearer [ 72.924977][ T4351] psmouse serio0: Failed to reset mouse on : -5 [ 73.247044][ T4854] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.263161][ T4854] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.263207][ T4854] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.263247][ T4854] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.414811][ T6377] loop3: detected capacity change from 0 to 256 [ 73.675651][ T4854] Bluetooth: hci5: Frame reassembly failed (-84) [ 73.682836][ T6375] Bluetooth: hci5: Frame reassembly failed (-90) [ 74.063417][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 74.345162][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.345351][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.366669][ T6407] loop3: detected capacity change from 0 to 512 [ 74.385356][ T6407] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.427: iget: bad i_size value: 38620345925642 [ 74.385391][ T6407] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.387545][ T6407] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.427: couldn't read orphan inode 15 (err -117) [ 74.387574][ T6407] loop3: lost filesystem error report for type 5 error -117 [ 74.391562][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.231884][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 75.234943][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 75.234981][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.234981][ T39] [ 75.234990][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 75.234998][ T39] EXT4-fs (loop3): Free/Dirty block details [ 75.235006][ T39] EXT4-fs (loop3): free_blocks=0 [ 75.235014][ T39] EXT4-fs (loop3): dirty_blocks=65 [ 75.235020][ T39] EXT4-fs (loop3): Block reservation details [ 75.235026][ T39] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 75.236431][ T4705] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 75.237182][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.245258][ T6422] capability: warning: `syz.2.429' uses 32-bit capabilities (legacy support in use) [ 75.255734][ T6422] loop2: detected capacity change from 0 to 512 [ 75.271875][ T6422] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.429: iget: bad i_size value: 38620345925642 [ 75.271915][ T6422] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.274204][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.274221][ C0] EXT4-fs (loop2): initial error at time 75: ext4_orphan_get:1397: inode 15 [ 75.274241][ C0] EXT4-fs (loop2): last error at time 75: ext4_orphan_get:1397: inode 15 [ 75.274317][ T6422] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.429: couldn't read orphan inode 15 (err -117) [ 75.274332][ T6422] loop2: lost filesystem error report for type 5 error -117 [ 75.276779][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.315210][ T6429] loop3: detected capacity change from 0 to 2048 [ 75.349327][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.693045][ T4712] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 75.747451][ T6441] loop4: detected capacity change from 0 to 256 [ 75.832924][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.982903][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 75.984072][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.985723][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.985735][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.985743][ T10] usb 1-1: Product: syz [ 75.985750][ T10] usb 1-1: Manufacturer: syz [ 75.985756][ T10] usb 1-1: SerialNumber: syz [ 76.032525][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.435504][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.439607][ T10] cdc_ncm 1-1:1.0: bind() failure [ 76.441588][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 76.441609][ T10] cdc_ncm 1-1:1.1: bind() failure [ 76.452204][ T10] usb 1-1: USB disconnect, device number 5 [ 76.471874][ T6448] loop3: detected capacity change from 0 to 256 [ 76.485979][ T6448] FAT-fs (loop3): Directory bread(block 64) failed [ 76.487608][ T6448] FAT-fs (loop3): Directory bread(block 65) failed [ 76.488884][ T6448] FAT-fs (loop3): Directory bread(block 66) failed [ 76.490358][ T6448] FAT-fs (loop3): Directory bread(block 67) failed [ 76.491663][ T6448] FAT-fs (loop3): Directory bread(block 68) failed [ 76.493034][ T6448] FAT-fs (loop3): Directory bread(block 69) failed [ 76.493077][ T6448] FAT-fs (loop3): Directory bread(block 70) failed [ 76.493092][ T6448] FAT-fs (loop3): Directory bread(block 71) failed [ 76.493119][ T6448] FAT-fs (loop3): Directory bread(block 72) failed [ 76.493130][ T6448] FAT-fs (loop3): Directory bread(block 73) failed [ 76.854963][ T1003] IPVS: starting estimator thread 0... [ 76.962992][ T6459] IPVS: using max 59 ests per chain, 141600 per kthread [ 77.034673][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 77.062941][ T4351] misc userio: Buffer overflowed, userio client isn't keeping up [ 77.112698][ T6472] bridge_slave_0: left allmulticast mode [ 77.112727][ T6472] bridge_slave_0: left promiscuous mode [ 77.112807][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.117055][ T6472] bridge_slave_1: left allmulticast mode [ 77.117077][ T6472] bridge_slave_1: left promiscuous mode [ 77.117149][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.121702][ T6472] bond0: (slave bond_slave_0): Releasing backup interface [ 77.144674][ T6472] bond0: (slave bond_slave_1): Releasing backup interface [ 77.165035][ T6472] team0: Port device team_slave_0 removed [ 77.166473][ T6472] team0: Port device team_slave_1 removed [ 77.166593][ T6472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.169053][ T6472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.170762][ T6472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.713413][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.713610][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.735943][ T6482] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.737775][ T6482] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.899151][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.899343][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.183885][ T1003] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 78.198139][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 78.319201][ T6510] syzkaller0: entered promiscuous mode [ 78.319232][ T6510] syzkaller0: entered allmulticast mode [ 78.334258][ T4351] input: PS/2 Generic Mouse as /devices/serio0/input/input7 [ 78.334291][ T1003] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.334313][ T1003] usb 1-1: config 0 has no interface number 0 [ 78.346665][ T1003] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 78.346696][ T1003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.346719][ T1003] usb 1-1: Product: syz [ 78.346733][ T1003] usb 1-1: Manufacturer: syz [ 78.346746][ T1003] usb 1-1: SerialNumber: syz [ 78.353382][ T1003] usb 1-1: config 0 descriptor?? [ 78.356958][ T1003] usb 1-1: selecting invalid altsetting 1 [ 78.360190][ T1003] dvb_ttusb_budget: ttusb_init_controller: error [ 78.361565][ T1003] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 78.386298][ T1003] DVB: Unable to find symbol stv0299_attach() [ 78.396946][ T1003] DVB: Unable to find symbol tda8083_attach() [ 78.398152][ T1003] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 78.542997][ T4351] psmouse serio0: Failed to enable mouse on [ 78.560662][ T1003] usb 1-1: USB disconnect, device number 6 [ 79.441956][ T6555] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 79.441991][ T6555] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 79.454599][ T6556] blkio.reset_stats is deprecated [ 79.985865][ T6529] Set syz1 is full, maxelem 65536 reached [ 80.367519][ T6590] syzkaller0: entered promiscuous mode [ 80.368629][ T6590] syzkaller0: entered allmulticast mode [ 80.442345][ T6595] loop5: detected capacity change from 0 to 4096 [ 80.445982][ T6595] EXT4-fs: inline encryption not supported [ 80.447784][ T6595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.449593][ T6595] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.722467][ T6595] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 80.722556][ T6595] System zones: 0-5 [ 80.732742][ T6595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.759606][ T6602] loop2: detected capacity change from 0 to 256 [ 80.795432][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.434591][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.503'. [ 81.633215][ T6632] loop5: detected capacity change from 0 to 4096 [ 81.634665][ T6632] EXT4-fs: inline encryption not supported [ 81.637247][ T6632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.637284][ T6632] EXT4-fs (loop5): Test dummy encryption mode enabled [ 81.640556][ T6632] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 81.640610][ T6632] System zones: 0-5 [ 81.641514][ T6632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.662740][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.877098][ T6646] loop2: detected capacity change from 0 to 512 [ 81.877218][ T6652] loop4: detected capacity change from 0 to 256 [ 81.887383][ T6646] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.511: iget: bad i_size value: 38620345925642 [ 81.889713][ T6646] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.891034][ T6646] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.511: couldn't read orphan inode 15 (err -117) [ 81.891072][ T6646] loop2: lost filesystem error report for type 5 error -117 [ 81.892882][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 81.892898][ C0] EXT4-fs (loop2): initial error at time 81: ext4_orphan_get:1397: inode 15 [ 81.892916][ C0] EXT4-fs (loop2): last error at time 81: ext4_orphan_get:1402 [ 81.902484][ T6646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.326075][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 82.607616][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 82.607787][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 82.703472][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 82.703839][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 82.703852][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.703852][ T12] [ 82.703859][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 82.703866][ T12] EXT4-fs (loop2): Free/Dirty block details [ 82.703872][ T12] EXT4-fs (loop2): free_blocks=0 [ 82.703880][ T12] EXT4-fs (loop2): dirty_blocks=65 [ 82.703885][ T12] EXT4-fs (loop2): Block reservation details [ 82.703891][ T12] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 82.708012][ T4715] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 82.708745][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.738234][ T6670] syzkaller1: entered promiscuous mode [ 82.738268][ T6670] syzkaller1: entered allmulticast mode [ 82.800319][ T6678] loop4: detected capacity change from 0 to 512 [ 82.800670][ T6678] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.830612][ T6678] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.858939][ T6678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 82.859065][ T6678] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.859217][ T6678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.523: bg 0: block 361: padding at end of block bitmap is not set [ 82.859235][ T6678] loop4: lost filesystem error report for type 5 error -117 [ 82.864209][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 82.864225][ C0] EXT4-fs (loop4): initial error at time 82: ext4_validate_block_bitmap:441 [ 82.864237][ C0] EXT4-fs (loop4): last error at time 82: ext4_validate_block_bitmap:441 [ 82.869826][ T6678] EXT4-fs (loop4): Remounting filesystem read-only [ 82.872999][ T6678] EXT4-fs (loop4): 1 truncate cleaned up [ 82.873896][ T6678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 82.885483][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 83.096280][ T6690] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.523: dx entry: limit 0 != root limit 125 [ 83.096362][ T6690] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.523: Corrupt directory, running e2fsck is recommended [ 83.357876][ T6705] loop0: detected capacity change from 0 to 256 [ 83.575718][ T6709] tipc: Started in network mode [ 83.575754][ T6709] tipc: Node identity e65f64a70622, cluster identity 4711 [ 83.575820][ T6709] tipc: Enabled bearer , priority 0 [ 83.579638][ T6709] syzkaller0: entered promiscuous mode [ 83.580634][ T6709] syzkaller0: entered allmulticast mode [ 83.589310][ T6709] tipc: Resetting bearer [ 83.591739][ T6708] tipc: Resetting bearer [ 83.596919][ T6708] tipc: Disabling bearer [ 83.667450][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 83.750833][ T6718] syzkaller1: entered promiscuous mode [ 83.750861][ T6718] syzkaller1: entered allmulticast mode [ 84.164781][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 84.212709][ T6737] loop5: detected capacity change from 0 to 512 [ 84.216226][ T6737] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.219149][ T6737] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.222399][ T6737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 84.224937][ T6737] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.226995][ T6737] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.548: bg 0: block 361: padding at end of block bitmap is not set [ 84.229751][ T6737] loop5: lost filesystem error report for type 5 error -117 [ 84.230097][ T6737] EXT4-fs (loop5): Remounting filesystem read-only [ 84.232894][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 84.232909][ C1] EXT4-fs (loop5): initial error at time 84: ext4_validate_block_bitmap:441 [ 84.232924][ C1] EXT4-fs (loop5): last error at time 84: ext4_validate_block_bitmap:441 [ 84.240781][ T6737] EXT4-fs (loop5): 1 truncate cleaned up [ 84.243456][ T6737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 84.424070][ T6749] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.548: dx entry: limit 0 != root limit 125 [ 84.424153][ T6749] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.548: Corrupt directory, running e2fsck is recommended [ 84.749611][ T6765] loop4: detected capacity change from 0 to 256 [ 84.751597][ T6765] vfat: Bad value for 'fmask' [ 84.754924][ T6764] syzkaller0: entered promiscuous mode [ 84.756111][ T6764] syzkaller0: entered allmulticast mode [ 84.782578][ T6767] loop4: detected capacity change from 0 to 256 [ 84.857119][ T6771] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.558: iget: bad i_size value: 38620345925642 [ 84.857160][ T6771] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.857563][ T6771] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.558: couldn't read orphan inode 15 (err -117) [ 84.857581][ T6771] loop2: lost filesystem error report for type 5 error -117 [ 84.859283][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.312965][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 85.326638][ T6777] netlink: 84 bytes leftover after parsing attributes in process `syz.0.560'. [ 85.471298][ T6794] usb usb8: usbfs: process 6794 (syz.3.566) did not claim interface 0 before use [ 85.756804][ T1120] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 85.763222][ T1120] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 85.763252][ T1120] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.763252][ T1120] [ 85.763268][ T1120] EXT4-fs (loop2): Total free blocks count 0 [ 85.763281][ T1120] EXT4-fs (loop2): Free/Dirty block details [ 85.763293][ T1120] EXT4-fs (loop2): free_blocks=0 [ 85.763304][ T1120] EXT4-fs (loop2): dirty_blocks=65 [ 85.763314][ T1120] EXT4-fs (loop2): Block reservation details [ 85.763323][ T1120] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 85.766451][ T4715] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 85.767280][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.821347][ T6810] netlink: 84 bytes leftover after parsing attributes in process `syz.3.573'. [ 85.910879][ T6824] set_capacity_and_notify: 1 callbacks suppressed [ 85.914839][ T6824] loop5: detected capacity change from 0 to 256 [ 85.966564][ T6829] loop3: detected capacity change from 0 to 512 [ 85.978825][ T6829] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.582: iget: bad i_size value: 38620345925642 [ 85.978893][ T6829] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.981402][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.981580][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.983530][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 85.983543][ C0] EXT4-fs (loop3): initial error at time 85: ext4_orphan_get:1397: inode 15 [ 85.983563][ C0] EXT4-fs (loop3): last error at time 85: ext4_orphan_get:1397: inode 15 [ 85.994601][ T6829] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.582: couldn't read orphan inode 15 (err -117) [ 85.994639][ T6829] loop3: lost filesystem error report for type 5 error -117 [ 86.000033][ T6829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.071451][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.071658][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.442465][ T6838] loop5: detected capacity change from 0 to 128 [ 86.913296][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 86.934391][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 86.934429][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.934429][ T12] [ 86.934449][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 86.934463][ T12] EXT4-fs (loop3): Free/Dirty block details [ 86.934476][ T12] EXT4-fs (loop3): free_blocks=0 [ 86.934487][ T12] EXT4-fs (loop3): dirty_blocks=65 [ 86.934498][ T12] EXT4-fs (loop3): Block reservation details [ 86.934507][ T12] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 86.952185][ T4705] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 86.953044][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.030041][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.030239][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.110015][ T6848] netlink: 76 bytes leftover after parsing attributes in process `syz.3.588'. [ 87.221612][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.592'. [ 87.253027][ T6861] loop3: detected capacity change from 0 to 256 [ 87.348005][ T6866] netlink: 'syz.5.595': attribute type 1 has an invalid length. [ 87.388660][ T6866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.390035][ T6866] bond1: (slave bond2): making interface the new active one [ 87.391761][ T6866] bond1: (slave bond2): Enslaving as an active interface with an up link [ 87.406275][ T6866] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 87.411950][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.595'. [ 87.413882][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.710958][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.711139][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.876528][ T6891] loop0: detected capacity change from 0 to 256 [ 87.922284][ T6894] binder: 6893:6894 tried to acquire reference to desc 0, got 1 instead [ 87.922433][ T6894] binder: 6893:6894 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.922444][ T6894] binder: 6894 RLIMIT_NICE not set [ 87.973955][ T6894] binder: send failed reply for transaction 6 to 6893:6895 [ 87.974199][ T4807] binder: undelivered TRANSACTION_COMPLETE [ 87.974211][ T4807] binder: undelivered TRANSACTION_ERROR: 29189 [ 88.377561][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.379979][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.779173][ T6917] loop2: detected capacity change from 0 to 256 [ 88.838177][ T6921] tipc: Enabled bearer , priority 0 [ 88.839877][ T6921] syzkaller0: entered promiscuous mode [ 88.841276][ T6921] syzkaller0: entered allmulticast mode [ 88.844565][ T6921] tipc: Resetting bearer [ 88.849462][ T6920] tipc: Resetting bearer [ 88.854521][ T6920] tipc: Disabling bearer [ 89.004574][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 89.174059][ T6933] loop4: detected capacity change from 0 to 512 [ 89.177108][ T6933] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.178904][ T6933] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 89.483060][ T6933] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 90.237827][ T6933] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.238050][ T6933] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.620: bg 0: block 361: padding at end of block bitmap is not set [ 90.238069][ T6933] loop4: lost filesystem error report for type 5 error -117 [ 90.246601][ T6933] EXT4-fs (loop4): Remounting filesystem read-only [ 90.252886][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 90.252915][ C1] EXT4-fs (loop4): initial error at time 90: ext4_validate_block_bitmap:441 [ 90.252944][ C1] EXT4-fs (loop4): last error at time 90: ext4_validate_block_bitmap:441 [ 90.258453][ T6933] EXT4-fs (loop4): 1 truncate cleaned up [ 90.258912][ T6933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 90.281635][ T6941] loop2: detected capacity change from 0 to 512 [ 90.343153][ T6941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.363624][ T6941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.385544][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.440993][ T6953] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.620: dx entry: limit 0 != root limit 125 [ 90.441069][ T6953] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.620: Corrupt directory, running e2fsck is recommended [ 90.631780][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 90.699006][ T6959] syzkaller0: entered promiscuous mode [ 90.699039][ T6959] syzkaller0: entered allmulticast mode [ 91.018561][ T6973] loop0: detected capacity change from 0 to 256 [ 91.019628][ T6971] tipc: Enabled bearer , priority 0 [ 91.019933][ T6971] syzkaller0: entered promiscuous mode [ 91.019945][ T6971] syzkaller0: entered allmulticast mode [ 91.021613][ T6971] tipc: Resetting bearer [ 91.026190][ T6970] tipc: Resetting bearer [ 91.035249][ T6970] tipc: Disabling bearer [ 91.107538][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 91.180301][ T6982] loop5: detected capacity change from 0 to 512 [ 91.182402][ T6982] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.198727][ T6982] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 91.202153][ T6982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 91.202263][ T6982] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.205384][ T6982] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.639: bg 0: block 361: padding at end of block bitmap is not set [ 91.205417][ T6982] loop5: lost filesystem error report for type 5 error -117 [ 91.209280][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 91.210361][ T6982] EXT4-fs (loop5): 1 truncate cleaned up [ 91.210817][ T6982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 91.476087][ T6988] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.639: dx entry: limit 0 != root limit 125 [ 91.476131][ T6988] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.639: Corrupt directory, running e2fsck is recommended [ 91.870183][ T7000] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 91.895136][ T7000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.896546][ T7000] bond1: (slave bond2): making interface the new active one [ 91.898184][ T7000] bond1: (slave bond2): Enslaving as an active interface with an up link [ 91.904489][ T7000] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 91.905471][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 91.906242][ T7000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.043869][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 93.031543][ T7030] loop3: detected capacity change from 0 to 256 [ 93.064763][ T7033] loop0: detected capacity change from 0 to 512 [ 93.077893][ T7033] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.655: iget: bad i_size value: 38620345925642 [ 93.077929][ T7033] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.078106][ T7033] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.655: couldn't read orphan inode 15 (err -117) [ 93.078124][ T7033] loop0: lost filesystem error report for type 5 error -117 [ 93.078677][ T7033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.792447][ T7047] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 93.876094][ T7053] loop5: detected capacity change from 0 to 512 [ 93.877757][ T7053] EXT4-fs: Ignoring removed bh option [ 93.881529][ T7053] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.661: corrupted xattr block 95: invalid header [ 93.885778][ T7053] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.886641][ T7053] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.661: bg 0: block 7: invalid block bitmap [ 93.890751][ T7053] loop5: lost filesystem error report for type 5 error -117 [ 93.891541][ T7053] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.892903][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 93.892916][ C1] EXT4-fs (loop5): initial error at time 93: ext4_expand_extra_isize_ea:2810: inode 11 [ 93.892933][ C1] EXT4-fs (loop5): last error at time 93: ext4_validate_block_bitmap:432 [ 93.899219][ T7053] loop5: lost filesystem error report for type 5 error -117 [ 93.917363][ T7053] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.661: corrupted xattr block 95: invalid header [ 93.921295][ T7053] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.921725][ T7053] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 93.923533][ T7053] EXT4-fs (loop5): 1 orphan inode deleted [ 93.924001][ T7053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.930521][ T3081] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 93.931142][ T3081] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 93.931157][ T3081] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.931157][ T3081] [ 93.931164][ T3081] EXT4-fs (loop0): Total free blocks count 0 [ 93.931170][ T3081] EXT4-fs (loop0): Free/Dirty block details [ 93.931177][ T3081] EXT4-fs (loop0): free_blocks=0 [ 93.931185][ T3081] EXT4-fs (loop0): dirty_blocks=65 [ 93.931190][ T3081] EXT4-fs (loop0): Block reservation details [ 93.931196][ T3081] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 93.932155][ T4720] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 93.935234][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.948797][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.948996][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.083992][ T7063] mmap: syz.2.665 (7063) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.218719][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 94.285890][ T7079] loop2: detected capacity change from 0 to 512 [ 94.286252][ T7079] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.290947][ T7079] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 94.294029][ T7079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 94.294175][ T7079] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.297084][ T7079] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.672: bg 0: block 361: padding at end of block bitmap is not set [ 94.300030][ T7079] loop2: lost filesystem error report for type 5 error -117 [ 94.300516][ T7079] EXT4-fs (loop2): Remounting filesystem read-only [ 94.303176][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 94.303186][ C0] EXT4-fs (loop2): initial error at time 94: ext4_validate_block_bitmap:441 [ 94.303198][ C0] EXT4-fs (loop2): last error at time 94: ext4_validate_block_bitmap:441 [ 94.307497][ T7079] EXT4-fs (loop2): 1 truncate cleaned up [ 94.307983][ T7079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 94.471472][ T7082] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.672: dx entry: limit 0 != root limit 125 [ 94.471559][ T7082] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.672: Corrupt directory, running e2fsck is recommended [ 94.647815][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.782657][ T6994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.946144][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 94.989519][ T7107] syzkaller1: entered promiscuous mode [ 94.989552][ T7107] syzkaller1: entered allmulticast mode [ 95.150389][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 95.300524][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 95.450412][ T7130] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.452602][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.452912][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.996740][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 96.034854][ T7134] Set syz1 is full, maxelem 65536 reached [ 96.096610][ T7146] loop3: detected capacity change from 0 to 512 [ 96.101947][ T7148] tipc: Enabled bearer , priority 0 [ 96.103165][ T7148] tipc: Resetting bearer [ 96.105359][ T7146] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.107761][ T7146] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 96.108697][ T7146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 96.108783][ T7146] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.110649][ T7146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.698: bg 0: block 361: padding at end of block bitmap is not set [ 96.110671][ T7146] loop3: lost filesystem error report for type 5 error -117 [ 96.112301][ T7146] EXT4-fs (loop3): Remounting filesystem read-only [ 96.114133][ T7146] EXT4-fs (loop3): 1 truncate cleaned up [ 96.114634][ T7146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 96.115438][ T7148] tipc: Resetting bearer [ 96.470358][ T7153] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.698: dx entry: limit 0 != root limit 125 [ 96.470403][ T7153] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.698: Corrupt directory, running e2fsck is recommended [ 96.952366][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 97.092996][ T4885] tipc: Node number set to 3837987426 [ 97.872198][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 97.980474][ T7186] bridge_slave_0: left allmulticast mode [ 97.981710][ T7186] bridge_slave_0: left promiscuous mode [ 97.984431][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.988181][ T7186] bridge_slave_1: left allmulticast mode [ 97.988206][ T7186] bridge_slave_1: left promiscuous mode [ 97.988275][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.994603][ T7186] bond0: (slave bond_slave_0): Releasing backup interface [ 98.022041][ T7190] loop4: detected capacity change from 0 to 512 [ 98.025899][ T7190] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.034245][ T7186] bond0: (slave bond_slave_1): Releasing backup interface [ 98.035981][ T7190] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.040457][ T7190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 98.042097][ T7190] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.044650][ T7190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.712: bg 0: block 361: padding at end of block bitmap is not set [ 98.047382][ T7190] loop4: lost filesystem error report for type 5 error -117 [ 98.047595][ T7190] EXT4-fs (loop4): Remounting filesystem read-only [ 98.050733][ T7190] EXT4-fs (loop4): 1 truncate cleaned up [ 98.052342][ T7190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 98.114093][ T7186] team0: Port device team_slave_0 removed [ 98.124042][ T7186] team0: Port device team_slave_1 removed [ 98.124393][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.124405][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.125851][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.125862][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.127567][ T7186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.214585][ T7195] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.712: dx entry: limit 0 != root limit 125 [ 98.214623][ T7195] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.712: Corrupt directory, running e2fsck is recommended [ 98.446894][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.449355][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.463536][ T7182] Set syz1 is full, maxelem 65536 reached [ 98.479094][ T7198] loop0: detected capacity change from 0 to 512 [ 98.487384][ T7198] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.487717][ T7198] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.488316][ T7198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 98.488396][ T7198] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.488741][ T7198] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.714: bg 0: block 361: padding at end of block bitmap is not set [ 98.488755][ T7198] loop0: lost filesystem error report for type 5 error -117 [ 98.488898][ T7198] EXT4-fs (loop0): Remounting filesystem read-only [ 98.489128][ T7198] EXT4-fs (loop0): 1 truncate cleaned up [ 98.489794][ T7198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 98.654007][ T7210] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.714: dx entry: limit 0 != root limit 125 [ 98.654096][ T7210] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.714: Corrupt directory, running e2fsck is recommended [ 98.854106][ T7211] ip6tnl1: entered allmulticast mode [ 98.866525][ T7211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 98.866539][ T7211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 98.918661][ T7212] batadv_slave_0: entered promiscuous mode [ 99.061042][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 99.228264][ T7220] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 99.240891][ T7220] bond1: (slave gretap1): making interface the new active one [ 99.242536][ T7220] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.246225][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.722'. [ 99.248469][ T7220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.344946][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 99.351253][ T30] audit: type=1326 audit(99.330:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.355393][ T30] audit: type=1326 audit(99.340:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.359909][ T30] audit: type=1326 audit(99.340:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.364711][ T30] audit: type=1326 audit(99.350:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=49 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.368405][ T30] audit: type=1326 audit(99.350:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.372410][ T30] audit: type=1326 audit(99.350:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.380308][ T7211] batadv_slave_0: left promiscuous mode [ 99.395943][ T30] audit: type=1326 audit(99.380:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.395964][ T30] audit: type=1326 audit(99.380:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.395980][ T30] audit: type=1326 audit(99.380:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.395995][ T30] audit: type=1326 audit(99.380:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.5.727" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2d77b68 code=0x7ffc0000 [ 99.400069][ T7236] loop0: detected capacity change from 0 to 512 [ 99.423103][ T7236] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.728: iget: bad i_size value: 38620345925642 [ 99.423128][ T7236] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.423336][ T7236] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.728: couldn't read orphan inode 15 (err -117) [ 99.423352][ T7236] loop0: lost filesystem error report for type 5 error -117 [ 99.423914][ T7236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.897742][ T7260] syzkaller0: entered promiscuous mode [ 99.897771][ T7260] syzkaller0: entered allmulticast mode [ 99.996498][ T7264] syzkaller1: entered promiscuous mode [ 99.996529][ T7264] syzkaller1: entered allmulticast mode [ 100.436287][ T3081] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 100.443488][ T3081] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 100.443528][ T3081] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.443528][ T3081] [ 100.443543][ T3081] EXT4-fs (loop0): Total free blocks count 0 [ 100.443555][ T3081] EXT4-fs (loop0): Free/Dirty block details [ 100.443567][ T3081] EXT4-fs (loop0): free_blocks=0 [ 100.443579][ T3081] EXT4-fs (loop0): dirty_blocks=65 [ 100.443589][ T3081] EXT4-fs (loop0): Block reservation details [ 100.443598][ T3081] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 100.455505][ T4720] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 100.456279][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.522228][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.522416][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.573796][ T7288] loop0: detected capacity change from 0 to 256 [ 100.637188][ T7293] syzkaller1: entered promiscuous mode [ 100.638234][ T7293] syzkaller1: entered allmulticast mode [ 100.897544][ T7304] loop5: detected capacity change from 0 to 512 [ 100.908727][ T7304] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.755: iget: bad i_size value: 38620345925642 [ 100.911833][ T7304] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.912532][ T7304] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.755: couldn't read orphan inode 15 (err -117) [ 100.912566][ T7304] loop5: lost filesystem error report for type 5 error -117 [ 100.912889][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 100.912907][ C0] EXT4-fs (loop5): initial error at time 100: ext4_orphan_get:1397: inode 15 [ 100.912923][ C0] EXT4-fs (loop5): last error at time 100: ext4_orphan_get:1402 [ 100.921546][ T7304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.327143][ T7316] syzkaller0: entered promiscuous mode [ 101.328392][ T7316] syzkaller0: entered allmulticast mode [ 101.491188][ T7329] loop0: detected capacity change from 0 to 512 [ 101.491599][ T7329] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.492433][ T7329] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 101.494049][ T7329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 101.494140][ T7329] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.494556][ T7329] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.764: bg 0: block 361: padding at end of block bitmap is not set [ 101.494570][ T7329] loop0: lost filesystem error report for type 5 error -117 [ 101.494714][ T7329] EXT4-fs (loop0): Remounting filesystem read-only [ 101.494949][ T7329] EXT4-fs (loop0): 1 truncate cleaned up [ 101.495463][ T7329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 101.656141][ T7339] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.764: dx entry: limit 0 != root limit 125 [ 101.656219][ T7339] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.764: Corrupt directory, running e2fsck is recommended [ 101.869204][ T39] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 101.870341][ T39] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 101.870356][ T39] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.870356][ T39] [ 101.870364][ T39] EXT4-fs (loop5): Total free blocks count 0 [ 101.870370][ T39] EXT4-fs (loop5): Free/Dirty block details [ 101.870377][ T39] EXT4-fs (loop5): free_blocks=0 [ 101.870384][ T39] EXT4-fs (loop5): dirty_blocks=65 [ 101.870390][ T39] EXT4-fs (loop5): Block reservation details [ 101.870396][ T39] EXT4-fs (loop5): i_reserved_data_blocks=65 [ 101.882550][ T5134] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 101.883718][ T5134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.168382][ T4806] syz1: Port: 1 Link DOWN [ 102.173594][ T3081] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.173676][ T3081] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.173714][ T3081] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.173743][ T3081] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.206016][ T7353] netlink: 128 bytes leftover after parsing attributes in process `syz.2.770'. [ 102.207926][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 102.210290][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 102.238206][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.238405][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.269871][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 102.293903][ T7362] loop5: detected capacity change from 0 to 256 [ 102.936765][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 102.939037][ T7364] tipc: Enabled bearer , priority 0 [ 102.947134][ T7364] tipc: Resetting bearer [ 102.956103][ T7363] tipc: Disabling bearer [ 102.962790][ T7368] syzkaller1: entered promiscuous mode [ 102.962825][ T7368] syzkaller1: entered allmulticast mode [ 103.040661][ T7373] ------------[ cut here ]------------ [ 103.040676][ T7373] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#0: syz.0.778/7373 [ 103.043005][ T7373] Modules linked in: [ 103.043627][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.0.778 Tainted: G L syzkaller #0 PREEMPT [ 103.045320][ T7373] Tainted: [L]=SOFTLOCKUP [ 103.046026][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 103.047627][ T7373] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.048854][ T7373] pc : path_noexec+0x1a4/0x1d4 [ 103.049646][ T7373] lr : path_noexec+0x1a4/0x1d4 [ 103.050424][ T7373] sp : ffff800095f57a50 [ 103.051055][ T7373] x29: ffff800095f57a50 x28: dfff800000000000 x27: ffff0000f1efd7c0 [ 103.052426][ T7373] x26: 0000000000008001 x25: ffff0000d7e918c0 x24: 0000ffffa2402000 [ 103.053670][ T7373] x23: 1fffe0001afd2319 x22: 1fffe0001afd2320 x21: dfff800000000000 [ 103.054915][ T7373] x20: 0000000000000000 x19: ffff0000d7e91900 x18: 0000000000000000 [ 103.056181][ T7373] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 103.057435][ T7373] x14: 0000000000000001 x13: 000000000000000a x12: 1ffff00012beaee3 [ 103.058751][ T7373] x11: ffff800095f5774d x10: 0000000000080000 x9 : 0000000000004606 [ 103.060177][ T7373] x8 : ffff80009b04b000 x7 : 0000000000000000 x6 : 0000000000000000 [ 103.061470][ T7373] x5 : 0000000000000071 x4 : 0000000000000008 x3 : ffff800080c7ce88 [ 103.062833][ T7373] x2 : 0000000000000000 x1 : ffff0000d20d8000 x0 : 0000000000000001 [ 103.064187][ T7373] Call trace: [ 103.064708][ T7373] path_noexec+0x1a4/0x1d4 (P) [ 103.065409][ T7373] do_mmap+0x874/0xf0c [ 103.066020][ T7373] vm_mmap_pgoff+0x298/0x46c [ 103.066733][ T7373] ksys_mmap_pgoff+0x364/0x5b4 [ 103.067521][ T7373] __arm64_sys_mmap+0x108/0x120 [ 103.068305][ T7373] invoke_syscall+0x98/0x244 [ 103.069064][ T7373] el0_svc_common+0x19c/0x23c [ 103.069844][ T7373] do_el0_svc+0x4c/0x5c [ 103.070577][ T7373] el0_svc+0x64/0x260 [ 103.071298][ T7373] el0t_64_sync_handler+0x48/0x148 [ 103.072122][ T7373] el0t_64_sync+0x198/0x19c [ 103.072890][ T7373] irq event stamp: 440 [ 103.073488][ T7373] hardirqs last enabled at (439): [] el0_svc+0x54/0x260 [ 103.074809][ T7373] hardirqs last disabled at (440): [] el1_brk64+0x20/0x54 [ 103.076170][ T7373] softirqs last enabled at (362): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 103.077826][ T7373] softirqs last disabled at (360): [] fpsimd_restore_current_state+0x44/0x9c8 [ 103.079450][ T7373] ---[ end trace 0000000000000000 ]--- [ 103.499228][ T7371] Set syz1 is full, maxelem 65536 reached