last executing test programs: 1m29.253621366s ago: executing program 0 (id=52): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) 1m29.156097778s ago: executing program 0 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m28.913174075s ago: executing program 0 (id=55): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x800, 0x2, 0x9, 0x4}, {0x41ad, 0x4, 0x4c, 0x8}, {0x7, 0x6, 0x0, 0x9}, {0x5, 0x9, 0x7, 0xe000}, {0xe, 0x2, 0x7, 0x9}, {0xe, 0xf, 0x2e, 0x2}, {0xa, 0x45, 0x0, 0xa87}]}) epoll_create1(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1m28.372192059s ago: executing program 0 (id=60): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000001c0)=0x20008) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x82840, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000005b00)={0x402, 0x10000002000004, 0x3, 0xa}) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@noinode_cache}, {@discard_async}, {@enospc_debug}]}, 0x1, 0x559d, &(0x7f0000005680)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000001c0)='./file0\x00', 0x21488b, &(0x7f0000000540)=ANY=[], 0x1, 0x65c, &(0x7f0000000cc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='dummy_hcd.0', 0xb) 1m27.241052908s ago: executing program 0 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 1m26.592995224s ago: executing program 0 (id=81): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000018}, 0x4004000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1m26.592771824s ago: executing program 32 (id=81): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000018}, 0x4004000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 19.848436192s ago: executing program 5 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @action={{{}, {}, @device_b, @broadcast, @initial, {0x0, 0x400}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @void}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x417}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 19.835586273s ago: executing program 5 (id=461): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 19.701147736s ago: executing program 5 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) 19.701009036s ago: executing program 5 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x170bf28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1d9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x0) 19.597168019s ago: executing program 5 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 19.56231455s ago: executing program 5 (id=471): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@empty, 0x4e20, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x8, 0x0, 0xee01}, {0x0, 0x402ce3e, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x9d4, 0x0, 0x100}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 4.258384801s ago: executing program 33 (id=471): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@empty, 0x4e20, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x8, 0x0, 0xee01}, {0x0, 0x402ce3e, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x9d4, 0x0, 0x100}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 2.037953518s ago: executing program 4 (id=625): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="f6ae", 0x2}], 0x1}}], 0x2, 0x4404c880) 1.945078751s ago: executing program 4 (id=626): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003b00010322bc7022fddbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.873131982s ago: executing program 4 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 1.633250959s ago: executing program 4 (id=638): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x202, 0x0) write(r1, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$mtd(0x0, 0x0, 0x80001) 1.5569442s ago: executing program 2 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xfffffffc, 0x100004, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x100004, 0x4, 0x4, 0x2000, 0x100, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foosyz\x00', 0x0, 0x0) 1.548546441s ago: executing program 4 (id=641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebd", 0xc5}, {0x0}], 0x2}}], 0x1, 0x4000000) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe7601020301090224"], 0x0) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255", 0x6d}, {0x0}], 0x2}}], 0x1, 0x4000900) 1.485826523s ago: executing program 2 (id=642): bind$bt_sco(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, @none}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) r3 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="04130d03c9000100c80001"], 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x40, 0x8}, {0x6, 0x401, 0x3ff, 0x3}}]}}, 0x15) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) syz_clone(0x3028000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140), 0x0) 1.317127917s ago: executing program 1 (id=643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.305358837s ago: executing program 1 (id=644): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x856}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a0401002d00df4f0100000000000000000a000001f0000380080001400000000008000140000000007c0003801400010076657468315f746f5f626f6e6400000014000100766972745f7769666930000000000000140001006970766c616e310000000000000000001400010076657468305f746f5f627269646765001400010070696d3672656731000000000000000014000100776730000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x10001}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100"/25) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') 1.216928879s ago: executing program 1 (id=647): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 1.000096935s ago: executing program 4 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_usb_connect$cdc_ecm(0x6, 0x7b, 0x0, 0x0) r8 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 940.558316ms ago: executing program 1 (id=650): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 885.020347ms ago: executing program 2 (id=651): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 872.020218ms ago: executing program 1 (id=652): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754376, 0x10, 0x9, 0x20000006, 0x4, "01000000000000c000000000800000e4018780"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 541.148496ms ago: executing program 3 (id=654): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 541.022196ms ago: executing program 3 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) clock_settime(0x0, 0x0) 470.408318ms ago: executing program 3 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff98ad6dd4, 0x0, 0x1003, 0x0, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d520075900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f0000000040)=@xfs={0x1c, 0x81, {0x0, 0x8, 0x8, 0x400}}, 0x88000) 398.1438ms ago: executing program 3 (id=657): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x5635, 0x1000, 0xfffffffc}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r0], 0x0) 301.073282ms ago: executing program 2 (id=658): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 286.106713ms ago: executing program 3 (id=659): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={r3}) 239.153764ms ago: executing program 2 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 184.001145ms ago: executing program 3 (id=661): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 17.73796ms ago: executing program 2 (id=662): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000007c0)={r1}, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=663): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_usb_connect(0x0, 0x63, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): s ready [ 46.022524][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.024400][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.026076][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.027846][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.029565][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.031238][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.033278][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.040974][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.042733][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.044868][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.046568][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.048298][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.050034][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.051690][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.053774][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.056068][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.057248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.059031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.060668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.062303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.071251][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.072567][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.076209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.083541][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.084893][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.085306][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.087776][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.089465][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.090875][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.102134][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.108133][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.109946][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.112035][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.116360][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.123453][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.125277][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.127063][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.129341][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.136913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.138524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.140219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.163326][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.165035][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.166478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.189977][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.191371][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.199196][ T4344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.200733][ T4344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.202276][ T4344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.204140][ T4344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.206312][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.307199][ T4418] loop1: detected capacity change from 0 to 512 [ 46.310986][ T4418] EXT4-fs: Ignoring removed oldalloc option [ 46.526045][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.527311][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.528949][ T100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.543876][ T4418] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 46.547469][ T4418] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.550442][ T4418] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.2: Bad quota inum: 2, type: 2 [ 46.552605][ T4418] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 46.555811][ T4418] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.556914][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.578126][ T252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.579551][ T252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.654629][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.656446][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.657844][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.658011][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.662441][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.673169][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.675026][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.976796][ T4423] loop3: detected capacity change from 0 to 131072 [ 46.979450][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 46.990165][ T4423] F2FS-fs (loop3): invalid crc value [ 47.019888][ T4423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.027391][ T4423] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 47.029253][ T4423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 47.033925][ T4346] Bluetooth: hci2: command 0x041b tx timeout [ 47.035254][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 47.036429][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 47.037574][ T4346] Bluetooth: hci1: command 0x041b tx timeout [ 47.037889][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 47.442255][ T4444] loop1: detected capacity change from 0 to 512 [ 47.444365][ T4444] EXT4-fs: Ignoring removed oldalloc option [ 47.543051][ T4444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 47.544873][ T4444] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.547563][ T4444] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.6: Bad quota inum: 2, type: 2 [ 47.550545][ T4444] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 47.553317][ T4444] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 47.554657][ T4444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.023390][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 48.354428][ T4461] loop0: detected capacity change from 0 to 512 [ 48.356361][ T4461] EXT4-fs: Ignoring removed oldalloc option [ 48.361178][ T4462] loop4: detected capacity change from 0 to 512 [ 48.362656][ T4462] EXT4-fs: Ignoring removed oldalloc option [ 48.386329][ T4462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 48.388208][ T4462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.389660][ T4462] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.11: Bad quota inum: 2, type: 2 [ 48.391882][ T4462] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 48.394681][ T4462] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 48.396046][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.471604][ T4462] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.11: inode #2: comm syz.4.11: iget: illegal inode # [ 48.694702][ T4461] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 48.696918][ T4461] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.699525][ T4461] EXT4-fs error (device loop0): ext4_quota_enable:7045: comm syz.0.9: Bad quota inum: 2, type: 2 [ 48.701772][ T4461] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 48.704507][ T4461] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 48.705794][ T4461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.714772][ T4461] EXT4-fs error (device loop0): ext4_get_parent:1910: comm syz.0.9: inode #2: comm syz.0.9: iget: illegal inode # [ 48.919295][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 48.922072][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 48.933210][ T4473] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 49.056787][ T4476] device macvlan2 entered promiscuous mode [ 49.108695][ T4471] loop2: detected capacity change from 0 to 131072 [ 49.111758][ T4471] F2FS-fs (loop2): invalid crc value [ 49.113651][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 49.115010][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 49.115763][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 49.116289][ T4346] Bluetooth: hci0: command 0x040f tx timeout [ 49.118279][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 49.149654][ T4471] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.158766][ T4471] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 49.168782][ T4471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 50.604730][ T4519] fuse: Bad value for 'fd' [ 51.080584][ T4545] loop1: detected capacity change from 0 to 256 [ 51.087515][ T4545] ======================================================= [ 51.087515][ T4545] WARNING: The mand mount option has been deprecated and [ 51.087515][ T4545] and is ignored by this kernel. Remove the mand [ 51.087515][ T4545] option from the mount to silence this warning. [ 51.087515][ T4545] ======================================================= [ 51.109200][ T4545] FAT-fs (loop1): Directory bread(block 64) failed [ 51.110847][ T4545] FAT-fs (loop1): Directory bread(block 65) failed [ 51.112226][ T4545] FAT-fs (loop1): Directory bread(block 66) failed [ 51.113392][ T4545] FAT-fs (loop1): Directory bread(block 67) failed [ 51.115022][ T4545] FAT-fs (loop1): Directory bread(block 68) failed [ 51.116547][ T4545] FAT-fs (loop1): Directory bread(block 69) failed [ 51.117851][ T4545] FAT-fs (loop1): Directory bread(block 70) failed [ 51.118869][ T4545] FAT-fs (loop1): Directory bread(block 71) failed [ 51.120011][ T4545] FAT-fs (loop1): Directory bread(block 72) failed [ 51.121104][ T4545] FAT-fs (loop1): Directory bread(block 73) failed [ 51.161987][ T4555] loop0: detected capacity change from 0 to 256 [ 51.194470][ T4347] Bluetooth: hci3: command 0x0419 tx timeout [ 51.196734][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 51.198027][ T4347] Bluetooth: hci0: command 0x0419 tx timeout [ 51.199117][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 51.200188][ T4347] Bluetooth: hci4: command 0x0419 tx timeout [ 51.249203][ T4555] FAT-fs (loop0): Directory bread(block 64) failed [ 51.252632][ T4555] FAT-fs (loop0): Directory bread(block 65) failed [ 51.260874][ T4558] loop2: detected capacity change from 0 to 256 [ 51.262115][ T4555] FAT-fs (loop0): Directory bread(block 66) failed [ 51.265116][ T4555] FAT-fs (loop0): Directory bread(block 67) failed [ 51.267945][ T4555] FAT-fs (loop0): Directory bread(block 68) failed [ 51.272087][ T4555] FAT-fs (loop0): Directory bread(block 69) failed [ 51.276978][ T4558] FAT-fs (loop2): Directory bread(block 64) failed [ 51.278381][ T4555] FAT-fs (loop0): Directory bread(block 70) failed [ 51.279750][ T4558] FAT-fs (loop2): Directory bread(block 65) failed [ 51.280997][ T4558] FAT-fs (loop2): Directory bread(block 66) failed [ 51.282161][ T4555] FAT-fs (loop0): Directory bread(block 71) failed [ 51.283819][ T4555] FAT-fs (loop0): Directory bread(block 72) failed [ 51.620497][ T4555] FAT-fs (loop0): Directory bread(block 73) failed [ 51.621804][ T4558] FAT-fs (loop2): Directory bread(block 67) failed [ 51.623082][ T4558] FAT-fs (loop2): Directory bread(block 68) failed [ 51.632218][ T4558] FAT-fs (loop2): Directory bread(block 69) failed [ 51.633614][ T4558] FAT-fs (loop2): Directory bread(block 70) failed [ 51.634838][ T4558] FAT-fs (loop2): Directory bread(block 71) failed [ 51.636185][ T4558] FAT-fs (loop2): Directory bread(block 72) failed [ 51.637361][ T4558] FAT-fs (loop2): Directory bread(block 73) failed [ 52.745274][ T4572] loop3: detected capacity change from 0 to 256 [ 52.754625][ T4576] loop1: detected capacity change from 0 to 256 [ 52.758591][ T4575] loop2: detected capacity change from 0 to 256 [ 52.772685][ T4576] FAT-fs (loop1): Directory bread(block 64) failed [ 52.775249][ T4576] FAT-fs (loop1): Directory bread(block 65) failed [ 52.776559][ T4576] FAT-fs (loop1): Directory bread(block 66) failed [ 52.787017][ T4575] FAT-fs (loop2): Directory bread(block 64) failed [ 52.798187][ T4572] FAT-fs (loop3): Directory bread(block 64) failed [ 52.799541][ T4572] FAT-fs (loop3): Directory bread(block 65) failed [ 52.800722][ T4572] FAT-fs (loop3): Directory bread(block 66) failed [ 52.801726][ T4572] FAT-fs (loop3): Directory bread(block 67) failed [ 52.802798][ T4572] FAT-fs (loop3): Directory bread(block 68) failed [ 52.807652][ T4576] FAT-fs (loop1): Directory bread(block 67) failed [ 52.809524][ T4576] FAT-fs (loop1): Directory bread(block 68) failed [ 52.810281][ T4575] FAT-fs (loop2): Directory bread(block 65) failed [ 52.812130][ T4575] FAT-fs (loop2): Directory bread(block 66) failed [ 52.813883][ T4575] FAT-fs (loop2): Directory bread(block 67) failed [ 52.815250][ T4575] FAT-fs (loop2): Directory bread(block 68) failed [ 52.816413][ T4575] FAT-fs (loop2): Directory bread(block 69) failed [ 52.817609][ T4575] FAT-fs (loop2): Directory bread(block 70) failed [ 52.818762][ T4575] FAT-fs (loop2): Directory bread(block 71) failed [ 52.820169][ T4575] FAT-fs (loop2): Directory bread(block 72) failed [ 52.821959][ T4575] FAT-fs (loop2): Directory bread(block 73) failed [ 52.822999][ T4576] FAT-fs (loop1): Directory bread(block 69) failed [ 52.831915][ T4572] FAT-fs (loop3): Directory bread(block 69) failed [ 52.833064][ T4572] FAT-fs (loop3): Directory bread(block 70) failed [ 52.834973][ T4576] FAT-fs (loop1): Directory bread(block 70) failed [ 52.836139][ T4576] FAT-fs (loop1): Directory bread(block 71) failed [ 52.837281][ T4576] FAT-fs (loop1): Directory bread(block 72) failed [ 52.838366][ T4576] FAT-fs (loop1): Directory bread(block 73) failed [ 52.839553][ T4572] FAT-fs (loop3): Directory bread(block 71) failed [ 52.840650][ T4572] FAT-fs (loop3): Directory bread(block 72) failed [ 52.841747][ T4572] FAT-fs (loop3): Directory bread(block 73) failed [ 54.108626][ T4576] sched: RT throttling activated [ 54.190556][ T4591] loop0: detected capacity change from 0 to 256 [ 54.254887][ T4598] loop1: detected capacity change from 0 to 256 [ 54.268771][ T4597] loop3: detected capacity change from 0 to 256 [ 54.271202][ T4591] FAT-fs (loop0): Directory bread(block 64) failed [ 54.272446][ T4591] FAT-fs (loop0): Directory bread(block 65) failed [ 54.283184][ T4591] FAT-fs (loop0): Directory bread(block 66) failed [ 54.285985][ T4598] FAT-fs (loop1): Directory bread(block 64) failed [ 54.287143][ T4598] FAT-fs (loop1): Directory bread(block 65) failed [ 54.289966][ T4591] FAT-fs (loop0): Directory bread(block 67) failed [ 54.291202][ T4591] FAT-fs (loop0): Directory bread(block 68) failed [ 54.292620][ T4598] FAT-fs (loop1): Directory bread(block 66) failed [ 54.300621][ T4597] FAT-fs (loop3): Directory bread(block 64) failed [ 54.301773][ T4597] FAT-fs (loop3): Directory bread(block 65) failed [ 54.303014][ T4597] FAT-fs (loop3): Directory bread(block 66) failed [ 54.305424][ T4591] FAT-fs (loop0): Directory bread(block 69) failed [ 54.308545][ T4598] FAT-fs (loop1): Directory bread(block 67) failed [ 54.606666][ T4591] FAT-fs (loop0): Directory bread(block 70) failed [ 54.607884][ T4591] FAT-fs (loop0): Directory bread(block 71) failed [ 54.609160][ T4591] FAT-fs (loop0): Directory bread(block 72) failed [ 54.610389][ T4591] FAT-fs (loop0): Directory bread(block 73) failed [ 54.612757][ T4597] FAT-fs (loop3): Directory bread(block 67) failed [ 54.614424][ T4597] FAT-fs (loop3): Directory bread(block 68) failed [ 54.615582][ T4597] FAT-fs (loop3): Directory bread(block 69) failed [ 54.617146][ T4598] FAT-fs (loop1): Directory bread(block 68) failed [ 54.618356][ T4598] FAT-fs (loop1): Directory bread(block 69) failed [ 54.619627][ T4598] FAT-fs (loop1): Directory bread(block 70) failed [ 54.620839][ T4598] FAT-fs (loop1): Directory bread(block 71) failed [ 54.621961][ T4598] FAT-fs (loop1): Directory bread(block 72) failed [ 54.623085][ T4598] FAT-fs (loop1): Directory bread(block 73) failed [ 54.634171][ T4597] FAT-fs (loop3): Directory bread(block 70) failed [ 54.635290][ T4597] FAT-fs (loop3): Directory bread(block 71) failed [ 54.637087][ T4597] FAT-fs (loop3): Directory bread(block 72) failed [ 54.638186][ T4597] FAT-fs (loop3): Directory bread(block 73) failed [ 56.122752][ T4611] loop4: detected capacity change from 0 to 256 [ 56.149370][ T4614] loop2: detected capacity change from 0 to 256 [ 56.168789][ T4611] FAT-fs (loop4): Directory bread(block 64) failed [ 56.170245][ T4611] FAT-fs (loop4): Directory bread(block 65) failed [ 56.172512][ T4611] FAT-fs (loop4): Directory bread(block 66) failed [ 56.192580][ T4611] FAT-fs (loop4): Directory bread(block 67) failed [ 56.195405][ T4611] FAT-fs (loop4): Directory bread(block 68) failed [ 56.198775][ T4611] FAT-fs (loop4): Directory bread(block 69) failed [ 56.199970][ T4611] FAT-fs (loop4): Directory bread(block 70) failed [ 56.201252][ T4611] FAT-fs (loop4): Directory bread(block 71) failed [ 56.202307][ T4611] FAT-fs (loop4): Directory bread(block 72) failed [ 56.211565][ T4611] FAT-fs (loop4): Directory bread(block 73) failed [ 56.216491][ T4614] FAT-fs (loop2): Directory bread(block 64) failed [ 56.217680][ T4614] FAT-fs (loop2): Directory bread(block 65) failed [ 56.218834][ T4614] FAT-fs (loop2): Directory bread(block 66) failed [ 56.219900][ T4614] FAT-fs (loop2): Directory bread(block 67) failed [ 56.225988][ T4614] FAT-fs (loop2): Directory bread(block 68) failed [ 56.227240][ T4614] FAT-fs (loop2): Directory bread(block 69) failed [ 56.228453][ T4614] FAT-fs (loop2): Directory bread(block 70) failed [ 56.229552][ T4614] FAT-fs (loop2): Directory bread(block 71) failed [ 56.230654][ T4614] FAT-fs (loop2): Directory bread(block 72) failed [ 56.231959][ T4614] FAT-fs (loop2): Directory bread(block 73) failed [ 58.917260][ T4808] loop0: detected capacity change from 0 to 40427 [ 58.931789][ T4808] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 58.934881][ T4808] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 58.940767][ T4808] F2FS-fs (loop0): invalid crc value [ 58.975053][ T4808] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 59.008778][ T4808] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 59.010416][ T4808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.053125][ T4808] xt_l2tp: v2 doesn't support IP mode [ 59.185166][ T4820] device syzkaller0 entered promiscuous mode [ 59.322821][ T4826] binder: 4825:4826 tried to acquire reference to desc 0, got 1 instead [ 59.334947][ T4826] binder: 4825:4826 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.336982][ T4826] binder: 4826 RLIMIT_NICE not set [ 59.337978][ T4826] binder: 4826 RLIMIT_NICE not set [ 59.338936][ T4826] binder: send failed reply for transaction 5 to 4825:4826 [ 59.340226][ T4826] binder: 4825:4826 ioctl c0306201 20000680 returned -14 [ 59.366307][ T1518] binder: undelivered TRANSACTION_COMPLETE [ 59.367422][ T1518] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.402150][ T4834] device syzkaller0 entered promiscuous mode [ 59.496581][ T4808] F2FS-fs (loop0): Unrecognized mount option "source" or missing value [ 59.507734][ T4808] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 59.542551][ T4334] syz-executor: attempt to access beyond end of device [ 59.542551][ T4334] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 59.545989][ T4334] syz-executor: attempt to access beyond end of device [ 59.545989][ T4334] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 59.555313][ T4334] syz-executor: attempt to access beyond end of device [ 59.555313][ T4334] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 59.673109][ T4849] Zero length message leads to an empty skb [ 59.773185][ T4851] device syzkaller0 entered promiscuous mode [ 60.227657][ T4340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.229292][ T4340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.230864][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.232903][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.235221][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.236830][ T4340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.382679][ T4652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.444485][ T4875] binder: 4874:4875 tried to acquire reference to desc 0, got 1 instead [ 60.453065][ T4341] binder: undelivered transaction 10, process died. [ 60.474200][ T4341] binder: undelivered TRANSACTION_COMPLETE [ 60.474622][ T4652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.502738][ T4859] chnl_net:caif_netlink_parms(): no params data found [ 60.555484][ T4652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.558784][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.560028][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.561944][ T4859] device bridge_slave_0 entered promiscuous mode [ 60.565796][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.567103][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.568732][ T4859] device bridge_slave_1 entered promiscuous mode [ 60.577827][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.580614][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.588656][ T4859] team0: Port device team_slave_0 added [ 60.590917][ T4859] team0: Port device team_slave_1 added [ 60.597038][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.598428][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.603327][ T4859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.641661][ T4886] binder: 4885:4886 tried to acquire reference to desc 0, got 1 instead [ 60.656165][ T4382] binder: undelivered transaction 18, process died. [ 60.656242][ T4652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.664408][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.665893][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.673951][ T4859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.676438][ T4382] binder: undelivered TRANSACTION_COMPLETE [ 60.725058][ T4859] device hsr_slave_0 entered promiscuous mode [ 60.737440][ T4888] syz.4.89 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 60.739188][ T4888] CPU: 1 PID: 4888 Comm: syz.4.89 Not tainted syzkaller #0 [ 60.740410][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.742117][ T4888] Call trace: [ 60.742750][ T4888] dump_backtrace+0x1c4/0x1f0 [ 60.743626][ T4859] device hsr_slave_1 entered promiscuous mode [ 60.743715][ T4888] show_stack+0x2c/0x3c [ 60.745617][ T4888] __dump_stack+0x30/0x40 [ 60.746397][ T4888] dump_stack_lvl+0xf4/0x15c [ 60.747220][ T4888] dump_stack+0x1c/0x5c [ 60.747990][ T4888] dump_header+0xc0/0x724 [ 60.748754][ T4888] oom_kill_process+0x35c/0x660 [ 60.749579][ T4888] out_of_memory+0xbf0/0xf70 [ 60.750386][ T4888] mem_cgroup_out_of_memory+0x228/0x2d0 [ 60.751328][ T4888] try_charge_memcg+0xa4c/0x1390 [ 60.752153][ T4888] obj_cgroup_charge+0x178/0x2e4 [ 60.752997][ T4888] kmem_cache_alloc+0xc4/0x310 [ 60.753820][ T4888] sk_prot_alloc+0x60/0x1e8 [ 60.754617][ T4888] sk_alloc+0x44/0x3a0 [ 60.755300][ T4888] inet_create+0x670/0xd84 [ 60.756041][ T4888] __sock_create+0x448/0x8a8 [ 60.756848][ T4888] sock_create_kern+0x4c/0x64 [ 60.757657][ T4888] smc_create+0x144/0x534 [ 60.758404][ T4888] __sock_create+0x448/0x8a8 [ 60.759183][ T4888] __sys_socket+0xc0/0x1b0 [ 60.759994][ T4888] __arm64_sys_socket+0x7c/0x94 [ 60.760846][ T4888] invoke_syscall+0x98/0x290 [ 60.761661][ T4888] el0_svc_common+0x13c/0x258 [ 60.762474][ T4888] do_el0_svc+0x5c/0x134 [ 60.763188][ T4888] el0_svc+0x58/0x128 [ 60.763872][ T4888] el0t_64_sync_handler+0x84/0xf0 [ 60.764765][ T4888] el0t_64_sync+0x18c/0x190 [ 60.771299][ T4888] memory: usage 8kB, limit 8kB, failcnt 21 [ 60.772284][ T4888] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 60.772821][ T4892] binder: 4891:4892 tried to acquire reference to desc 0, got 1 instead [ 60.773609][ T4888] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 60.773619][ T4888] Memory cgroup stats for /syz4/test: [ 60.776325][ T4888] anon 0 [ 60.776325][ T4888] file 0 [ 60.776325][ T4888] kernel 8192 [ 60.776325][ T4888] kernel_stack 0 [ 60.776325][ T4888] pagetables 0 [ 60.776325][ T4888] sec_pagetables 0 [ 60.776325][ T4888] percpu 0 [ 60.776325][ T4888] sock 0 [ 60.776325][ T4888] vmalloc 0 [ 60.776325][ T4888] shmem 0 [ 60.776325][ T4888] zswap 0 [ 60.776325][ T4888] zswapped 0 [ 60.776325][ T4888] file_mapped 0 [ 60.776325][ T4888] file_dirty 0 [ 60.776325][ T4888] file_writeback 0 [ 60.776325][ T4888] swapcached 0 [ 60.776325][ T4888] anon_thp 0 [ 60.776325][ T4888] file_thp 0 [ 60.776325][ T4888] shmem_thp 0 [ 60.776325][ T4888] inactive_anon 0 [ 60.776325][ T4888] active_anon 0 [ 60.776325][ T4888] inactive_file 0 [ 60.776325][ T4888] active_file 0 [ 60.776325][ T4888] unevictable 0 [ 60.776325][ T4888] slab_reclaimable 3088 [ 60.776325][ T4888] slab_unreclaimable 2888 [ 60.776325][ T4888] slab 5976 [ 60.776325][ T4888] workingset_refault_anon 0 [ 60.791881][ T114] binder: undelivered transaction 26, process died. [ 60.803754][ T4859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.805306][ T4859] Cannot create hsr debugfs directory [ 60.831924][ T4888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.89,pid=4887,uid=0 [ 60.839258][ T4888] Memory cgroup out of memory: Killed process 4887 (syz.4.89) total-vm:104420kB, anon-rss:1364kB, file-rss:21704kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 60.886777][ T4859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.921196][ T4859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.947267][ T4859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.978189][ T4899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.94'. [ 60.987567][ T4909] device syzkaller1 entered promiscuous mode [ 60.989297][ T4859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.186609][ T4917] binder: 4916:4917 ioctl 4018620d 0 returned -22 [ 61.188151][ T4917] binder: tried to use weak ref as strong ref [ 61.189223][ T4917] binder: 4916:4917 Acquire 1 refcount change on invalid ref 0 ret -22 [ 61.191042][ T4917] binder: 4916:4917 got transaction to invalid handle, 1 [ 61.192129][ T4917] binder: 4917:4916 cannot find target node [ 61.193172][ T4917] binder: 4916:4917 transaction async to 0:0 failed 29/29201/-22, size 72-24 line 3062 [ 61.251057][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.252305][ T4859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.253841][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.255105][ T4859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.268359][ T4919] usb usb9: usbfs: process 4919 (syz.3.97) did not claim interface 0 before use [ 61.319447][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.327572][ T4859] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.331476][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.334617][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.338102][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.354528][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.356142][ T4681] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.357379][ T4681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.361562][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.363195][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.364463][ T4681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.424621][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.426748][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.428548][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.430256][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.431894][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.435326][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.437134][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.519429][ T4859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.522119][ T4859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.535972][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.537711][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.539405][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.540907][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.616002][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.858083][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.859441][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.861832][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.910794][ T4976] tipc: Started in network mode [ 61.911731][ T4976] tipc: Node identity 1695710c47e8, cluster identity 4711 [ 61.912972][ T4976] tipc: Enabled bearer , priority 0 [ 62.004491][ T4975] tipc: Disabling bearer [ 62.170877][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.172645][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.183775][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.185495][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.193572][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.195052][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.197187][ T4859] device veth0_vlan entered promiscuous mode [ 62.205177][ T4859] device veth1_vlan entered promiscuous mode [ 62.225460][ T5004] fuse: Bad value for 'fd' [ 62.313773][ T4346] Bluetooth: hci0: command 0x0409 tx timeout [ 62.481059][ T4859] device veth0_macvtap entered promiscuous mode [ 62.485207][ T4859] device veth1_macvtap entered promiscuous mode [ 62.496660][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.498339][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.499913][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.501590][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.503157][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.507024][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.513172][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.526308][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.527961][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.529661][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.531252][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.532847][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.542329][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.546972][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.548627][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.550366][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.552937][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.601345][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.603152][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.607783][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.609677][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.611381][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.613080][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.619509][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.621199][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.623005][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.628662][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.628698][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.628711][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.629293][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.630379][ T4859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.630399][ T4859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.630414][ T4859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.630424][ T4859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.649966][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.650257][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.998382][ T4681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.999812][ T4681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.028099][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.044604][ T4692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.046052][ T4692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.047379][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.093096][ T4652] device hsr_slave_0 left promiscuous mode [ 63.133958][ T4652] device hsr_slave_1 left promiscuous mode [ 63.173524][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.174925][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.176764][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.178015][ T4652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.180359][ T4652] device bridge_slave_1 left promiscuous mode [ 63.181889][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.214207][ T4652] device bridge_slave_0 left promiscuous mode [ 63.215316][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.343829][ T4652] device veth1_macvtap left promiscuous mode [ 63.345196][ T4652] device veth0_macvtap left promiscuous mode [ 63.346202][ T4652] device veth1_vlan left promiscuous mode [ 63.347267][ T4652] device veth0_vlan left promiscuous mode [ 63.568512][ T5068] ALSA: mixer_oss: invalid OSS volume '' [ 64.403467][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 64.474855][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.476110][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.425217][ T4652] team0 (unregistering): Port device team_slave_1 removed [ 65.584457][ T4652] team0 (unregistering): Port device team_slave_0 removed [ 65.745797][ T4652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.943894][ T4652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.473498][ T4346] Bluetooth: hci0: command 0x040f tx timeout [ 67.415338][ T4652] bond0 (unregistering): Released all slaves [ 67.870116][ T5129] device syzkaller0 entered promiscuous mode [ 68.230908][ T5174] loop4: detected capacity change from 0 to 256 [ 68.254105][ T5174] FAT-fs (loop4): Directory bread(block 1285) failed [ 68.255356][ T5174] FAT-fs (loop4): Directory bread(block 1286) failed [ 68.256481][ T5174] FAT-fs (loop4): Directory bread(block 1287) failed [ 68.257601][ T5174] FAT-fs (loop4): Directory bread(block 1288) failed [ 68.603537][ T4346] Bluetooth: hci0: command 0x0419 tx timeout [ 68.824022][ T5190] loop5: detected capacity change from 0 to 32768 [ 68.857134][ T5190] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 69.506957][ T5206] loop3: detected capacity change from 0 to 32768 [ 69.532258][ T5211] loop1: detected capacity change from 0 to 32768 [ 69.540942][ T5206] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 69.594569][ T5208] loop4: detected capacity change from 0 to 32768 [ 69.596947][ T22] cfg80211: failed to load regulatory.db [ 69.637177][ T5208] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 69.640399][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 69.645226][ T5211] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 69.649813][ T5208] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 69.673853][ T5206] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 72.086367][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 72.087591][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 72.305350][ T5240] loop5: detected capacity change from 0 to 32768 [ 72.394139][ T5240] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 72.466906][ T5240] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 72.513265][ T5246] loop4: detected capacity change from 0 to 32768 [ 72.944734][ T5246] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 72.954112][ T5246] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 73.610217][ T5256] loop2: detected capacity change from 0 to 32768 [ 74.059727][ T5260] loop3: detected capacity change from 0 to 32768 [ 74.133562][ T5256] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 74.135742][ T5260] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 74.192957][ T5260] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 74.202378][ T5256] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 75.649635][ T4339] ocfs2: Unmounting device (7,1) on (node local) [ 75.866145][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 75.934132][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 76.367427][ T5277] loop1: detected capacity change from 0 to 512 [ 76.368979][ T5277] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.410379][ T5282] netlink: 68 bytes leftover after parsing attributes in process `syz.4.160'. [ 76.510474][ T5277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.593425][ T5285] loop5: detected capacity change from 0 to 512 [ 76.596631][ T5285] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.871601][ T5285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 76.920739][ T5288] loop4: detected capacity change from 0 to 32768 [ 76.961333][ T5288] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 76.971557][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 77.071417][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 77.440245][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 77.561892][ T5298] loop5: detected capacity change from 0 to 32768 [ 77.631758][ T5298] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 77.650239][ T5305] loop1: detected capacity change from 0 to 32768 [ 77.673036][ T5305] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 77.712708][ T5298] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 77.813830][ T5305] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 78.365478][ T4335] ocfs2: Unmounting device (7,2) on (node local) [ 78.952180][ T5336] loop2: detected capacity change from 0 to 32768 [ 78.979837][ T5336] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 79.005415][ T5336] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 79.527851][ T5331] loop3: detected capacity change from 0 to 32768 [ 79.610246][ T5331] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 79.618418][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 79.651193][ T5331] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 79.822482][ T5345] loop4: detected capacity change from 0 to 32768 [ 79.863923][ T5345] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.916363][ T4339] ocfs2: Unmounting device (7,1) on (node local) [ 80.632882][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 81.043657][ T4335] ocfs2: Unmounting device (7,2) on (node local) [ 81.075478][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 81.147031][ T5380] loop2: detected capacity change from 0 to 128 [ 81.161500][ T5370] loop5: detected capacity change from 0 to 32768 [ 81.171006][ T5370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.174 (5370) [ 81.184574][ T5380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 81.186051][ T5380] System zones: 1-3, 19-19, 35-36 [ 81.188053][ T5380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.212461][ T5370] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.214549][ T5370] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 81.216070][ T5370] BTRFS info (device loop5): use zlib compression, level 3 [ 81.217434][ T5370] BTRFS info (device loop5): turning on sync discard [ 81.218524][ T5370] BTRFS info (device loop5): using free space tree [ 81.459296][ T5387] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 81.546660][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 81.577029][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 81.603213][ T5370] BTRFS info (device loop5): enabling ssd optimizations [ 81.629681][ T27] audit: type=1326 audit(81.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.4.173" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f79228 code=0x0 [ 81.713923][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 81.768876][ T27] audit: type=1326 audit(81.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.1.176" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff93379228 code=0x0 [ 82.065199][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 82.130886][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 82.131039][ T4859] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.143342][ T27] audit: type=1326 audit(82.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.3.178" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f79228 code=0x0 [ 82.145342][ T5430] device syzkaller0 entered promiscuous mode [ 82.406623][ T5444] loop5: detected capacity change from 0 to 512 [ 82.409975][ T5444] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.638777][ T5444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 82.751078][ T5449] loop4: detected capacity change from 0 to 32768 [ 82.769801][ T5452] loop2: detected capacity change from 0 to 32768 [ 82.776717][ T5452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.181 (5452) [ 82.824948][ T5449] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 82.834467][ T5453] loop1: detected capacity change from 0 to 32768 [ 82.836182][ T5453] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.182 (5453) [ 82.863433][ T5452] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.865172][ T5452] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 82.866554][ T5452] BTRFS info (device loop2): use zlib compression, level 3 [ 82.867668][ T5452] BTRFS info (device loop2): turning on sync discard [ 82.868686][ T5452] BTRFS info (device loop2): using free space tree [ 82.916459][ T5117] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.350139][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 83.889223][ T5487] loop5: detected capacity change from 0 to 128 [ 83.909162][ T5487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 83.910692][ T5487] System zones: 1-3, 19-19, 35-36 [ 83.911900][ T5484] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.186 (5484) [ 83.912041][ T5487] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 83.951228][ T5452] BTRFS info (device loop2): enabling ssd optimizations [ 84.142430][ T5498] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 84.468329][ T5474] set_capacity_and_notify: 1 callbacks suppressed [ 84.468338][ T5474] loop3: detected capacity change from 0 to 32768 [ 85.408386][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 85.426665][ T4335] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.437285][ T5474] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 85.533184][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 85.536127][ T27] audit: type=1326 audit(85.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5504 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff93379228 code=0x0 [ 85.583946][ T5474] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 85.716296][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 86.101000][ T5530] loop1: detected capacity change from 0 to 256 [ 86.102741][ T5530] exfat: Deprecated parameter 'utf8' [ 86.109760][ T5530] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 86.203314][ T5532] loop4: detected capacity change from 0 to 32768 [ 86.205813][ T5532] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.185 (5532) [ 86.215694][ T5532] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.217447][ T5532] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 86.218895][ T5532] BTRFS info (device loop4): use zlib compression, level 3 [ 86.220040][ T5532] BTRFS info (device loop4): turning on sync discard [ 86.221038][ T5532] BTRFS info (device loop4): using free space tree [ 86.222043][ T5130] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 10 scanned by udevd (5130) [ 86.871141][ T5540] loop5: detected capacity change from 0 to 32768 [ 86.887083][ T5540] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.191 (5540) [ 86.905521][ T5546] loop1: detected capacity change from 0 to 32768 [ 86.909505][ T5546] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.192 (5546) [ 86.946941][ T5532] BTRFS info (device loop4): enabling ssd optimizations [ 86.971321][ T5278] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (5278) [ 87.717176][ T4344] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.985380][ T5581] loop1: detected capacity change from 0 to 512 [ 87.988369][ T5581] EXT4-fs: Ignoring removed oldalloc option [ 88.251526][ T5581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 88.254355][ T5581] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.263936][ T5581] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.195: Bad quota inum: 2, type: 2 [ 88.266206][ T5581] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 88.268865][ T5581] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 88.268869][ T5582] loop4: detected capacity change from 0 to 512 [ 88.268892][ T5581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.270344][ T5582] EXT4-fs: Ignoring removed oldalloc option [ 88.290557][ T5578] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.195: inode #2: comm syz.1.195: iget: illegal inode # [ 88.300403][ T5582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 88.302608][ T5582] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.304036][ T5582] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.194: Bad quota inum: 2, type: 2 [ 88.305980][ T5582] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 88.308406][ T5582] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 88.309513][ T5582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.318127][ T5582] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.194: inode #2: comm syz.4.194: iget: illegal inode # [ 88.363064][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 88.650071][ T5590] loop2: detected capacity change from 0 to 32768 [ 88.656325][ T5590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.196 (5590) [ 88.661140][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 88.665404][ T5590] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.667174][ T5590] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 88.668463][ T5590] BTRFS info (device loop2): use zlib compression, level 3 [ 88.669582][ T5590] BTRFS info (device loop2): turning on sync discard [ 88.670631][ T5590] BTRFS info (device loop2): using free space tree [ 88.789537][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 88.876525][ T5610] loop3: detected capacity change from 0 to 512 [ 88.878020][ T5610] EXT4-fs: Ignoring removed oldalloc option [ 88.888651][ T5610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 88.890450][ T5610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.968604][ T5612] loop4: detected capacity change from 0 to 32768 [ 89.004262][ T5618] EXT4-fs: Ignoring removed oldalloc option [ 89.043247][ T5612] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.198 (5612) [ 89.186314][ T5610] EXT4-fs error (device loop3): ext4_quota_enable:7045: comm syz.3.193: Bad quota inum: 2, type: 2 [ 89.221074][ T5618] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 89.222818][ T5618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.224239][ T5618] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.199: Bad quota inum: 2, type: 2 [ 89.226295][ T5618] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 89.228783][ T5618] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 89.230112][ T5618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.252470][ T5613] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.199: inode #2: comm syz.1.199: iget: illegal inode # [ 89.262112][ T5610] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 89.276909][ T5610] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 89.286718][ T5610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.294908][ T5590] BTRFS info (device loop2): enabling ssd optimizations [ 89.339972][ T5610] EXT4-fs error (device loop3): ext4_get_parent:1910: comm syz.3.193: inode #2: comm syz.3.193: iget: illegal inode # [ 89.640637][ T5636] set_capacity_and_notify: 1 callbacks suppressed [ 89.640660][ T5636] loop5: detected capacity change from 0 to 512 [ 89.645042][ T5636] EXT4-fs: Ignoring removed oldalloc option [ 89.873716][ T5636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 89.875436][ T5636] EXT4-fs (loop5): orphan cleanup on readonly fs [ 89.876680][ T5636] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.200: Bad quota inum: 2, type: 2 [ 89.878767][ T5636] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 89.881203][ T5636] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 89.882325][ T5636] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 89.901083][ T5630] EXT4-fs error (device loop5): ext4_get_parent:1910: comm syz.5.200: inode #2: comm syz.5.200: iget: illegal inode # [ 89.912119][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 89.998996][ T5641] loop1: detected capacity change from 0 to 128 [ 90.053059][ T5641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 90.057006][ T5641] System zones: 1-3, 19-19, 35-36 [ 90.062216][ T5641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.264387][ T5655] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 90.292198][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 90.581225][ T5665] loop5: detected capacity change from 0 to 32768 [ 90.615792][ T5665] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 90.631168][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 91.253088][ T5678] loop3: detected capacity change from 0 to 512 [ 91.256406][ T5678] EXT4-fs: Ignoring removed oldalloc option [ 91.331748][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 91.370609][ T5678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 91.372399][ T5678] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.374224][ T5678] EXT4-fs error (device loop3): ext4_quota_enable:7045: comm syz.3.204: Bad quota inum: 2, type: 2 [ 91.376279][ T5678] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 91.378954][ T5678] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 91.380088][ T5678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.401718][ T5674] EXT4-fs error (device loop3): ext4_get_parent:1910: comm syz.3.204: inode #2: comm syz.3.204: iget: illegal inode # [ 91.571415][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 91.690694][ T5693] loop3: detected capacity change from 0 to 32768 [ 91.719038][ T5693] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 92.060798][ T5693] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.584717][ T4335] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.725748][ T5708] loop4: detected capacity change from 0 to 32768 [ 92.768379][ T5708] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 92.782848][ T5708] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.795729][ T5712] device syzkaller0 entered promiscuous mode [ 92.935937][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 93.436967][ T5722] loop2: detected capacity change from 0 to 512 [ 93.440333][ T5722] EXT4-fs: Ignoring removed oldalloc option [ 93.529409][ T5722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 93.531380][ T5722] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.549498][ T5722] EXT4-fs error (device loop2): ext4_quota_enable:7045: comm syz.2.213: Bad quota inum: 2, type: 2 [ 93.551376][ T5722] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 93.553962][ T5722] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 93.555050][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.613516][ T5721] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.213: inode #2: comm syz.2.213: iget: illegal inode # [ 93.711859][ T5726] netlink: 'syz.5.207': attribute type 1 has an invalid length. [ 93.844819][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 93.882132][ T5728] loop1: detected capacity change from 0 to 32768 [ 93.911141][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 93.958227][ T5728] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 94.014792][ T5732] loop2: detected capacity change from 0 to 32768 [ 94.024436][ T5732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.216 (5732) [ 94.031405][ T5732] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.033037][ T5732] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 94.034593][ T5732] BTRFS info (device loop2): use zlib compression, level 3 [ 94.035712][ T5732] BTRFS info (device loop2): turning on sync discard [ 94.037000][ T5732] BTRFS info (device loop2): using free space tree [ 94.058564][ T5738] loop3: detected capacity change from 0 to 128 [ 94.167539][ T5738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 94.168954][ T5738] System zones: 1-3, 19-19, 35-36 [ 94.553974][ T5737] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 94.622869][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 94.623991][ T5738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.764129][ T5737] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 94.846625][ T5753] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 94.866675][ T5754] set_capacity_and_notify: 1 callbacks suppressed [ 94.866694][ T5754] loop4: detected capacity change from 0 to 512 [ 94.870968][ T5754] EXT4-fs: Ignoring removed oldalloc option [ 95.383087][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 95.523677][ T5754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 95.525645][ T5754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.543124][ T5754] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.214: Bad quota inum: 2, type: 2 [ 95.562301][ T5754] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 95.564986][ T5754] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 95.566162][ T5754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.587056][ T5752] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.214: inode #2: comm syz.4.214: iget: illegal inode # [ 95.703227][ T5732] BTRFS info (device loop2): enabling ssd optimizations [ 95.789535][ T5773] loop3: detected capacity change from 0 to 512 [ 95.792523][ T5773] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.013252][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.161848][ T4339] ocfs2: Unmounting device (7,1) on (node local) [ 96.168578][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 96.216707][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 96.332232][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 96.336863][ T4335] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.451906][ T5783] loop1: detected capacity change from 0 to 32768 [ 96.500791][ T5785] loop4: detected capacity change from 0 to 512 [ 96.503519][ T5785] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.745744][ T5783] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.803471][ T5782] loop5: detected capacity change from 0 to 32768 [ 96.827113][ T5782] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 96.902408][ T5792] loop3: detected capacity change from 0 to 32768 [ 96.916014][ T5785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.942686][ T5792] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 96.958488][ T5782] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 97.825730][ T5792] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.829621][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 98.935513][ T5815] loop2: detected capacity change from 0 to 512 [ 98.938326][ T5815] EXT4-fs: Ignoring removed oldalloc option [ 99.176211][ T5815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 99.178074][ T5815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.179363][ T5815] EXT4-fs error (device loop2): ext4_quota_enable:7045: comm syz.2.228: Bad quota inum: 2, type: 2 [ 99.181393][ T5815] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 99.183752][ T5815] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 99.184854][ T5815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.204640][ T5813] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.228: inode #2: comm syz.2.228: iget: illegal inode # [ 99.294890][ T5817] loop4: detected capacity change from 0 to 32768 [ 99.318159][ T5817] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 99.356212][ T5817] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 99.432819][ T4339] ocfs2: Unmounting device (7,1) on (node local) [ 100.012909][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 100.376161][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 100.516007][ T5830] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 100.869973][ T5830] bond1: (slave veth3): Enslaving as an active interface with a down link [ 100.887910][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 100.890258][ T5834] bond1: (slave veth0_to_bond): making interface the new active one [ 100.897721][ T5834] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 101.000216][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 101.072833][ T5836] loop3: detected capacity change from 0 to 32768 [ 101.081059][ T5829] loop1: detected capacity change from 0 to 32768 [ 101.102266][ T5829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.232 (5829) [ 101.142366][ T5838] loop2: detected capacity change from 0 to 32768 [ 101.154527][ T5829] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.158404][ T5829] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 101.160039][ T5829] BTRFS info (device loop1): use zlib compression, level 3 [ 101.166767][ T5829] BTRFS info (device loop1): turning on sync discard [ 101.167092][ T5838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.177616][ T5829] BTRFS info (device loop1): using free space tree [ 101.182048][ T5836] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 101.188662][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 101.191425][ T5836] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.287597][ T5863] loop4: detected capacity change from 0 to 32768 [ 103.325750][ T5863] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 103.345587][ T5863] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.935414][ T5829] BTRFS error (device loop1): open_ctree failed: -12 [ 104.012176][ T5882] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 104.036025][ T5278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5278) [ 104.096347][ T5866] loop5: detected capacity change from 0 to 32768 [ 104.160547][ T5866] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 104.186668][ T5866] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 104.201559][ T5882] bond1: (slave veth3): Enslaving as an active interface with a down link [ 104.228664][ T4335] ocfs2: Unmounting device (7,2) on (node local) [ 104.302951][ T5886] bond1: (slave veth0_to_bond): making interface the new active one [ 104.307502][ T5886] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 104.407074][ T5890] loop2: detected capacity change from 0 to 32768 [ 104.408663][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.239'. [ 104.410279][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 104.466345][ T5890] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.552578][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 104.580480][ T5895] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 105.110558][ T5901] loop3: detected capacity change from 0 to 32768 [ 105.127442][ T5901] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 105.143226][ T5901] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.245435][ T5898] bond2: (slave veth5): Enslaving as an active interface with a down link [ 105.273194][ T4335] ocfs2: Unmounting device (7,2) on (node local) [ 105.275827][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 105.284049][ T5902] bond1: (slave veth0_to_bond): Releasing active interface [ 105.308540][ T5902] bond2: (slave veth0_to_bond): making interface the new active one [ 105.310626][ T5902] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.316089][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 105.637897][ T5909] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 105.739301][ T5907] bond2: (slave veth5): Enslaving as an active interface with a down link [ 105.795305][ T4859] ocfs2: Unmounting device (7,5) on (node local) [ 105.803379][ T5907] bond1: (slave veth0_to_bond): Releasing active interface [ 105.839083][ T5907] bond2: (slave veth0_to_bond): making interface the new active one [ 105.841181][ T5907] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.849054][ T5915] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 105.862632][ T5909] device macvlan2 entered promiscuous mode [ 105.898328][ T5914] bond3: (slave veth7): Enslaving as an active interface with a down link [ 105.900013][ T5917] netlink: 'syz.5.243': attribute type 1 has an invalid length. [ 105.909909][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 105.929689][ T5922] bond1: (slave veth3): Enslaving as an active interface with a down link [ 105.931144][ T5920] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 105.968752][ T5915] bond2: (slave veth0_to_bond): Releasing active interface [ 105.997606][ T5915] bond3: (slave veth0_to_bond): making interface the new active one [ 106.000553][ T5915] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.003954][ T5917] bond1: (slave veth0_to_bond): making interface the new active one [ 106.005957][ T5917] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.018658][ T5922] device macvlan2 entered promiscuous mode [ 106.028165][ T5920] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.045040][ T5914] device macvlan2 entered promiscuous mode [ 106.414564][ T5920] bond1: (slave veth0_to_bond): making interface the new active one [ 106.416682][ T5920] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.443901][ T5934] loop3: detected capacity change from 0 to 4096 [ 106.446335][ T5920] device macvlan2 entered promiscuous mode [ 106.579617][ T5938] loop5: detected capacity change from 0 to 512 [ 106.581224][ T5938] EXT4-fs: Ignoring removed oldalloc option [ 106.632314][ T5938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 106.634310][ T5938] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.635794][ T5938] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.249: Bad quota inum: 2, type: 2 [ 106.638002][ T5938] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 106.640764][ T5938] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 106.642123][ T5938] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 106.649852][ T5938] EXT4-fs error (device loop5): ext4_get_parent:1910: comm syz.5.249: inode #2: comm syz.5.249: iget: illegal inode # [ 106.683196][ T5945] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 106.706517][ T5945] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.734997][ T5945] bond1: (slave veth0_to_bond): making interface the new active one [ 106.737340][ T5945] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.816867][ T5951] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 106.839113][ T5951] bond2: (slave veth5): Enslaving as an active interface with a down link [ 106.872558][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 106.880031][ T5951] device macvlan2 entered promiscuous mode [ 106.885860][ T5951] device bond2 entered promiscuous mode [ 106.887411][ T5951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.889311][ T5951] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 106.892611][ T5951] device bond2 left promiscuous mode [ 106.983933][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 107.132048][ T5959] loop2: detected capacity change from 0 to 512 [ 107.133601][ T5959] EXT4-fs: Ignoring removed oldalloc option [ 107.292468][ T5959] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 107.294149][ T5959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.295491][ T5959] EXT4-fs error (device loop2): ext4_quota_enable:7045: comm syz.2.255: Bad quota inum: 2, type: 2 [ 107.297451][ T5959] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 107.300111][ T5959] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 107.301247][ T5959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.315544][ T5957] netlink: 'syz.5.256': attribute type 1 has an invalid length. [ 107.318486][ T5955] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.255: inode #2: comm syz.2.255: iget: illegal inode # [ 107.508617][ T5969] loop1: detected capacity change from 0 to 512 [ 107.511819][ T5969] EXT4-fs: Ignoring removed oldalloc option [ 107.649292][ T5971] loop4: detected capacity change from 0 to 512 [ 107.652500][ T5971] EXT4-fs: Ignoring removed oldalloc option [ 107.765733][ T5969] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 107.767580][ T5969] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.768870][ T5969] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.257: Bad quota inum: 2, type: 2 [ 107.772005][ T5969] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 107.774571][ T5969] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 107.775748][ T5969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.778760][ T5971] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 107.780390][ T5971] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.781788][ T5971] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.258: Bad quota inum: 2, type: 2 [ 107.786136][ T5971] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 107.788641][ T5971] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 107.789755][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.794285][ T5966] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.257: inode #2: comm syz.1.257: iget: illegal inode # [ 107.812234][ T5970] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.258: inode #2: comm syz.4.258: iget: illegal inode # [ 107.821426][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 107.830405][ T5961] bond2: (slave veth5): Enslaving as an active interface with a down link [ 107.839305][ T5976] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 107.847244][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.256'. [ 107.858762][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.869193][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.869928][ T5957] device macvlan3 entered promiscuous mode [ 107.873211][ T5957] device bond2 entered promiscuous mode [ 107.874486][ T5957] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.876343][ T5957] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 107.885746][ T5957] device bond2 left promiscuous mode [ 107.951183][ T5975] bond3: (slave veth7): Enslaving as an active interface with a down link [ 107.952891][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.259'. [ 107.967800][ T5975] device macvlan2 entered promiscuous mode [ 107.969415][ T5975] device bond3 entered promiscuous mode [ 107.970655][ T5975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.972446][ T5975] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 107.976288][ T5975] device bond3 left promiscuous mode [ 108.221122][ T5983] loop5: detected capacity change from 0 to 512 [ 108.224671][ T5983] EXT4-fs: Ignoring removed oldalloc option [ 108.445354][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 108.452584][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 108.464170][ T5983] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 108.465904][ T5983] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.467244][ T5983] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.261: Bad quota inum: 2, type: 2 [ 108.469473][ T5983] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 108.471886][ T5983] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 108.473072][ T5983] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.624104][ T5990] loop3: detected capacity change from 0 to 512 [ 108.637817][ T5990] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.833633][ T5991] loop1: detected capacity change from 0 to 512 [ 108.835197][ T5991] EXT4-fs: Ignoring removed oldalloc option [ 108.843600][ T5991] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 108.845440][ T5991] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.847176][ T5991] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.262: Bad quota inum: 2, type: 2 [ 108.849467][ T5991] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 108.852217][ T5991] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 108.853264][ T5991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.861544][ T5991] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.262: inode #2: comm syz.1.262: iget: illegal inode # [ 108.900080][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 108.900430][ T5990] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.264: Allocating blocks 41-42 which overlap fs metadata [ 108.914894][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 108.917403][ T5990] Quota error (device loop3): write_blk: dquota write failed [ 108.920148][ T5990] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 108.922961][ T5990] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.264: Allocating blocks 41-42 which overlap fs metadata [ 108.927769][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 108.930011][ T5990] Quota error (device loop3): write_blk: dquota write failed [ 108.932243][ T5990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 108.934613][ T5990] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.264: Failed to acquire dquot type 1 [ 108.936881][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 108.938171][ T5990] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.952497][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 108.957893][ T5990] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.264: corrupted inode contents [ 108.960235][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 108.961556][ T5990] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.264: mark_inode_dirty error [ 109.013466][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.015091][ T5990] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.264: corrupted inode contents [ 109.017654][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.018957][ T5990] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.264: mark_inode_dirty error [ 109.021413][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.023034][ T5990] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.264: corrupted inode contents [ 109.037771][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.039121][ T5990] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 109.041199][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.042409][ T5990] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.264: corrupted inode contents [ 109.045246][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.046578][ T5990] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.264: mark_inode_dirty error [ 109.049177][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.050421][ T5990] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 109.052178][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 109.054837][ T5990] EXT4-fs (loop3): 1 truncate cleaned up [ 109.055969][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.266009][ T6005] loop2: detected capacity change from 0 to 512 [ 109.267437][ T6005] EXT4-fs: Ignoring removed oldalloc option [ 109.279293][ T6005] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 109.281815][ T6005] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.285265][ T6005] EXT4-fs error (device loop2): ext4_quota_enable:7045: comm syz.2.265: Bad quota inum: 2, type: 2 [ 109.290448][ T6005] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 109.293368][ T6005] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 109.294905][ T6005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.311853][ T6003] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.265: inode #2: comm syz.2.265: iget: illegal inode # [ 109.373006][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 109.375777][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 109.508386][ T6008] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 109.531869][ T6008] bond2: (slave veth5): Enslaving as an active interface with a down link [ 109.547149][ T6008] device macvlan3 entered promiscuous mode [ 109.550089][ T6008] device bond2 entered promiscuous mode [ 109.554132][ T6008] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 109.736296][ T6008] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 109.739666][ T6008] device bond2 left promiscuous mode [ 109.794489][ T6016] loop3: detected capacity change from 0 to 512 [ 109.795987][ T6016] EXT4-fs: Ignoring removed oldalloc option [ 109.802406][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 109.821557][ T6016] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 109.823356][ T6016] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.826057][ T6016] EXT4-fs error (device loop3): ext4_quota_enable:7045: comm syz.3.267: Bad quota inum: 2, type: 2 [ 109.828149][ T6016] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 109.830671][ T6016] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 109.831871][ T6016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.838349][ T6016] EXT4-fs error (device loop3): ext4_get_parent:1910: comm syz.3.267: inode #2: comm syz.3.267: iget: illegal inode # [ 110.255417][ T6028] EXT4-fs: Ignoring removed oldalloc option [ 110.296603][ T6026] EXT4-fs: Ignoring removed oldalloc option [ 110.317464][ T6025] EXT4-fs: Ignoring removed oldalloc option [ 110.466403][ T6030] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 110.476258][ T6025] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 110.476272][ T6026] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 110.477885][ T6025] EXT4-fs (loop5): orphan cleanup on readonly fs [ 110.479183][ T6026] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.481270][ T6026] EXT4-fs error (device loop2): ext4_quota_enable:7045: comm syz.2.271: Bad quota inum: 2, type: 2 [ 110.481272][ T6025] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.270: Bad quota inum: 2, type: 2 [ 110.483223][ T6026] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 110.487404][ T6026] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 110.488476][ T6026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.492607][ T6025] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 110.495415][ T6025] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 110.496630][ T6025] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 110.520440][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 110.523869][ T6026] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.271: inode #2: comm syz.2.271: iget: illegal inode # [ 110.529407][ T6030] bond4: (slave veth9): Enslaving as an active interface with a down link [ 110.531020][ T6022] EXT4-fs error (device loop5): ext4_get_parent:1910: comm syz.5.270: inode #2: comm syz.5.270: iget: illegal inode # [ 110.531403][ T6028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 110.535843][ T6028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.537191][ T6028] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.272: Bad quota inum: 2, type: 2 [ 110.539071][ T6028] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 110.541616][ T6028] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 110.542718][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.583622][ T6030] device macvlan3 entered promiscuous mode [ 110.585418][ T6030] device bond4 entered promiscuous mode [ 110.586777][ T6030] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 110.588819][ T6030] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 110.614497][ T6030] device bond4 left promiscuous mode [ 110.692992][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 111.004061][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 111.016665][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 111.034332][ T6042] xt_TCPMSS: Only works on TCP SYN packets [ 111.234387][ T6049] EXT4-fs: Ignoring removed oldalloc option [ 111.458133][ T6049] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 111.459965][ T6049] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.461432][ T6049] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.275: Bad quota inum: 2, type: 2 [ 111.463392][ T6049] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 111.466263][ T6049] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 111.467595][ T6049] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 111.507668][ T6053] syz.2.279 uses obsolete (PF_INET,SOCK_PACKET) [ 111.548613][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 111.624365][ T6066] bridge0: port 3(syz_tun) entered blocking state [ 111.625975][ T6066] bridge0: port 3(syz_tun) entered disabled state [ 111.628303][ T6066] device syz_tun entered promiscuous mode [ 111.629759][ T6066] bridge0: port 3(syz_tun) entered blocking state [ 111.631020][ T6066] bridge0: port 3(syz_tun) entered forwarding state [ 112.085815][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 112.091291][ T6081] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 112.142291][ T6081] bond5: (slave veth11): Enslaving as an active interface with a down link [ 112.162229][ T6081] device macvlan3 entered promiscuous mode [ 112.166768][ T6081] device bond5 entered promiscuous mode [ 112.168187][ T6081] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 112.170176][ T6081] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 112.173573][ T6081] device bond5 left promiscuous mode [ 112.371174][ T6094] set_capacity_and_notify: 4 callbacks suppressed [ 112.371182][ T6094] loop4: detected capacity change from 0 to 512 [ 112.373904][ T6094] EXT4-fs: Ignoring removed oldalloc option [ 112.537353][ T6094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 112.538999][ T6094] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.540241][ T6094] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.292: Bad quota inum: 2, type: 2 [ 112.542689][ T6094] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 112.545394][ T6094] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 112.546549][ T6094] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.928729][ T6099] loop2: detected capacity change from 0 to 131072 [ 112.931655][ T6099] F2FS-fs (loop2): invalid crc value [ 112.936907][ T6099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.944130][ T6099] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 112.949705][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.295'. [ 112.952054][ T6099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 113.011717][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 113.879180][ T6137] loop5: detected capacity change from 0 to 512 [ 113.882588][ T6137] EXT4-fs: Ignoring removed oldalloc option [ 114.070146][ T6137] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 114.072224][ T6137] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.073907][ T6137] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.304: Bad quota inum: 2, type: 2 [ 114.076181][ T6137] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 114.081271][ T6137] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 114.082573][ T6137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.143291][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 114.484301][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 114.755507][ T6159] loop5: detected capacity change from 0 to 512 [ 114.758613][ T6159] EXT4-fs: Ignoring removed oldalloc option [ 114.980486][ T6159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 114.982430][ T6159] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.985597][ T6159] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.308: Bad quota inum: 2, type: 2 [ 114.987431][ T6159] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 114.989933][ T6159] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 114.991097][ T6159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 115.300434][ T6165] loop4: detected capacity change from 0 to 131072 [ 115.306672][ T6165] F2FS-fs (loop4): invalid crc value [ 115.313754][ T6165] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.320347][ T6165] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 115.322756][ T6165] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 115.415339][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 116.372502][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 116.536842][ T6204] loop3: detected capacity change from 0 to 512 [ 116.539790][ T6204] EXT4-fs: Ignoring removed oldalloc option [ 116.765116][ T6204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 116.766966][ T6204] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.768348][ T6204] EXT4-fs error (device loop3): ext4_quota_enable:7045: comm syz.3.320: Bad quota inum: 2, type: 2 [ 116.770317][ T6204] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 116.772808][ T6204] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 116.774417][ T6204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.279690][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 117.647697][ T6232] loop4: detected capacity change from 0 to 512 [ 117.653938][ T6232] EXT4-fs: Ignoring removed oldalloc option [ 117.710787][ T6232] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 117.712847][ T6232] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.716420][ T6232] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.333: Bad quota inum: 2, type: 2 [ 117.718510][ T6232] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 117.721484][ T6232] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 117.722720][ T6232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.741804][ T6230] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.333: inode #2: comm syz.4.333: iget: illegal inode # [ 117.802063][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.336'. [ 117.932428][ T6245] loop5: detected capacity change from 0 to 512 [ 117.936017][ T6245] EXT4-fs: Ignoring removed oldalloc option [ 118.130834][ T6245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 118.132745][ T6245] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.135694][ T6245] EXT4-fs error (device loop5): ext4_quota_enable:7045: comm syz.5.335: Bad quota inum: 2, type: 2 [ 118.137844][ T6245] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 118.140718][ T6245] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 118.142064][ T6245] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.166619][ T6239] EXT4-fs error (device loop5): ext4_get_parent:1910: comm syz.5.335: inode #2: comm syz.5.335: iget: illegal inode # [ 118.169583][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 118.381403][ T6255] loop4: detected capacity change from 0 to 512 [ 118.384644][ T6255] EXT4-fs: Ignoring removed oldalloc option [ 118.639179][ T4859] EXT4-fs (loop5): unmounting filesystem. [ 118.646985][ T6255] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 118.658532][ T6255] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.660021][ T6255] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.340: Bad quota inum: 2, type: 2 [ 118.661930][ T6255] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 118.664402][ T6255] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 118.665450][ T6255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.059174][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 119.296690][ T6272] loop4: detected capacity change from 0 to 512 [ 119.299619][ T6272] EXT4-fs: Ignoring removed oldalloc option [ 119.522969][ T6272] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 119.524860][ T6272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.526310][ T6272] EXT4-fs error (device loop4): ext4_quota_enable:7045: comm syz.4.343: Bad quota inum: 2, type: 2 [ 119.558055][ T6272] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 119.560500][ T6272] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 119.561618][ T6272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.610437][ T6279] netlink: 'syz.5.347': attribute type 1 has an invalid length. [ 119.633874][ T6279] bond3: (slave veth7): Enslaving as an active interface with a down link [ 119.656750][ T6279] device macvlan3 entered promiscuous mode [ 119.658378][ T6279] device bond3 entered promiscuous mode [ 119.659665][ T6279] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 119.661708][ T6279] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 119.665502][ T6279] device bond3 left promiscuous mode [ 119.977741][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 119.985600][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 120.337492][ T6294] loop1: detected capacity change from 0 to 512 [ 120.340807][ T6294] EXT4-fs: Ignoring removed oldalloc option [ 120.432500][ T6294] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 120.434394][ T6294] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.436263][ T6294] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.352: Bad quota inum: 2, type: 2 [ 120.438216][ T6294] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 120.440664][ T6294] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 120.441785][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.462949][ T6293] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.352: inode #2: comm syz.1.352: iget: illegal inode # [ 120.485357][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.487972][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.961160][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 121.172561][ T6307] loop1: detected capacity change from 0 to 512 [ 121.179767][ T6307] EXT4-fs: Ignoring removed oldalloc option [ 121.398540][ T6307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 121.400840][ T6307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.402130][ T6307] EXT4-fs error (device loop1): ext4_quota_enable:7045: comm syz.1.356: Bad quota inum: 2, type: 2 [ 121.404965][ T6307] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 121.407565][ T6307] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 121.408731][ T6307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.431428][ T6306] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.356: inode #2: comm syz.1.356: iget: illegal inode # [ 121.632917][ T6322] loop3: detected capacity change from 0 to 512 [ 121.636741][ T6322] EXT4-fs: Ignoring removed oldalloc option [ 121.901811][ T4339] EXT4-fs (loop1): unmounting filesystem. [ 121.927870][ T6327] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 121.933853][ T6322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 121.935672][ T6322] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.936983][ T6322] EXT4-fs error (device loop3): ext4_quota_enable:7045: comm syz.3.357: Bad quota inum: 2, type: 2 [ 121.938960][ T6322] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 121.941520][ T6322] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 121.942629][ T6322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.967541][ T6327] bond3: (slave veth7): Enslaving as an active interface with a down link [ 122.000977][ T6327] device macvlan3 entered promiscuous mode [ 122.002656][ T6327] device bond3 entered promiscuous mode [ 122.005309][ T6327] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 122.007058][ T6327] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.010368][ T6327] device bond3 left promiscuous mode [ 122.181943][ T6341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'. [ 122.221705][ T6346] 9pnet_virtio: no channels available for device syz [ 122.227252][ T6347] binder_user_error: 1 callbacks suppressed [ 122.227258][ T6347] binder: 6340:6347 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 122.229905][ T6347] binder: 6340:6347 got reply transaction with no transaction stack [ 122.231417][ T6347] binder_debug: 2 callbacks suppressed [ 122.231429][ T6347] binder: 6340:6347 transaction reply to 0:0 failed 34/29201/-71, size 88-24 line 2963 [ 122.245992][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.271306][ T6351] jffs2: notice: (6351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.303687][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 122.350286][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 122.436463][ T6368] device syzkaller0 entered promiscuous mode [ 122.448339][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.450059][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.649769][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.651658][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.258046][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.273728][ T6398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.283859][ T6398] netlink: 'syz.2.394': attribute type 13 has an invalid length. [ 123.290699][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.313772][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.321410][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.410446][ T6409] binder: 6408:6409 tried to acquire reference to desc 0, got 1 instead [ 123.473733][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 123.631594][ T4612] binder: release 6408:6409 transaction 39 out, still active [ 123.633991][ T5577] binder: send failed reply for transaction 39, target dead [ 125.442413][ T6372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.507699][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.509393][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.518817][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.520356][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.654846][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.656537][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.702183][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 125.806555][ T4346] Bluetooth: hci4: Malformed LE Event: 0x1b [ 125.872888][ T6477] device syzkaller0 entered promiscuous mode [ 125.913960][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.915096][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.065977][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 126.084918][ T6485] input: syz0 as /devices/virtual/input/input2 [ 126.104124][ T6489] Bluetooth: MGMT ver 1.22 [ 126.181659][ T6492] tipc: Started in network mode [ 126.182572][ T6492] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 126.190958][ T6492] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14bb [ 126.192478][ T6492] tipc: Enabled bearer , priority 10 [ 126.210044][ T6497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.260860][ T6506] 9pnet_virtio: no channels available for device syz [ 126.294775][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.296272][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.550746][ T6526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 126.552075][ T6526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.567784][ T6526] vhci_hcd vhci_hcd.0: Device attached [ 126.569704][ T6527] vhci_hcd: connection closed [ 126.571365][ T4713] vhci_hcd: stop threads [ 126.573262][ T4713] vhci_hcd: release socket [ 126.574918][ T4713] vhci_hcd: disconnect device [ 126.627549][ T6532] netlink: 'syz.5.454': attribute type 13 has an invalid length. [ 126.645220][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.657022][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.660886][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.766120][ T6534] netlink: 68 bytes leftover after parsing attributes in process `syz.5.455'. [ 126.905236][ T6542] binder: 6541:6542 tried to acquire reference to desc 0, got 1 instead [ 126.910499][ T6542] binder: 6541:6542 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 126.912799][ T6542] binder: 6542 RLIMIT_NICE not set [ 126.919644][ T6542] binder: undelivered transaction 50, put_user failed [ 126.922676][ T6542] binder: 6541:6542 ioctl c0306201 20000680 returned -14 [ 126.934372][ T5574] binder: undelivered TRANSACTION_COMPLETE [ 127.187977][ T6560] device syzkaller0 entered promiscuous mode [ 127.354326][ T4346] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 127.355947][ T4346] Bluetooth: hci3: Injecting HCI hardware error event [ 127.358011][ T4346] Bluetooth: hci3: hardware error 0x00 [ 127.408546][ T5577] tipc: Node number set to 1 [ 127.590130][ T6578] device ip6erspan0 entered promiscuous mode [ 128.159873][ T4340] Bluetooth: hci4: SCO packet for unknown connection handle 243 [ 128.264845][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.267619][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.268706][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.269887][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.271098][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.272193][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.273365][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.274635][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.275737][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.276812][ T6620] tc action pedit offset must be on 32 bit boundaries [ 128.277900][ T6620] 0: reclassify loop, rule prio 0, protocol 800 [ 128.437390][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.439111][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.467737][ T6639] binder: Binderfs stats mode cannot be changed during a remount [ 128.508267][ T6642] process 'syz.4.505' launched './file0' with NULL argv: empty string added [ 128.553484][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 128.606160][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.616720][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.971865][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.979188][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.167038][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.168842][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.351628][ T6684] device syzkaller0 entered promiscuous mode [ 129.513534][ T4346] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 129.547823][ T6686] device ifb1 entered promiscuous mode [ 129.642986][ T6693] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 130.500493][ T6749] device enp0s0 entered promiscuous mode [ 130.754201][ T6781] block nbd1: NBD_DISCONNECT [ 130.759611][ T6781] using random self ethernet address [ 130.767417][ T6781] using random host ethernet address [ 130.774901][ T6781] Need at least one configuration in g1. [ 130.777305][ T6781] udc dummy_udc.0: failed to start g1: -22 [ 130.779530][ T6781] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 130.781293][ T6793] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 130.782745][ T6793] netlink: 224 bytes leftover after parsing attributes in process `syz.4.554'. [ 130.787767][ T6781] UDC core: g1: couldn't find an available UDC or it's busy [ 130.792259][ T6781] block nbd1: Disconnected due to user request. [ 130.796448][ T6781] block nbd1: shutting down sockets [ 130.836945][ T6800] binder: 6798:6800 tried to acquire reference to desc 0, got 1 instead [ 130.843282][ T6800] binder: 6798:6800 got transaction with unaligned buffers size, 4298 [ 130.849964][ T6800] binder: 6798:6800 transaction call to 6798:0 failed 55/29201/-22, size 0-0 line 3303 [ 130.854782][ T5574] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.861870][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.866930][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.868978][ T6802] device bridge_slave_0 left promiscuous mode [ 130.878249][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.906935][ T6802] device bridge_slave_1 left promiscuous mode [ 130.908683][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.955128][ T6802] bond3: (slave veth0_to_bond): Releasing active interface [ 130.965825][ T6802] bond0: (slave bond_slave_0): Releasing backup interface [ 131.028232][ T6802] bond0: (slave bond_slave_1): Releasing backup interface [ 131.050437][ T6827] ip_tables: iptables: counters copy to user failed while replacing table [ 131.098586][ T6802] team0: Port device team_slave_0 removed [ 131.110827][ T6802] team0: Port device team_slave_1 removed [ 131.112445][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.117425][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.119539][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.121336][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.133117][ T6802] bond1: (slave veth3): Releasing active interface [ 131.188543][ T6802] bond2: (slave veth5): Releasing active interface [ 131.206847][ T6802] bond3: (slave veth7): Releasing active interface [ 131.246989][ T6802] bond4: (slave veth9): Releasing active interface [ 131.286907][ T6802] bond5: (slave veth11): Releasing active interface [ 131.338181][ T6809] team0: Port device xfrm0 added [ 131.347134][ T6818] tipc: Enabled bearer , priority 0 [ 131.359221][ T6833] lo: Caught tx_queue_len zero misconfig [ 131.360330][ T6833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.513828][ T4666] tipc: Resetting bearer [ 131.594200][ T4346] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 131.595960][ T6853] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 131.597124][ T6853] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.599799][ T6853] vhci_hcd vhci_hcd.0: Device attached [ 131.601728][ T6854] vhci_hcd: connection closed [ 131.602659][ T4666] vhci_hcd: stop threads [ 131.604314][ T4666] vhci_hcd: release socket [ 131.605109][ T4666] vhci_hcd: disconnect device [ 132.048697][ T6857] 9pnet_virtio: no channels available for device syz [ 132.239712][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 132.241337][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 132.353524][ T5574] tipc: Node number set to 1367175436 [ 132.355068][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.356982][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.626561][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.628269][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.641109][ T6910] loop2: detected capacity change from 0 to 7 [ 132.644012][ T6910] loop2: [POWERTEC] p1 p2 p3 [ 132.645038][ T6910] loop2: p1 start 4294902272 is beyond EOD, truncated [ 132.646201][ T6910] loop2: p2 start 16713216 is beyond EOD, truncated [ 132.647409][ T6910] loop2: p3 start 65600 is beyond EOD, truncated [ 132.712592][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.717046][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.927388][ T5793] syzkaller0: tun_net_xmit 76 [ 132.928541][ T5793] syzkaller0: tun_net_xmit 48 [ 132.932018][ T6915] syzkaller0: create flow: hash 153139004 index 2 [ 132.970903][ T6915] syzkaller0: delete flow: hash 153139004 index 2 [ 133.451718][ T6937] binder: 6936:6937 tried to acquire reference to desc 0, got 1 instead [ 133.456217][ T6937] binder: 6936:6937 got transaction with invalid data ptr [ 133.457677][ T6937] binder: 6936:6937 transaction async to 6936:0 failed 61/29201/-14, size 21-0 line 3582 [ 133.459671][ T5574] binder: undelivered TRANSACTION_COMPLETE [ 133.460867][ T5574] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.469001][ T5574] binder: undelivered transaction 60, process died. [ 142.573584][ T4347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.579393][ T4347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.580918][ T4347] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.582584][ T4347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.586739][ T4347] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 142.588073][ T4347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.919209][ T6995] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.922680][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.927517][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.972054][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.973766][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.067721][ T7012] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 144.225318][ T4652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.229837][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 144.276916][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.278581][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.305485][ T4652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.311633][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.313244][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.320200][ T6962] device bridge_slave_0 entered promiscuous mode [ 144.328201][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.330004][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.331927][ T6962] device bridge_slave_1 entered promiscuous mode [ 144.350923][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.359385][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.404390][ T4652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.413708][ T6962] team0: Port device team_slave_0 added [ 144.416497][ T6962] team0: Port device team_slave_1 added [ 144.422912][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.424640][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.428911][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.474702][ T4652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.477570][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.478800][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.483197][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.532056][ T7044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.620'. [ 144.564903][ T6962] device hsr_slave_0 entered promiscuous mode [ 144.604487][ T6962] device hsr_slave_1 entered promiscuous mode [ 144.633573][ T4347] Bluetooth: hci5: command 0x0409 tx timeout [ 144.646574][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.647874][ T6962] Cannot create hsr debugfs directory [ 144.763559][ T7065] bridge0: port 3(syz_tun) entered blocking state [ 144.764722][ T7065] bridge0: port 3(syz_tun) entered disabled state [ 144.766359][ T7065] device syz_tun entered promiscuous mode [ 144.772611][ T7065] bridge0: port 3(syz_tun) entered blocking state [ 144.773864][ T7065] bridge0: port 3(syz_tun) entered forwarding state [ 144.784769][ T6962] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.819901][ T7065] netlink: 'syz.2.624': attribute type 8 has an invalid length. [ 144.862626][ T6962] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.894600][ T6962] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.952758][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.954713][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.135946][ T7090] device team0 entered promiscuous mode [ 145.137022][ T7090] device team_slave_0 entered promiscuous mode [ 145.138261][ T7090] device team_slave_1 entered promiscuous mode [ 145.144585][ T6962] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.185396][ T7109] gadgetfs: bound to dummy_udc driver [ 145.255984][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.262083][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.380548][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.389315][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.390884][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.404460][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.411858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.413683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.415255][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.416498][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.439565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.448350][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.450135][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.451766][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.453127][ T4763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.506869][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.508980][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.510713][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.513175][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.526508][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.528297][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.538660][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.540319][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.550781][ T6962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.552856][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.633823][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.635489][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.637213][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.639508][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.831226][ T7168] device syz_tun left promiscuous mode [ 145.832347][ T7168] bridge0: port 3(syz_tun) entered disabled state [ 145.907359][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.908671][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.911022][ T7168] device bridge_slave_0 left promiscuous mode [ 145.914518][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.957275][ T7168] device bridge_slave_1 left promiscuous mode [ 145.958471][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.998484][ T7168] bond1: (slave veth0_to_bond): Releasing active interface [ 146.034302][ T7168] bond0: (slave bond_slave_0): Releasing backup interface [ 146.076361][ T7168] bond0: (slave bond_slave_1): Releasing backup interface [ 146.125840][ T7168] team0: Port device team_slave_0 removed [ 146.132523][ T7168] team0: Port device team_slave_1 removed [ 146.133897][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.135136][ T7168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.136757][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.138025][ T7168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.143178][ T7168] bond1: (slave veth3): Releasing active interface [ 146.201618][ T7168] bond2: (slave veth5): Releasing active interface [ 146.218466][ T7168] bond3: (slave veth7): Releasing active interface [ 146.259231][ T7172] team0: Mode changed to "random" [ 146.320802][ T7175] device vlan0 entered promiscuous mode [ 146.335538][ T7175] team0: Port device vlan0 added [ 146.336741][ T7179] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 146.429529][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.433825][ T7180] tipc: Started in network mode [ 146.434746][ T7180] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 146.442299][ T7180] tipc: Enabled bearer , priority 0 [ 146.444429][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.445852][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.510538][ T7203] device geneve2 entered promiscuous mode [ 146.593102][ T6962] device veth0_vlan entered promiscuous mode [ 146.597191][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.598981][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.600864][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.602408][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.613628][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.615082][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.669785][ T6962] device veth1_vlan entered promiscuous mode [ 146.713591][ T4347] Bluetooth: hci5: command 0x041b tx timeout [ 146.718245][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.719955][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.721357][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.722968][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.735567][ T6962] device veth0_macvtap entered promiscuous mode [ 146.738513][ T6962] device veth1_macvtap entered promiscuous mode [ 146.809372][ T7232] ------------[ cut here ]------------ [ 146.810336][ T7232] kernel BUG at include/linux/scatterlist.h:163! [ 146.811402][ T7232] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 146.812630][ T7232] Modules linked in: [ 146.813369][ T7232] CPU: 0 PID: 7232 Comm: syz.2.662 Not tainted syzkaller #0 [ 146.814642][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 146.816288][ T7232] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 146.817596][ T7232] pc : sg_init_one+0x1b4/0x1c8 [ 146.818353][ T7232] lr : sg_init_one+0x1b4/0x1c8 [ 146.819143][ T7232] sp : ffff800021c17750 [ 146.819839][ T7232] x29: ffff800021c17750 x28: ffff0000d5ea3200 x27: dfff800000000000 [ 146.821200][ T7232] x26: ffff0000dc980a0e x25: ffff700004382f00 x24: 1ffff00004382f14 [ 146.822534][ T7232] x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010 [ 146.823850][ T7232] x20: ffff800021c178a0 x19: 0000000000000000 x18: 0000000000000000 [ 146.825232][ T7232] x17: ffff80000a5527fc x16: ffff800011b90080 x15: ffff80000a5527fc [ 146.826604][ T7232] x14: 0000000000000003 x13: 1ffff00004382f15 x12: 0000000000080000 [ 146.827995][ T7232] x11: 00000000000028a0 x10: ffff800028829000 x9 : ffff80000a910304 [ 146.829432][ T7232] x8 : 00000000000028a1 x7 : 0000000000000000 x6 : ffff80000805a910 [ 146.830820][ T7232] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010 [ 146.832131][ T7232] x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000 [ 146.833504][ T7232] Call trace: [ 146.834067][ T7232] sg_init_one+0x1b4/0x1c8 [ 146.834843][ T7232] software_key_eds_op+0x410/0x938 [ 146.835749][ T7232] asymmetric_key_eds_op+0x108/0x128 [ 146.836656][ T7232] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 146.837508][ T7232] __arm64_sys_keyctl+0x66c/0x8e0 [ 146.838322][ T7232] invoke_syscall+0x98/0x290 [ 146.839107][ T7232] el0_svc_common+0x13c/0x258 [ 146.839907][ T7232] do_el0_svc+0x5c/0x134 [ 146.840605][ T7232] el0_svc+0x58/0x128 [ 146.841276][ T7232] el0t_64_sync_handler+0x84/0xf0 [ 146.842120][ T7232] el0t_64_sync+0x18c/0x190 [ 146.842883][ T7232] Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) [ 146.844050][ T7232] ---[ end trace 0000000000000000 ]--- [ 147.091349][ T7232] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 147.092564][ T7232] SMP: stopping secondary CPUs [ 147.093403][ T7232] Kernel Offset: disabled [ 147.094141][ T7232] CPU features: 0x0a0000,000f0097,a65bfea7 [ 147.095171][ T7232] Memory Limit: none [ 147.342819][ T7232] Rebooting in 86400 seconds..