last executing test programs: 3m9.03546251s ago: executing program 2 (id=94): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m8.991176535s ago: executing program 2 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x5, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x3a) 3m8.975844318s ago: executing program 1 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) close(0xffffffffffffffff) unshare(0x42000000) 3m8.843151283s ago: executing program 2 (id=100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000500)="778e74a357842a0a8d", 0x9}], 0x2}, 0x4000050) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f000000a580)=[{&(0x7f0000009580)="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", 0x475}], 0x1}}], 0x1, 0x4000000) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 3m8.820292839s ago: executing program 1 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x200048d4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3m8.817096087s ago: executing program 2 (id=103): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x2000, 0x88c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004300)='./file0/file0\x00', 0x109000, 0x64) write$FUSE_INIT(r0, &(0x7f0000004380)={0x50, 0x0, r1, {0x7, 0x29, 0x640e, 0x2000120, 0x4, 0x0, 0x81, 0xfffffffe, 0x0, 0x0, 0x2, 0x7fffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0x4000, 0x0, 0x0, r2, 0x5, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) 3m8.70785893s ago: executing program 1 (id=104): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x10, 0x30, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010"], 0x20}}, 0x20000090) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x6e, 0x2, 0x0, 0x4, 0x2}}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3m8.707231221s ago: executing program 1 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x36) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10b001) accept$alg(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4f53, 0x309e, 0x74, &(0x7f00000004c0)={[0x96]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3m8.64035394s ago: executing program 1 (id=107): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) 3m8.620507318s ago: executing program 1 (id=108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 3m7.953336308s ago: executing program 2 (id=112): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143b", 0xf, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 3m7.112223129s ago: executing program 2 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x1fffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x42005}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = open(&(0x7f0000000240)='./file0\x00', 0x103000, 0x50) lseek(r2, 0x6, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m7.11202708s ago: executing program 32 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x1fffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x42005}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = open(&(0x7f0000000240)='./file0\x00', 0x103000, 0x50) lseek(r2, 0x6, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m7.11177199s ago: executing program 3 (id=121): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50) syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800422100c8006500000811907864010100ac1414bb831f0664010100000000006401010100000000640101017f0000010a0101014441e2ac35d31644009733640101007fffffff440cbe00000000070000009e00004e244e21008090786200000100000000d8d1af53af925fe03adbce03e43e9ad1bf008d58e7fb0b37801b54d222bb019b78508923cb93f2ff7969b8141642a9f8d0d62e48efdad99017e341ead5030ff7fa999ef46bcd19a08fc1b8a7e84b94da381741d2e1fe785e728a5ce49b5751cb875c1bb68c878ffefe47"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 3m6.241039848s ago: executing program 3 (id=128): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xffffffffffffffff, {0x0, 0x0, 0x1}}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x0, 0x0, 0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r5, 0x3, {0x0, 0xff, 0x4}, 0xfe}, 0x18) 3m6.187007519s ago: executing program 3 (id=129): syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 3m5.292019807s ago: executing program 3 (id=136): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44) r1 = fanotify_init(0x2, 0x1000) fanotify_mark(r1, 0x541, 0x40000019, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) pwritev2(r2, 0x0, 0x0, 0x5405, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 3m5.257466768s ago: executing program 3 (id=137): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) 3m5.094980355s ago: executing program 3 (id=140): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c048841}, 0x24004811) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m53.156972025s ago: executing program 33 (id=108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 2m49.875605748s ago: executing program 34 (id=140): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c048841}, 0x24004811) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.015975539s ago: executing program 0 (id=1333): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fff, 0x2) ioctl$BLKPG(r0, 0x1269, 0xffffffffffffffff) 992.458381ms ago: executing program 0 (id=1337): r0 = socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername$l2tp(r0, 0x0, 0x0) 700.590385ms ago: executing program 0 (id=1338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 700.185067ms ago: executing program 0 (id=1340): socket$inet6_tcp(0xa, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) 649.579229ms ago: executing program 0 (id=1344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={0x0, 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000"], 0x28}}, 0x0) 648.660705ms ago: executing program 0 (id=1347): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x74}, {0x6, 0x11, 0x8bc}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x100}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000c84) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 549.348103ms ago: executing program 4 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x9}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 497.815451ms ago: executing program 4 (id=1359): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 497.696089ms ago: executing program 4 (id=1360): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd28, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x2c0}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 497.482734ms ago: executing program 4 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 454.246085ms ago: executing program 4 (id=1364): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 453.965928ms ago: executing program 4 (id=1366): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 257.646263ms ago: executing program 5 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a00400109000100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 191.923284ms ago: executing program 7 (id=1383): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r0, 0x40986f00, 0x0) 188.944625ms ago: executing program 6 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000700)={0x164, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x145, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @random="173e6678c912", {0x8, 0x3}}, 0x1, @random=0x5, 0x7683, @void, @val, @void, @val={0x4, 0x6, {0x2, 0x7, 0x1, 0x8337}}, @void, @val={0x5, 0x3, {0x6f, 0x71, 0xff}}, @val={0x25, 0x3, {0x0, 0x93, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x4, 0x0, {0x6, 0x8, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x0, 0xc9}}, @void, @void, @void, [{0xdd, 0x35, "754fde0ab7b44af01d27078bfba3bccb2d30a455243a44f541e8f85dbb0d52a2e14f8a2efdc6f67db9e44be2ae341f9c0795fcf796"}, {0xdd, 0xb4, "597a909768195f4fc63b8ca912e4757d5f047ab16ddf6c9b8192bc97f51779e145be9b298dbb41c62f0c32d86ba3c145948a68b1d820424c781ea51e310aa57550c3b02713f99b081485f98c32be3309ca8ec8a3a19e3c8a617ee5c0c3fe1d0c9c0abf46092c8eb93a8c405b965db836e5a9a77f0fcacf64aba804f9c109024b8a2f43372ed2e32b791752156bf83cead70be9a0fe232d6d9f6832e109cca91b8466916d231a13a366f685dc1fd82e78eed23657"}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 188.641608ms ago: executing program 5 (id=1385): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.882172ms ago: executing program 7 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x929, 0x0) 114.51226ms ago: executing program 6 (id=1387): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040000) 114.125717ms ago: executing program 5 (id=1388): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) userfaultfd(0x80001) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xc2c, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000009, 0x4d, 0x9, 0x5f, 0x6, 0x5, 0xffff2d3a, 0xffffff01, 0xe, 0xfffffffb, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x2, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x3, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0xc, 0x3, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x80000132, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0x20f9, 0x63290539, 0x2bf, 0x401, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x7c, 0xea4, 0x5fa, 0x89c, 0x7, 0x7fff, 0x6, 0x400, 0x601, 0x6, 0x1, 0xff, 0x3d, 0xcc88, 0x5bea93c3, 0x10000d, 0x8, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xfffe, 0x8, 0x4, 0x10009, 0x3, 0x9, 0xff, 0x9, 0x20003, 0xffffffff, 0x300bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x7, 0x5, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3, 0xb, 0x5, 0xfffffffe, 0x2, 0x3, 0x7, 0x4, 0x6d01, 0x6, 0x38, 0x800001, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x8, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x4, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x4, 0x0, 0x10000, 0x4, 0x37f3, 0x0, 0xa620, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x9, 0x101, 0x225, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x9, 0x5, 0xb1e, 0x6, 0x200, 0x6, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 113.5252ms ago: executing program 7 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) 53.303387ms ago: executing program 7 (id=1390): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {&(0x7f0000000840)=""/248, 0xf743de55d0c00b89, 0x0, 0x2, 0x2}}, 0x48) 53.142982ms ago: executing program 6 (id=1391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x10, @private1, 0xedd6}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000880)='>', 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f8000000000000002900000036000000011b000000000000086b9ab5db5b3a3b8113c0d67f320c17561b5edf0fdd7885aa181a08026f91c8a20514339f25ce5b21566b22d797a38c7048f44466e7c542d2084e26e25af6583e96b052266be9593712cb1cb38198a0d8c2deed9743eef9c82e1eefc11693b6dc49038c5db6ea01a06e616b0a0001000755d0640117f6dad04bd84a4b031cf8d2b2d3af034f66c7bd764322cd3ba9bdd522230695764001e92608c8181256e7e30982e46957a0b253461ff4ddf89f87f6d83d1a71462ddfdfdaa5031c385cd1d55a7771f33467040109c204000004030502000600010004010400000000000014"], 0x110}}], 0x2, 0x200488d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xc}, 0x8) 52.919284ms ago: executing program 5 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007918380000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.3842ms ago: executing program 6 (id=1393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) 51.565352ms ago: executing program 7 (id=1394): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x80480911, 0x0) 4.170033ms ago: executing program 5 (id=1395): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x571, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 3.885448ms ago: executing program 7 (id=1396): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.651513ms ago: executing program 6 (id=1397): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'pim6reg1\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x3}, {0xffffffffffffffff, 0x2, 0x2}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000001b80)=[{0x0}], 0x1, 0x0, 0x0) 3.40232ms ago: executing program 5 (id=1398): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) 0s ago: executing program 6 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x95a, 0x7f, 0x4, 0x6, 0x1, 0x4, 0x4, 0xb6]}}]}]}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.373887][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.375278][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.378464][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.379212][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.379221][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.379232][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.392666][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.392689][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.392700][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.408452][ T4715] hsr_slave_0: entered promiscuous mode [ 30.408780][ T4715] hsr_slave_1: entered promiscuous mode [ 30.408984][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.408993][ T4715] Cannot create hsr debugfs directory [ 30.433071][ T4709] hsr_slave_0: entered promiscuous mode [ 30.434469][ T4709] hsr_slave_1: entered promiscuous mode [ 30.434678][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.434694][ T4709] Cannot create hsr debugfs directory [ 30.448709][ T4710] hsr_slave_0: entered promiscuous mode [ 30.449046][ T4710] hsr_slave_1: entered promiscuous mode [ 30.449260][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.449269][ T4710] Cannot create hsr debugfs directory [ 30.529667][ T4713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.532790][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.533750][ T4713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.536312][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.545844][ T4713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.548706][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.552927][ T4713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.555209][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.577340][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.579699][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.581233][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.583439][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.585134][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.587186][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.588801][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.590255][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.594424][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.594469][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.594620][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.594670][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.615525][ T4715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.616744][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.617023][ T4715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.619796][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.620824][ T4715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.622629][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.626110][ T4715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.628622][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.637077][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.637118][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.637210][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.637241][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.655896][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.665943][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.668043][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.671970][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.673301][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.676997][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.679353][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.685600][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.692781][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.694928][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.696658][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.699985][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.700598][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.702033][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.713388][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.716679][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.716733][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.720876][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.723042][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.724964][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.725003][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.729837][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.731034][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.731379][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.733275][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.740152][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.742305][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.749229][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.751348][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.751499][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.771222][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.771263][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.776447][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.785715][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.802426][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.811858][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.820868][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.820905][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.827006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.827056][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.834963][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.835008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.838695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.838735][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.883424][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.905326][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.916042][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.916083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.920565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.920611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.034399][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.055998][ T4709] veth0_vlan: entered promiscuous mode [ 31.070359][ T4709] veth1_vlan: entered promiscuous mode [ 31.086663][ T4709] veth0_macvtap: entered promiscuous mode [ 31.088035][ T4709] veth1_macvtap: entered promiscuous mode [ 31.094423][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.096586][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.102410][ T1187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.102501][ T1187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.110923][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.121584][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.147715][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.169898][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.171492][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.179585][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.179745][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192104][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.192141][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.204606][ T4715] veth0_vlan: entered promiscuous mode [ 31.207683][ T4715] veth1_vlan: entered promiscuous mode [ 31.211676][ T4713] veth0_vlan: entered promiscuous mode [ 31.213300][ T4713] veth1_vlan: entered promiscuous mode [ 31.237908][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.243633][ T4713] veth0_macvtap: entered promiscuous mode [ 31.244967][ T4713] veth1_macvtap: entered promiscuous mode [ 31.251951][ T4715] veth0_macvtap: entered promiscuous mode [ 31.254660][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.257624][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.260735][ T4715] veth1_macvtap: entered promiscuous mode [ 31.269136][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.271432][ T4719] veth0_vlan: entered promiscuous mode [ 31.273046][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.275862][ T198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.279783][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.285182][ T198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.285348][ T198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.285428][ T198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.292034][ T4719] veth1_vlan: entered promiscuous mode [ 31.337053][ T4710] veth0_vlan: entered promiscuous mode [ 31.351213][ T4719] veth0_macvtap: entered promiscuous mode [ 31.355102][ T4710] veth1_vlan: entered promiscuous mode [ 31.365188][ T4719] veth1_macvtap: entered promiscuous mode [ 31.373755][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.373778][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.431466][ T4710] veth0_macvtap: entered promiscuous mode [ 31.441374][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.441405][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.444878][ T4710] veth1_macvtap: entered promiscuous mode [ 31.450939][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.455482][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.458157][ T1187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458200][ T1187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458232][ T1187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458254][ T1187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.465009][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.466018][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.484696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.484722][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.497123][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.497152][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.534098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.534127][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.542238][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.542637][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.542637][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.542659][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.549223][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.549398][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.559060][ T1380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.559474][ T1380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.559603][ T1380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.559722][ T1380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.574181][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.574209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.592172][ T4899] loop1: detected capacity change from 0 to 1024 [ 31.592741][ T4899] ======================================================= [ 31.592741][ T4899] WARNING: The mand mount option has been deprecated and [ 31.592741][ T4899] and is ignored by this kernel. Remove the mand [ 31.592741][ T4899] option from the mount to silence this warning. [ 31.592741][ T4899] ======================================================= [ 31.614553][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.614580][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.626147][ T4899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.663725][ T4899] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2: lblock 0 mapped to illegal pblock 0 (length 6) [ 31.674188][ T4899] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 31.674230][ T4899] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.674230][ T4899] [ 31.682441][ T4899] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 31.687054][ T4899] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem [ 31.689269][ T4720] Bluetooth: hci1: command tx timeout [ 31.705419][ T39] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 2) [ 31.705883][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 31.705896][ T39] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.705896][ T39] [ 31.707806][ T4715] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 31.708678][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.745497][ T4914] binder: 4913:4914 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 31.745523][ T4914] binder: 4914 RLIMIT_NICE not set [ 31.768494][ T4720] Bluetooth: hci4: command tx timeout [ 31.768938][ T4720] Bluetooth: hci2: command tx timeout [ 31.769043][ T4720] Bluetooth: hci3: command tx timeout [ 31.769117][ T4720] Bluetooth: hci0: command tx timeout [ 31.782281][ T4919] process 'syz.0.7' launched './file0' with NULL argv: empty string added [ 31.843622][ T1380] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.935423][ T4939] loop4: detected capacity change from 0 to 128 [ 31.955287][ T4939] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.997666][ T4940] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 31.999359][ T4939] EXT4-fs (loop4): shut down requested (2) [ 31.999895][ T4939] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 32.027286][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.124440][ T4949] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22'. [ 32.139307][ T4949] syzkaller1: entered promiscuous mode [ 32.139335][ T4949] syzkaller1: entered allmulticast mode [ 32.750304][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 32.750901][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 32.771460][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 32.771492][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 32.820168][ T4978] Zero length message leads to an empty skb [ 33.768603][ T4716] Bluetooth: hci1: command tx timeout [ 33.848225][ T4720] Bluetooth: hci3: command tx timeout [ 33.848256][ T4720] Bluetooth: hci2: command tx timeout [ 33.848280][ T4720] Bluetooth: hci4: command tx timeout [ 33.848322][ T4716] Bluetooth: hci0: command tx timeout [ 34.025304][ T4986] loop3: detected capacity change from 0 to 128 [ 34.254796][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 34.516447][ T5001] syz_tun: entered allmulticast mode [ 34.817363][ T5005] syz_tun: entered allmulticast mode [ 35.410541][ T4966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.462704][ T5021] loop4: detected capacity change from 0 to 512 [ 35.554444][ T5021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.098652][ T4716] Bluetooth: hci1: command tx timeout [ 36.098800][ T4716] Bluetooth: hci0: command tx timeout [ 36.098973][ T4716] Bluetooth: hci2: command tx timeout [ 36.099197][ T4716] Bluetooth: hci3: command tx timeout [ 36.099306][ T4716] Bluetooth: hci4: command tx timeout [ 36.582283][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.596205][ T30] audit: type=1326 audit(36.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5047 comm="syz.1.57" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae9792a8 code=0x0 [ 36.661992][ T5052] binder: 5051:5052 ioctl c0306201 20000080 returned -14 [ 36.662905][ T5052] binder: 5051:5052 tried to acquire reference to desc 0, got 1 instead [ 36.662922][ T5052] binder: 5051:5052 ioctl c0306201 200003c0 returned -14 [ 36.663075][ T5052] binder: 5051:5052 parent offset not aligned correctly. [ 36.663099][ T5052] binder: 5052:5051 translate fd array failed [ 36.663156][ T5052] binder: 5051:5052 transaction call to 5051:0 failed 7/29201/-22, code 0 size 96-24 line 3664 [ 36.663375][ T4900] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.783732][ T5106] loop4: detected capacity change from 0 to 512 [ 37.847870][ T5107] evm: overlay not supported [ 37.871443][ T5111] syzkaller0: entered promiscuous mode [ 37.871469][ T5111] syzkaller0: entered allmulticast mode [ 37.956756][ T5106] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.956789][ T5106] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.968463][ T5106] EXT4-fs (loop4): 1 truncate cleaned up [ 37.968936][ T5106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.986572][ T5112] netlink: 'syz.1.68': attribute type 6 has an invalid length. [ 37.986598][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 37.999254][ T5137] loop2: detected capacity change from 0 to 256 [ 38.037270][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.168624][ T4725] Bluetooth: hci4: command tx timeout [ 38.169468][ T4716] Bluetooth: hci3: command tx timeout [ 38.169496][ T4716] Bluetooth: hci2: command tx timeout [ 38.169509][ T4716] Bluetooth: hci0: command tx timeout [ 38.212350][ T5158] loop4: detected capacity change from 0 to 1024 [ 38.213208][ T5158] EXT4-fs: Ignoring removed oldalloc option [ 38.214886][ T5158] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 38.228231][ T5158] syz.4.82 uses obsolete (PF_INET,SOCK_PACKET) [ 38.343463][ T5166] loop1: detected capacity change from 0 to 128 [ 38.354209][ T5166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.364805][ T5166] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-ce" [ 38.371227][ T5166] fscrypt: AES-128-CBC-ESSIV using implementation "essiv-cbc-aes-sha256-ce" [ 38.395439][ T4715] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.579265][ T30] audit: type=1326 audit(38.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5172 comm="syz.1.86" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae9792a8 code=0x0 [ 38.754681][ T5178] loop4: detected capacity change from 0 to 2048 [ 38.762162][ T5178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.802650][ T5178] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 38.831526][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.311629][ T5202] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 39.339363][ T5202] Failed to initialize the IGMP6 control socket (err -105) [ 39.369030][ T5206] ubi31: attaching mtd0 [ 39.370091][ T5206] ubi31 error: ubi_attach_mtd_dev: bad VID header (4130) or data offsets (4194) [ 39.388683][ T5208] faux_driver vgem: [drm] Unknown color mode 5; guessing buffer size. [ 39.473147][ T5216] loop2: detected capacity change from 0 to 512 [ 39.480349][ T5216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.483841][ T5216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 39.483892][ T5216] System zones: 1-12 [ 39.488936][ T5212] Failed to initialize the IGMP6 autojoin socket (err -105) [ 39.489257][ T5216] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.489502][ T5216] EXT4-fs (loop2): 1 truncate cleaned up [ 39.489949][ T5216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.555006][ T4725] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 39.586266][ T5224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.586289][ T5224] IPv6: NLM_F_CREATE should be set when creating new route [ 39.605065][ T5226] loop1: detected capacity change from 0 to 1024 [ 39.616932][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.617360][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.666941][ T5224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.670641][ T5224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.312987][ T4710] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 40.317878][ T4710] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 40.320069][ T4710] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 40.333913][ T4934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.931205][ T4934] syz_tun (unregistering): left allmulticast mode [ 40.938600][ T1187] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.938645][ T1187] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.938663][ T1187] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.938678][ T1187] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.079226][ T5258] syzkaller0: entered promiscuous mode [ 41.079266][ T5258] syzkaller0: entered allmulticast mode [ 41.109968][ T5261] binder: BINDER_SET_CONTEXT_MGR already set [ 41.109995][ T5261] binder: 5260:5261 ioctl 4018620d 0 returned -16 [ 41.110166][ T5261] binder: 5260:5261 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 41.110180][ T5261] binder: 5260:5261 ioctl c0306201 20000180 returned -22 [ 41.208026][ T5272] binder: BINDER_SET_CONTEXT_MGR already set [ 41.208058][ T5272] binder: 5270:5272 ioctl 4018620d 20000040 returned -16 [ 41.208352][ T5272] binder: tried to use weak ref as strong ref [ 41.208367][ T5272] binder: 5270:5272 Acquire 1 refcount change on invalid ref 0 ret -22 [ 41.210607][ T5272] binder: 5270:5272 got transaction to invalid handle, 1 [ 41.210631][ T5272] binder: 5270:5272 cannot find target node [ 41.210660][ T5272] binder: 5270:5272 transaction call to 0:0 failed 13/29201/-22, code 0 size 120-24 line 3252 [ 41.212098][ T4799] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.219055][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.227191][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.230287][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.232650][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.234217][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.544946][ T1380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.614529][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.672843][ T1380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.755705][ T1380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.826677][ T1380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.859576][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.869248][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.869361][ T5271] bridge_slave_0: entered allmulticast mode [ 41.869816][ T5271] bridge_slave_0: entered promiscuous mode [ 41.884633][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.884672][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.884763][ T5271] bridge_slave_1: entered allmulticast mode [ 41.885205][ T5271] bridge_slave_1: entered promiscuous mode [ 41.907850][ T5271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.909928][ T5271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.917532][ T5271] team0: Port device team_slave_0 added [ 41.921229][ T5271] team0: Port device team_slave_1 added [ 41.935583][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.935606][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.935902][ T5271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.941597][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.941605][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.941618][ T5271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.979259][ T5271] hsr_slave_0: entered promiscuous mode [ 41.981155][ T5271] hsr_slave_1: entered promiscuous mode [ 41.983330][ T5271] debugfs: 'hsr0' already exists in 'hsr' [ 41.983362][ T5271] Cannot create hsr debugfs directory [ 42.054499][ T1380] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.142589][ T5336] loop0: detected capacity change from 0 to 512 [ 42.145573][ T5271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.148557][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.150213][ T5271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.152284][ T5340] FAULT_FLAG_ALLOW_RETRY missing 801 [ 42.152309][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT [ 42.152325][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.152331][ T5340] Call trace: [ 42.152334][ T5340] show_stack+0x2c/0x3c (C) [ 42.152353][ T5340] __dump_stack+0x30/0x40 [ 42.152366][ T5340] dump_stack_lvl+0xd8/0x12c [ 42.152378][ T5340] dump_stack+0x1c/0x28 [ 42.152389][ T5340] handle_userfault+0x15b4/0x1b34 [ 42.152401][ T5340] do_pte_missing+0xf30/0x2a24 [ 42.152411][ T5340] handle_mm_fault+0x14f8/0x2514 [ 42.152420][ T5340] __get_user_pages+0x8b4/0x15b8 [ 42.152431][ T5340] populate_vma_page_range+0x260/0x358 [ 42.152441][ T5340] mprotect_fixup+0x620/0x728 [ 42.152453][ T5340] do_mprotect_pkey+0x7f8/0xa84 [ 42.152465][ T5340] __arm64_sys_mprotect+0x88/0xa0 [ 42.152477][ T5340] invoke_syscall+0x98/0x244 [ 42.152489][ T5340] el0_svc_common+0xec/0x23c [ 42.152501][ T5340] do_el0_svc+0x4c/0x5c [ 42.152512][ T5340] el0_svc+0x64/0x260 [ 42.152523][ T5340] el0t_64_sync_handler+0x44/0x104 [ 42.152533][ T5340] el0t_64_sync+0x198/0x19c [ 42.175199][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.178340][ T5271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.180689][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.182441][ T5271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.188384][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.225356][ T1380] bridge_slave_1: left allmulticast mode [ 42.225389][ T1380] bridge_slave_1: left promiscuous mode [ 42.225826][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.236226][ T1380] bridge_slave_0: left allmulticast mode [ 42.236261][ T1380] bridge_slave_0: left promiscuous mode [ 42.236337][ T1380] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.299587][ T5364] netlink: 'syz.4.132': attribute type 13 has an invalid length. [ 42.327115][ T1380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.349674][ T1380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.379391][ T1380] bond0 (unregistering): Released all slaves [ 42.439962][ T5271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.478922][ T5271] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.483737][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.483781][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.492853][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.492892][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.506896][ T5378] loop4: detected capacity change from 0 to 512 [ 42.511223][ T5378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.516181][ T5378] EXT4-fs (loop4): 1 truncate cleaned up [ 42.517969][ T5378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.626093][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 42.667451][ T1380] hsr_slave_0: left promiscuous mode [ 42.669886][ T1380] hsr_slave_1: left promiscuous mode [ 42.670196][ T1380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.670215][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.673713][ T1380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.675436][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.681104][ T1380] veth1_macvtap: left promiscuous mode [ 42.682219][ T1380] veth0_macvtap: left promiscuous mode [ 42.683556][ T1380] veth1_vlan: left promiscuous mode [ 42.684550][ T1380] veth0_vlan: left promiscuous mode [ 42.777268][ T1380] team0 (unregistering): Port device team_slave_1 removed [ 42.781725][ T1380] team0 (unregistering): Port device team_slave_0 removed [ 42.835799][ T5378] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 42.897764][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.912557][ T5271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.045317][ T5271] veth0_vlan: entered promiscuous mode [ 43.064557][ T5271] veth1_vlan: entered promiscuous mode [ 43.077158][ T5271] veth0_macvtap: entered promiscuous mode [ 43.081642][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.083715][ T5271] veth1_macvtap: entered promiscuous mode [ 43.087791][ T5425] loop3: detected capacity change from 0 to 1024 [ 43.095672][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.100468][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.182502][ T5435] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 43.183378][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.183392][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.212711][ T1380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.212738][ T1380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.223585][ T5134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.223935][ T5134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.223956][ T5134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.223971][ T5134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.291272][ T4725] Bluetooth: hci3: command tx timeout [ 43.296673][ T5448] loop5: detected capacity change from 0 to 128 [ 43.313639][ T5448] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.325406][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 43.328142][ T5448] EXT4-fs (loop5): shut down requested (2) [ 43.328294][ T5448] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 43.355774][ T5271] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.421676][ T5454] TC_ACT_REPEAT abuse ? [ 43.483419][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.525863][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 43.627965][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 43.695514][ T5496] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 43.738440][ T5502] netlink: 'syz.5.151': attribute type 1 has an invalid length. [ 43.779287][ T5504] loop5: detected capacity change from 0 to 512 [ 43.787526][ T5504] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 43.791739][ T5504] EXT4-fs (loop5): 1 truncate cleaned up [ 43.792217][ T5504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.872235][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.922933][ T5527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.159'. [ 45.368141][ T4725] Bluetooth: hci3: command tx timeout [ 45.765674][ T5544] binder: 5543:5544 tried to acquire reference to desc 0, got 1 instead [ 45.767635][ T5544] binder_alloc: 5543: binder_alloc_buf size 12312 failed, no address space [ 45.768318][ T5544] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 45.768343][ T5544] binder: cannot allocate buffer: no space left [ 45.768363][ T5544] binder: 5543:5544 transaction call to 5543:0 failed 18/29201/-28, code 0 size 0-24 line 3408 [ 45.768810][ T4900] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.909562][ T5550] binder: 5549:5550 tried to acquire reference to desc 0, got 1 instead [ 45.909937][ T5550] binder: 5549:5550 ioctl c0306201 0 returned -14 [ 45.910094][ T5550] binder_alloc: 5549: binder_alloc_buf, no vma [ 45.910102][ T5550] binder: cannot allocate buffer: vma cleared, target dead or dying [ 45.910119][ T5550] binder: 5549:5550 transaction call to 5549:0 failed 23/29189/-3, code 0 size 0-0 line 3408 [ 45.915115][ T4520] binder: undelivered TRANSACTION_ERROR: 29189 [ 47.029935][ T5560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 47.031869][ T5560] veth1_to_team: entered promiscuous mode [ 47.032403][ T5560] gretap0: entered promiscuous mode [ 47.032904][ T5560] hsr1: entered promiscuous mode [ 47.448282][ T4725] Bluetooth: hci3: command tx timeout [ 47.920855][ T5564] loop4: detected capacity change from 0 to 8192 [ 47.931029][ T5529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.997456][ T5570] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 48.020408][ T5568] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 48.020444][ T5568] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 48.020635][ T5568] gadgetfs expected dummy_udc controller not usbip-vudc [ 48.020645][ T5568] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 48.021512][ T5568] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 48.194992][ T5577] syz_tun: entered allmulticast mode [ 48.561509][ T5585] syz.4.178 (5585): attempted to duplicate a private mapping with mremap. This is not supported. [ 48.753637][ T5603] binder: 5602:5603 tried to acquire reference to desc 0, got 1 instead [ 48.754168][ T5603] binder: 5602:5603 ioctl c0306201 200006c0 returned -14 [ 48.754464][ T4806] binder: release 5602:5603 transaction 28 out, still active [ 48.754477][ T4806] binder: undelivered TRANSACTION_COMPLETE [ 48.754488][ T4806] binder: undelivered TRANSACTION_COMPLETE [ 48.761592][ T4806] binder: send failed reply for transaction 28, target dead [ 48.811322][ T5612] syz_tun: entered allmulticast mode [ 48.855502][ T5571] syz_tun: left allmulticast mode [ 49.007308][ T5632] lo: Caught tx_queue_len zero misconfig [ 49.007348][ T5632] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 49.068217][ T5634] syzkaller0: entered promiscuous mode [ 49.069414][ T5634] syzkaller0: entered allmulticast mode [ 49.072690][ T5634] tipc: Started in network mode [ 49.073644][ T5634] tipc: Node identity 22d911932b8f, cluster identity 4711 [ 49.075134][ T5634] tipc: Enabled bearer , priority 0 [ 49.077223][ T5633] tipc: Resetting bearer [ 49.085914][ T5633] tipc: Disabling bearer [ 49.130878][ T4725] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 49.305559][ T5655] netlink: 'syz.5.196': attribute type 1 has an invalid length. [ 49.533451][ T4725] Bluetooth: hci3: command tx timeout [ 49.725013][ T5691] nullb0: [POWERTEC] p1 [ 49.726695][ T5691] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 49.938050][ T5700] loop4: detected capacity change from 0 to 128 [ 49.954716][ T5700] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.615087][ T5713] loop5: detected capacity change from 0 to 512 [ 50.625520][ T5713] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.639450][ T5713] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.206: Invalid block bitmap block 0 in block_group 0 [ 50.639534][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.640066][ T5713] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 50.640079][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.640208][ T5713] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.206: attempt to clear invalid blocks 983261 len 1 [ 50.640248][ T5713] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.640375][ T5713] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.206: Invalid inode table block 0 in block_group 0 [ 50.640386][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.640731][ T5713] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 50.640743][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.640852][ T5713] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 50.640861][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.640964][ T5713] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.206: Invalid inode table block 0 in block_group 0 [ 50.640975][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.641075][ T5713] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 50.641083][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.641194][ T5713] EXT4-fs error (device loop5): ext4_truncate:4691: inode #11: comm syz.5.206: mark_inode_dirty error [ 50.641205][ T5713] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.641333][ T5713] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 50.641343][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.641450][ T5713] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.206: Invalid inode table block 0 in block_group 0 [ 50.641461][ T5713] loop5: lost filesystem error report for type 5 error -117 [ 50.641592][ T5713] EXT4-fs (loop5): 1 truncate cleaned up [ 50.642038][ T5713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.657938][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.706033][ T5723] loop5: detected capacity change from 0 to 512 [ 51.706393][ T5723] EXT4-fs: inline encryption not supported [ 51.708138][ T5723] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.722411][ T5723] EXT4-fs (loop5): 1 truncate cleaned up [ 51.722952][ T5723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.740006][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.763311][ T5727] loop5: detected capacity change from 0 to 128 [ 52.735976][ T5738] loop0: detected capacity change from 0 to 512 [ 52.742553][ T5738] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.215: corrupted in-inode xattr: invalid ea_ino [ 52.744887][ T5738] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.745578][ T5738] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.215: couldn't read orphan inode 15 (err -117) [ 52.748530][ T5738] loop0: lost filesystem error report for type 5 error -117 [ 52.749153][ T5738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.765461][ T5738] EXT4-fs: Ignoring removed oldalloc option [ 52.765513][ T5738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.768448][ T5738] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.777514][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.943907][ T5700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.958505][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.025423][ T5748] serio: Serial port ptm0 [ 53.757314][ T5757] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 53.761544][ T5757] Memory failure: 0x219070: unhandlable page. [ 53.762872][ T5757] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 54.214720][ T5791] binder: 5790:5791 tried to acquire reference to desc 0, got 1 instead [ 54.218168][ T4806] binder_debug: 1 callbacks suppressed [ 54.218188][ T4806] binder: release 5790:5791 transaction 40 out, still active [ 54.218202][ T4806] binder: undelivered TRANSACTION_COMPLETE [ 54.220897][ T4806] binder: send failed reply for transaction 40, target dead [ 54.231753][ T5793] syzkaller0: entered promiscuous mode [ 54.231779][ T5793] syzkaller0: entered allmulticast mode [ 54.344794][ T5799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 54.435495][ T5801] syzkaller0: left promiscuous mode [ 54.435521][ T5801] syzkaller0: left allmulticast mode [ 55.160824][ T4723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 55.163108][ T4723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.165055][ T4723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.170156][ T4723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.172135][ T4723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.311638][ T4715] syz_tun (unregistering): left allmulticast mode [ 55.358064][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.361033][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.361128][ T5837] bridge_slave_0: entered allmulticast mode [ 55.361580][ T5837] bridge_slave_0: entered promiscuous mode [ 55.362319][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.362347][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.362418][ T5837] bridge_slave_1: entered allmulticast mode [ 55.362842][ T5837] bridge_slave_1: entered promiscuous mode [ 55.381640][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.386011][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.398986][ T5837] team0: Port device team_slave_0 added [ 55.400185][ T5837] team0: Port device team_slave_1 added [ 55.406429][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.406642][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.406661][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.407238][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.407244][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.407258][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.419316][ T5837] hsr_slave_0: entered promiscuous mode [ 55.419672][ T5837] hsr_slave_1: entered promiscuous mode [ 55.419880][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 55.419890][ T5837] Cannot create hsr debugfs directory [ 55.465021][ T5837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 55.467996][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.469876][ T5837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 55.472198][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.474864][ T5837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 55.479597][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.479958][ T5837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 55.483385][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.509768][ T198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.516584][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.516629][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.516704][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.516737][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.540242][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.544921][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.546561][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.554392][ T198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.558883][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.561387][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.561421][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.567109][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.567152][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.594220][ T198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.660138][ T198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.668439][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.721362][ T5837] veth0_vlan: entered promiscuous mode [ 55.723087][ T5837] veth1_vlan: entered promiscuous mode [ 55.730954][ T5837] veth0_macvtap: entered promiscuous mode [ 55.732100][ T5837] veth1_macvtap: entered promiscuous mode [ 55.736152][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.737706][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.789664][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.789689][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.789791][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.790370][ T5128] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.790509][ T5128] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806024][ T5134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.806054][ T5134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.808293][ T5128] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.816844][ T198] bridge_slave_1: left allmulticast mode [ 55.816874][ T198] bridge_slave_1: left promiscuous mode [ 55.816952][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.830553][ T198] bridge_slave_0: left allmulticast mode [ 55.830582][ T198] bridge_slave_0: left promiscuous mode [ 55.830651][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.905670][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.937606][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.232'. [ 55.940992][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.979035][ T198] bond0 (unregistering): Released all slaves [ 55.982473][ T5896] Bluetooth: (null): Too short H5 packet [ 56.126040][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.142954][ T5919] loop6: detected capacity change from 0 to 512 [ 56.144867][ T5919] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 56.166564][ T5919] EXT4-fs (loop6): 1 truncate cleaned up [ 56.169171][ T5919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.205198][ T5837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.268278][ T198] hsr_slave_0: left promiscuous mode [ 56.275110][ T198] hsr_slave_1: left promiscuous mode [ 56.275407][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.275427][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.292395][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.292425][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.300705][ T198] veth1_macvtap: left promiscuous mode [ 56.301765][ T198] veth0_macvtap: left promiscuous mode [ 56.302883][ T198] veth1_vlan: left promiscuous mode [ 56.303929][ T198] veth0_vlan: left promiscuous mode [ 56.477185][ T198] team0 (unregistering): Port device team_slave_1 removed [ 56.488365][ T198] team0 (unregistering): Port device team_slave_0 removed [ 56.557132][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 57.087106][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 57.182423][ T5989] input: syz0 as /devices/virtual/input/input2 [ 57.208611][ T4725] Bluetooth: hci5: command tx timeout [ 57.271747][ T6000] loop5: detected capacity change from 0 to 512 [ 57.275230][ T6000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.290499][ T6000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.297099][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 57.393405][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.469746][ T6015] sit0: entered promiscuous mode [ 57.472279][ T6015] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 57.473795][ T6015] netlink: 1 bytes leftover after parsing attributes in process `syz.0.249'. [ 57.525764][ T6019] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 57.527417][ T6019] syz_tun: entered promiscuous mode [ 57.538004][ T6019] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 57.602027][ T6021] loop0: detected capacity change from 0 to 128 [ 57.743586][ T6021] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 58.372428][ T1187] bond0: (slave bond_slave_0): interface is now down [ 58.372464][ T1187] bond0: (slave bond_slave_1): interface is now down [ 58.372488][ T1187] bond0: (slave syz_tun): interface is now down [ 58.373587][ T1187] bond0: now running without any active interface! [ 58.514623][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.552703][ T4520] IPVS: starting estimator thread 0... [ 58.556267][ T4723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.559094][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.559887][ T4723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.563680][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.565386][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.638677][ T6036] IPVS: using max 60 ests per chain, 144000 per kthread [ 58.723774][ T6056] loop4: detected capacity change from 0 to 512 [ 58.724132][ T6056] EXT4-fs: Ignoring removed nobh option [ 58.724458][ T6056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.750239][ T6056] EXT4-fs (loop4): 1 truncate cleaned up [ 58.750895][ T6056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.844341][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.473943][ T6079] loop6: detected capacity change from 0 to 128 [ 59.474547][ T4725] Bluetooth: hci5: command tx timeout [ 59.545226][ T6079] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.014719][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.014811][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.015138][ T6031] bridge_slave_0: entered allmulticast mode [ 60.015750][ T6031] bridge_slave_0: entered promiscuous mode [ 60.017267][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.017328][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.017665][ T6031] bridge_slave_1: entered allmulticast mode [ 60.018306][ T6031] bridge_slave_1: entered promiscuous mode [ 60.026118][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.027061][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.082715][ T6086] loop0: detected capacity change from 0 to 128 [ 60.087397][ T6086] ext4: Unknown parameter 'fsmagic' [ 60.090075][ T6031] team0: Port device team_slave_0 added [ 60.090934][ T6031] team0: Port device team_slave_1 added [ 60.131827][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.133170][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.138776][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.153774][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.158226][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.166865][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.286483][ T6031] hsr_slave_0: entered promiscuous mode [ 60.292286][ T6031] hsr_slave_1: entered promiscuous mode [ 60.292522][ T6031] debugfs: 'hsr0' already exists in 'hsr' [ 60.292539][ T6031] Cannot create hsr debugfs directory [ 60.410154][ T6096] binder: 6095:6096 tried to acquire reference to desc 0, got 1 instead [ 60.412513][ T4814] binder: release 6095:6096 transaction 45 out, still active [ 60.412546][ T4814] binder: undelivered TRANSACTION_COMPLETE [ 60.435246][ T24] binder: send failed reply for transaction 45, target dead [ 60.435586][ T5837] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.466065][ T6103] syzkaller0: entered promiscuous mode [ 60.467251][ T6103] syzkaller0: entered allmulticast mode [ 60.535102][ T6106] binder: 6105:6106 tried to acquire reference to desc 0, got 1 instead [ 60.537251][ T6106] binder: 6105:6106 got transaction with unaligned buffers size, 4158 [ 60.541913][ T6106] binder: 6105:6106 transaction call to 6105:0 failed 56/29201/-22, code 0 size 0-24 line 3464 [ 60.544613][ T4821] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.588881][ T5134] bridge_slave_1: left allmulticast mode [ 60.588913][ T5134] bridge_slave_1: left promiscuous mode [ 60.588991][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.591377][ T5134] bridge_slave_0: left allmulticast mode [ 60.591392][ T5134] bridge_slave_0: left promiscuous mode [ 60.591470][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.628056][ T6113] binder: 6112:6113 tried to acquire reference to desc 0, got 1 instead [ 60.630209][ T6113] binder: 6112:6113 unknown command 0 [ 60.631346][ T6113] binder: 6112:6113 ioctl c0306201 200001c0 returned -22 [ 60.634523][ T6113] binder: 6112:6113 got transaction with invalid parent offset or type [ 60.636047][ T6113] binder: 6112:6113 transaction call to 6112:0 failed 68/29201/-22, code 0 size 80-24 line 3617 [ 60.646151][ T4821] binder: release 6112:6113 transaction 61 out, still active [ 60.646184][ T4821] binder: undelivered TRANSACTION_COMPLETE [ 60.649400][ T4821] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.649457][ T4821] binder: send failed reply for transaction 61, target dead [ 60.651840][ T4725] Bluetooth: hci2: command tx timeout [ 60.666526][ T6119] loop0: detected capacity change from 0 to 512 [ 60.674503][ T6119] EXT4-fs: inline encryption not supported [ 60.675998][ T6119] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.682825][ T6119] EXT4-fs (loop0): 1 truncate cleaned up [ 60.696683][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.710908][ T5134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.731455][ T5134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.742398][ T5134] bond0 (unregistering): Released all slaves [ 60.754621][ T6031] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 60.758893][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.760229][ T6031] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 60.762793][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.764324][ T6031] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 60.766452][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.772305][ T6031] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 60.773525][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.777452][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.836154][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 60.871804][ T6140] syzkaller0: entered promiscuous mode [ 60.871836][ T6140] syzkaller0: entered allmulticast mode [ 60.900502][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.916156][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.919216][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.919255][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.921402][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.921424][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.982790][ T5134] hsr_slave_0: left promiscuous mode [ 60.984615][ T5134] hsr_slave_1: left promiscuous mode [ 60.984893][ T5134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.986313][ T5134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.101881][ T5134] team0 (unregistering): Port device team_slave_1 removed [ 61.105889][ T5134] team0 (unregistering): Port device team_slave_0 removed [ 61.165109][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 61.177061][ T6170] syzkaller0: entered promiscuous mode [ 61.177095][ T6170] syzkaller0: entered allmulticast mode [ 61.330764][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.333135][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.337079][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.350269][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 61.364908][ T6200] syzkaller0: entered promiscuous mode [ 61.364938][ T6200] syzkaller0: entered allmulticast mode [ 61.447915][ T6216] loop4: detected capacity change from 0 to 512 [ 61.453391][ T6216] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.453514][ T6216] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.455040][ T6216] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 61.455105][ T6216] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 61.455115][ T6216] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.287: Failed to acquire dquot type 1 [ 61.455126][ T6216] loop4: lost filesystem error report for type 5 error -5 [ 61.457323][ T6216] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.287: bg 0: block 40: padding at end of block bitmap is not set [ 61.457347][ T6216] loop4: lost filesystem error report for type 5 error -117 [ 61.457538][ T6216] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 61.457550][ T6216] loop4: lost filesystem error report for type 5 error -117 [ 61.457727][ T6216] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.287: data will be lost [ 61.457931][ T6216] EXT4-fs (loop4): 1 truncate cleaned up [ 61.460951][ T6216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.476181][ T6031] veth0_vlan: entered promiscuous mode [ 61.480939][ T6031] veth1_vlan: entered promiscuous mode [ 61.499391][ T6031] veth0_macvtap: entered promiscuous mode [ 61.504348][ T6031] veth1_macvtap: entered promiscuous mode [ 61.512975][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.514315][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.533880][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.540995][ T4725] Bluetooth: hci5: command tx timeout [ 61.570258][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 61.572614][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.572649][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.588788][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.588816][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.598941][ T1187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.618945][ T1187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.621259][ T1212] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.621383][ T1212] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.876598][ T6242] syzkaller0: entered promiscuous mode [ 61.876628][ T6242] syzkaller0: entered allmulticast mode [ 61.979050][ T6247] syzkaller0: entered promiscuous mode [ 61.979081][ T6247] syzkaller0: entered allmulticast mode [ 62.728731][ T4725] Bluetooth: hci2: command tx timeout [ 63.718193][ T4725] Bluetooth: hci5: command tx timeout [ 64.489700][ T1061] cfg80211: failed to load regulatory.db [ 64.511358][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511409][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.672268][ T6303] binder: 6299:6303 tried to acquire reference to desc 0, got 1 instead [ 64.675553][ T6303] binder_alloc: 6299: pid 6299 spamming oneway? 1 buffers allocated for a total size of 4096 [ 64.679021][ T6303] binder_alloc: 6299: pid 6299 spamming oneway? 2 buffers allocated for a total size of 5120 [ 64.751716][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.308'. [ 64.809297][ T4725] Bluetooth: hci2: command tx timeout [ 64.840898][ T6309] loop5: detected capacity change from 0 to 512 [ 64.990835][ T6309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.103490][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.018139][ T4725] Bluetooth: hci2: command tx timeout [ 67.175648][ T6342] dlm: no local IP address has been set [ 67.175679][ T6342] dlm: cannot start dlm midcomms -107 [ 67.764578][ T6358] syzkaller1: entered promiscuous mode [ 67.764614][ T6358] syzkaller1: entered allmulticast mode [ 67.966315][ T6375] nvmet: adding nsid 1 to subsystem testnqn [ 67.970256][ T6375] nvmet: failed to open block device (null): (-22) [ 68.044407][ T6380] binder: 6379:6380 tried to acquire reference to desc 0, got 1 instead [ 68.044877][ T6380] binder: 6379:6380 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.044889][ T6380] binder: 6380 RLIMIT_NICE not set [ 68.044900][ T6380] binder: 6380 RLIMIT_NICE not set [ 68.045110][ T6380] binder: 6379:6380 BC_ACQUIRE_DONE u0000000000000003 no match [ 68.045121][ T6380] binder: 6379:6380 BC_ACQUIRE_DONE u0000000000000003 no match [ 68.045432][ T4821] binder_debug: 6 callbacks suppressed [ 68.045440][ T4821] binder: release 6379:6380 transaction 82 out, still active [ 68.045451][ T4821] binder: undelivered TRANSACTION_COMPLETE [ 68.052630][ T4821] binder: release 6379:6380 transaction 82 in, still active [ 68.052647][ T4821] binder: send failed reply for transaction 82, target dead [ 68.170924][ T6385] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 68.264495][ T6398] loop0: detected capacity change from 0 to 512 [ 68.285489][ T6398] EXT4-fs (loop0): 1 truncate cleaned up [ 68.288308][ T6398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.270149][ T6413] syzkaller0: entered promiscuous mode [ 69.271323][ T6413] syzkaller0: entered allmulticast mode [ 69.292177][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.377610][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.332'. [ 69.429587][ T6430] syzkaller0: entered promiscuous mode [ 69.429620][ T6430] syzkaller0: entered allmulticast mode [ 69.469275][ T6435] TC_ACT_REPEAT abuse ? [ 69.634702][ T6459] loop6: detected capacity change from 0 to 512 [ 69.636663][ T6459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.657422][ T6459] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.339: iget: bad i_size value: 38620345925642 [ 69.657457][ T6459] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.657699][ T6459] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.339: couldn't read orphan inode 15 (err -117) [ 69.657716][ T6459] loop6: lost filesystem error report for type 5 error -117 [ 69.661414][ T6459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.670418][ T6459] Bluetooth: MGMT ver 1.23 [ 69.683526][ T5837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.790745][ T6467] Need at least one configuration in g1. [ 69.792756][ T6467] udc usbip-vudc.0: failed to start g1: -22 [ 69.794249][ T6467] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 69.797331][ T6467] UDC core: g1: couldn't find an available UDC or it's busy [ 70.292712][ T6488] VFS: Mount too revealing [ 70.498305][ T6503] syz_tun: entered allmulticast mode [ 71.151249][ T6492] syz_tun: left allmulticast mode [ 71.997125][ T6537] syz.0.352 (6537): drop_caches: 2 [ 72.337310][ T6548] syzkaller0: entered promiscuous mode [ 72.338802][ T6548] syzkaller0: entered allmulticast mode [ 72.428511][ T6546] TC_ACT_REPEAT abuse ? [ 72.438283][ T6553] netlink: 76 bytes leftover after parsing attributes in process `syz.5.356'. [ 72.752519][ T6560] capability: warning: `syz.5.362' uses deprecated v2 capabilities in a way that may be insecure [ 72.786701][ T6563] binder: 6562:6563 tried to acquire reference to desc 0, got 1 instead [ 72.788274][ T6563] binder: 6562:6563 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.788294][ T6563] binder: 6563 RLIMIT_NICE not set [ 72.788312][ T6563] binder: 6563 RLIMIT_NICE not set [ 72.788573][ T6563] binder: 6562:6563 transaction reply to 0:0 failed 88/29201/-71, code 0 size 0-0 line 3170 [ 72.789360][ T4799] binder: release 6562:6563 transaction 87 out, still active [ 72.789379][ T4799] binder: undelivered TRANSACTION_COMPLETE [ 72.789401][ T4799] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.799219][ T4799] binder: release 6562:6563 transaction 87 in, still active [ 72.799240][ T4799] binder: send failed reply for transaction 87, target dead [ 73.551750][ T6611] loop0: detected capacity change from 0 to 256 [ 73.566491][ T6611] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.566532][ T6611] overlayfs: failed to set xattr on upper [ 73.566538][ T6611] overlayfs: ...falling back to redirect_dir=nofollow. [ 73.566543][ T6611] overlayfs: ...falling back to uuid=null. [ 73.622031][ T6615] loop0: detected capacity change from 0 to 128 [ 73.627678][ T6615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.638748][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.638779][ T6615] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.371: Directory block failed checksum [ 73.640335][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.640356][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.640903][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.640916][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.641389][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.641402][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.642570][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.642587][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.643149][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.643165][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.644141][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.644157][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.644648][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.644660][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.644854][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.644865][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.645325][ T6615] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.371: No space for directory leaf checksum. Please run e2fsck -D. [ 73.645338][ T6615] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.371: checksumming directory block 0 [ 73.654118][ T6613] netlink: 'syz.6.370': attribute type 39 has an invalid length. [ 73.665378][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.712808][ T6619] loop0: detected capacity change from 0 to 2048 [ 73.722861][ T6619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.735391][ T6619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.793330][ T6623] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 74.824380][ T6637] syzkaller0: entered promiscuous mode [ 74.824415][ T6637] syzkaller0: entered allmulticast mode [ 74.927879][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.7.378'. [ 74.930820][ T6651] netlink: 6 bytes leftover after parsing attributes in process `syz.7.378'. [ 75.142140][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.385'. [ 75.442892][ T6681] veth3: entered allmulticast mode [ 75.549264][ T6690] hsr_slave_1 (unregistering): left promiscuous mode [ 75.553494][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 75.596348][ T6696] fuse: fd is not a fuse device [ 75.630242][ T6698] fuse: fd is not a fuse device [ 75.711237][ T6700] loop7: detected capacity change from 0 to 4096 [ 75.713032][ T6700] EXT4-fs: inline encryption not supported [ 75.736506][ T6700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.740762][ T6700] EXT4-fs (loop7): Test dummy encryption mode enabled [ 75.743611][ T6700] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 75.743666][ T6700] System zones: 0-5 [ 75.752928][ T6700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.768415][ T6700] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 76.076137][ T6700] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 77.529066][ T6031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.621854][ T6772] syzkaller0: entered promiscuous mode [ 78.623543][ T6772] syzkaller0: entered allmulticast mode [ 78.988648][ T6777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.013567][ T6781] syzkaller0: entered promiscuous mode [ 79.014868][ T6781] syzkaller0: entered allmulticast mode [ 79.059654][ T6784] loop5: detected capacity change from 0 to 8 [ 79.065230][ T6784] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 79.065261][ T6784] unable to read xattr id index table [ 79.431115][ T4821] IPVS: starting estimator thread 0... [ 79.436763][ T6793] loop6: detected capacity change from 0 to 1024 [ 79.440162][ T6797] syzkaller0: entered promiscuous mode [ 79.440195][ T6797] syzkaller0: entered allmulticast mode [ 79.479924][ T6793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.492019][ T5837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.528194][ T6795] IPVS: using max 60 ests per chain, 144000 per kthread [ 80.012764][ T30] audit: type=1326 audit(79.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6814 comm="syz.4.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x0 [ 80.225983][ T6819] syzkaller0: entered promiscuous mode [ 80.226013][ T6819] syzkaller0: entered allmulticast mode [ 80.387948][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 80.564347][ T6841] cgroup: Unknown subsys name 'cpuset' [ 80.773978][ T6842] loop6: detected capacity change from 0 to 256 [ 82.183368][ T6872] syzkaller0: entered promiscuous mode [ 82.183398][ T6872] syzkaller0: entered allmulticast mode [ 82.347069][ T6877] loop5: detected capacity change from 0 to 512 [ 82.363522][ T6877] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 82.365893][ T6877] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.443: corrupted inode contents [ 82.365910][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.366159][ T6877] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.443: mark_inode_dirty error [ 82.366174][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.366323][ T6877] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.443: corrupted inode contents [ 82.366334][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.366591][ T6877] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.443: mark_inode_dirty error [ 82.366602][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.366716][ T6877] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.443: corrupted inode contents [ 82.366727][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.366838][ T6877] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.443: mark_inode_dirty error [ 82.366849][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.366979][ T6877] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.443: corrupted inode contents [ 82.366989][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.367115][ T6877] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 82.367125][ T6877] loop5: lost filesystem error report for type 5 error -117 [ 82.367250][ T6877] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.443: corrupted inode contents [ 82.367260][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.367370][ T6877] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.443: mark_inode_dirty error [ 82.367380][ T6877] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.367608][ T6877] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 82.367631][ T6877] loop5: lost filesystem error report for type 5 error -117 [ 82.367916][ T6877] EXT4-fs (loop5): 1 truncate cleaned up [ 82.371107][ T6877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.378954][ T5124] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 82.378981][ T5124] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 82.381434][ T6877] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.443: iget: bad i_size value: 360287970189639690 [ 82.616577][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.641761][ T6883] syzkaller0: entered promiscuous mode [ 82.641787][ T6883] syzkaller0: entered allmulticast mode [ 82.723694][ T6887] warning: `syz.7.446' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.760933][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 82.775218][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.448'. [ 82.777164][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'. [ 82.779461][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.448'. [ 82.782464][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 82.866398][ T6898] binder_user_error: 1 callbacks suppressed [ 82.866429][ T6898] binder: 6897:6898 tried to acquire reference to desc 0, got 1 instead [ 82.870292][ T6898] binder: 6897:6898 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.870314][ T6898] binder: 6898 RLIMIT_NICE not set [ 82.870334][ T6898] binder: 6898 RLIMIT_NICE not set [ 82.931312][ T6899] xt_hashlimit: max too large, truncated to 1048576 [ 83.142790][ T6250] binder: release 6897:6898 transaction 93 out, still active [ 83.221341][ T6250] binder: undelivered TRANSACTION_COMPLETE [ 83.223358][ T6250] binder: send failed reply for transaction 100 to 6897:6898 [ 83.224982][ T6250] binder: release 6897:6898 transaction 93 in, still active [ 83.226560][ T6250] binder: send failed reply for transaction 93, target dead [ 83.227890][ T6250] binder: undelivered TRANSACTION_COMPLETE [ 83.229082][ T6250] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.242232][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.454'. [ 84.479639][ T6938] binder: 6937:6938 tried to acquire reference to desc 0, got 1 instead [ 84.532657][ T6941] binder: 6937:6941 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.532692][ T6941] binder: 6941 RLIMIT_NICE not set [ 84.532721][ T6941] binder: 6941 RLIMIT_NICE not set [ 84.577082][ T6936] Injecting memory failure for pfn 0x1368b7 at process virtual address 0x20276000 [ 84.614974][ T6936] Memory failure: 0x1368b7: keeping poisoned page in swap cache [ 84.615479][ T6936] Memory failure: 0x1368b7: recovery action for clean swapcache page: Recovered [ 84.615514][ T6936] Injecting memory failure for pfn 0x1368b8 at process virtual address 0x20277000 [ 84.615625][ T6936] Memory failure: 0x1368b8: keeping poisoned page in swap cache [ 84.615648][ T6936] Memory failure: 0x1368b8: recovery action for clean swapcache page: Recovered [ 84.721933][ T6943] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 85.302267][ T6956] loop6: detected capacity change from 0 to 128 [ 85.310288][ T6956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 85.311898][ T6956] System zones: 1-3, 19-19, 35-36 [ 85.314907][ T6956] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 85.329738][ T4821] binder: release 6937:6938 transaction 105 out, still active [ 85.443867][ T6956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.504835][ T5837] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.913156][ T4821] binder: undelivered TRANSACTION_COMPLETE [ 85.977837][ T6970] syz_tun: entered allmulticast mode [ 86.189965][ T4821] binder: send failed reply for transaction 112 to 6937:6941 [ 86.293445][ T6974] syzkaller0: entered promiscuous mode [ 86.295803][ T6974] syzkaller0: entered allmulticast mode [ 86.586559][ T6989] netlink: 'syz.5.482': attribute type 11 has an invalid length. [ 86.623662][ T6965] syz_tun: left allmulticast mode [ 86.699038][ T6989] loop5: detected capacity change from 0 to 512 [ 86.712280][ T6989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.751800][ T6989] EXT4-fs (loop5): orphan cleanup on readonly fs [ 86.751892][ T6989] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 86.751919][ T6989] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 86.751932][ T6989] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.482: bad orphan inode 768 [ 86.751947][ T6989] loop5: lost filesystem error report for type 5 error -117 [ 86.758816][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 86.758828][ C0] EXT4-fs (loop5): initial error at time 86: ext4_orphan_get:1425 [ 86.758839][ C0] EXT4-fs (loop5): last error at time 86: ext4_orphan_get:1425 [ 86.772152][ T6989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.811070][ T6989] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 87.030627][ T6989] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 87.137363][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.252884][ T7002] netlink: 'syz.0.485': attribute type 4 has an invalid length. [ 87.307920][ T7003] netlink: 'syz.0.485': attribute type 4 has an invalid length. [ 88.036221][ T7016] syzkaller0: entered promiscuous mode [ 88.036267][ T7016] syzkaller0: entered allmulticast mode [ 88.040698][ T7020] syzkaller0: entered promiscuous mode [ 88.042042][ T7020] syzkaller0: entered allmulticast mode [ 88.048688][ T7016] tipc: Started in network mode [ 88.048727][ T7016] tipc: Node identity d2ebc56641c4, cluster identity 4711 [ 88.048975][ T7016] tipc: Enabled bearer , priority 0 [ 88.050440][ T7014] tipc: Resetting bearer [ 88.062592][ T7014] tipc: Disabling bearer [ 88.201001][ T7029] syzkaller0: entered promiscuous mode [ 88.201042][ T7029] syzkaller0: entered allmulticast mode [ 88.512942][ T7038] netlink: 32 bytes leftover after parsing attributes in process `syz.7.496'. [ 89.625702][ T7064] binder: 7062:7064 tried to acquire reference to desc 0, got 1 instead [ 89.626140][ T7064] binder: 7062:7064 got transaction with invalid offset (48, min 48 max 64) or object. [ 89.626210][ T7064] binder_debug: 4 callbacks suppressed [ 89.626225][ T7064] binder: 7062:7064 transaction call to 7062:0 failed 117/29201/-22, code 0 size 64-24 line 3524 [ 89.628437][ T4814] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.632990][ T7067] loop6: detected capacity change from 0 to 1024 [ 89.635744][ T7067] EXT4-fs (loop6): filesystem too large to mount safely on this system [ 90.145883][ T7090] syzkaller0: entered promiscuous mode [ 90.145927][ T7090] syzkaller0: entered allmulticast mode [ 90.345163][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 90.355951][ T7096] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.382083][ T7096] md: loop0 does not have a valid v1.0 superblock, not importing! [ 90.467219][ T7098] loop6: detected capacity change from 0 to 128 [ 90.467526][ T7098] ubifs: Unknown parameter 'auth_ha5' [ 90.498050][ T7100] loop5: detected capacity change from 0 to 2048 [ 91.007518][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.007681][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.087553][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.100014][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.255085][ T7132] binder: BINDER_SET_CONTEXT_MGR already set [ 92.255112][ T7132] binder: 7131:7132 ioctl 4018620d 20004a80 returned -16 [ 92.258560][ T7132] binder: 7131:7132 got transaction to invalid handle, 1 [ 92.258584][ T7132] binder: 7131:7132 cannot find target node [ 92.261089][ T7132] binder: 7131:7132 transaction call to 0:0 failed 122/29201/-22, code 0 size 72-24 line 3252 [ 92.263625][ T7132] binder: 7131:7132 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.265988][ T7132] binder: 7132 RLIMIT_NICE not set [ 92.328383][ T5124] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.328451][ T5124] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.328493][ T5124] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.328521][ T5124] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.343966][ T7137] loop6: detected capacity change from 0 to 1024 [ 92.345735][ T7137] EXT4-fs: Ignoring removed bh option [ 92.348760][ T7137] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.355233][ T7134] binder: 7131:7134 got transaction to invalid handle, 3 [ 92.355264][ T7134] binder: 7131:7134 cannot find target node [ 92.355278][ T7134] binder: 7131:7134 transaction call to 0:0 failed 123/29201/-22, code 0 size 0-0 line 3252 [ 92.355432][ T7134] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.355539][ T7134] binder: 7131:7134 got transaction to invalid handle, 1 [ 92.355547][ T7134] binder: 7131:7134 cannot find target node [ 92.355557][ T7134] binder: 7131:7134 transaction call to 0:0 failed 124/29201/-22, code 0 size 0-0 line 3252 [ 92.400727][ T7137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.467466][ T7146] syzkaller0: entered promiscuous mode [ 92.467501][ T7146] syzkaller0: entered allmulticast mode [ 92.474292][ T7146] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 93.055033][ T7160] binder: 7159:7160 tried to acquire reference to desc 0, got 1 instead [ 93.079178][ T4799] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.322528][ T5837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.560137][ T7173] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 93.562171][ T7173] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 93.589345][ T7176] loop6: detected capacity change from 0 to 1024 [ 93.590921][ T7176] EXT4-fs: Invalid want_extra_isize 2 [ 93.624424][ T7179] loop6: detected capacity change from 0 to 256 [ 93.814208][ T7185] fuse: Bad value for 'fd' [ 93.825684][ T7185] loop6: detected capacity change from 0 to 1024 [ 93.853460][ T7185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.912853][ T7185] EXT4-fs (loop6): shut down requested (2) [ 93.924395][ T7185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.240299][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.536'. [ 94.297504][ T7198] netlink: 'syz.0.537': attribute type 2 has an invalid length. [ 94.326902][ T7200] binder: 7199:7200 tried to acquire reference to desc 0, got 1 instead [ 94.327511][ T7200] binder_alloc: 7199: pid 7199 spamming oneway? 1 buffers allocated for a total size of 4096 [ 94.792851][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.793041][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.444840][ T7223] loop5: detected capacity change from 0 to 256 [ 97.494177][ T7261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input3 [ 97.864451][ T4725] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 97.864498][ T4725] Bluetooth: hci4: Injecting HCI hardware error event [ 97.865374][ T4725] Bluetooth: hci4: hardware error 0x00 [ 98.955293][ T7293] syzkaller0: entered promiscuous mode [ 98.956404][ T7293] syzkaller0: entered allmulticast mode [ 99.594554][ T7310] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 99.594554][ T7310] The task syz.6.569 (7310) triggered the difference, watch for misbehavior. [ 100.063560][ T7316] team0: Port device vxlan0 added [ 100.068151][ T198] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.068186][ T198] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.068211][ T198] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.068230][ T198] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.076053][ T7318] loop7: detected capacity change from 0 to 4096 [ 100.084838][ T7318] EXT4-fs: inline encryption not supported [ 100.101367][ T7318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.101386][ T7318] EXT4-fs (loop7): Test dummy encryption mode enabled [ 100.151142][ T7318] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 100.151218][ T7318] System zones: 0-5 [ 100.154531][ T7318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.372041][ T6031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.461217][ T7332] loop7: detected capacity change from 0 to 128 [ 100.473149][ T7332] EXT4-fs (loop7): Test dummy encryption mode enabled [ 100.488188][ T4725] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 100.548593][ T7332] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.346705][ T6031] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.463063][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.463277][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.495687][ T7357] fuse: fd is not a fuse device [ 101.610097][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.614079][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.448249][ T1187] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.448290][ T1187] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.448618][ T1187] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.448652][ T1187] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.448678][ T1187] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.448697][ T1187] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.448721][ T1187] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.448737][ T1187] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.475829][ T7379] syzkaller0: entered promiscuous mode [ 102.475862][ T7379] syzkaller0: entered allmulticast mode [ 102.515813][ T7394] loop5: detected capacity change from 0 to 1024 [ 102.517736][ T7394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.531305][ T7394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.890331][ T4725] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.890377][ T4725] Bluetooth: hci3: Injecting HCI hardware error event [ 102.891140][ T4723] Bluetooth: hci3: hardware error 0x00 [ 103.350841][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.421426][ T7451] overlayfs: failed to clone upperpath [ 105.451019][ T4723] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 105.515945][ T7455] tipc: Enabled bearer , priority 0 [ 105.517130][ T7455] syzkaller0: entered promiscuous mode [ 105.517154][ T7455] syzkaller0: entered allmulticast mode [ 105.552828][ T7455] tipc: Resetting bearer [ 105.555881][ T7452] tipc: Resetting bearer [ 105.593753][ T7452] tipc: Disabling bearer [ 105.981285][ T7473] syzkaller0: entered promiscuous mode [ 105.982451][ T7473] syzkaller0: entered allmulticast mode [ 105.986059][ T7473] tipc: Enabled bearer , priority 0 [ 105.992305][ T7473] tipc: Resetting bearer [ 105.995786][ T7472] tipc: Resetting bearer [ 106.242381][ T7472] tipc: Disabling bearer [ 106.890085][ T7489] syzkaller0: entered promiscuous mode [ 106.891376][ T7489] syzkaller0: entered allmulticast mode [ 107.537019][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 107.540396][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.554360][ T7513] capability: warning: `syz.5.623' uses 32-bit capabilities (legacy support in use) [ 107.560693][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.897095][ T7519] loop7: detected capacity change from 0 to 512 [ 107.917360][ T7519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.960847][ T6031] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.716743][ T7544] syzkaller0: entered promiscuous mode [ 109.716782][ T7544] syzkaller0: entered allmulticast mode [ 109.723336][ T7544] tipc: Enabled bearer , priority 0 [ 110.082946][ T7544] tipc: Resetting bearer [ 110.085933][ T7541] tipc: Resetting bearer [ 110.094517][ T7541] tipc: Disabling bearer [ 111.943383][ T7583] loop7: detected capacity change from 0 to 1024 [ 111.948904][ T7583] EXT4-fs: inline encryption not supported [ 111.948945][ T7583] EXT4-fs: Ignoring removed bh option [ 111.953963][ T7583] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 111.982220][ T7583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.997910][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.021616][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.340132][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.648'. [ 112.355700][ T7583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.520397][ T7611] syz_tun: entered allmulticast mode [ 112.728908][ T1504] IPVS: starting estimator thread 0... [ 112.740867][ T7614] netlink: 'syz.5.651': attribute type 10 has an invalid length. [ 112.740901][ T7614] syz_tun: entered promiscuous mode [ 112.743647][ T7614] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.821425][ T7617] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 112.828367][ T7612] IPVS: using max 45 ests per chain, 108000 per kthread [ 113.148734][ T7625] mmap: syz.6.652 (7625) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.183009][ T7606] syz_tun: left allmulticast mode [ 113.253034][ T7631] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 113.458686][ T7638] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 114.666120][ T7646] loop5: detected capacity change from 0 to 1024 [ 114.766360][ T7646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.991997][ T30] audit: type=1326 audit(114.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7647 comm="syz.0.662" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa45792a8 code=0x0 [ 115.561236][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.598509][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 115.667130][ T7674] syzkaller0: entered promiscuous mode [ 115.669536][ T7674] syzkaller0: entered allmulticast mode [ 115.682727][ T7677] netlink: 'syz.0.669': attribute type 16 has an invalid length. [ 115.692852][ T7674] tipc: Enabled bearer , priority 0 [ 115.784004][ T7685] No such timeout policy "syz1" [ 116.212107][ T7673] tipc: Resetting bearer [ 116.222330][ T7673] tipc: Disabling bearer [ 116.820063][ T7706] overlayfs: failed to clone upperpath [ 117.602990][ T7727] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 117.603243][ T7727] Memory failure: 0x219070: Sending SIGBUS to syz.4.684:7727 due to hardware memory corruption [ 117.604144][ T7727] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 117.817299][ T7740] netlink: 'syz.4.685': attribute type 10 has an invalid length. [ 119.088031][ T7749] loop5: detected capacity change from 0 to 512 [ 119.097697][ T7749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.463014][ T7749] EXT4-fs (loop5): 1 truncate cleaned up [ 119.464971][ T7749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.999473][ T5271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.191664][ T7786] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 121.184650][ T7801] Illegal XDP return value 907493805 on prog (id 46) dev N/A, expect packet loss! [ 122.247996][ T7816] overlayfs: failed to clone upperpath [ 122.739105][ T7827] netlink: 'syz.7.708': attribute type 27 has an invalid length. [ 122.741515][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.708'. [ 122.743569][ T7827] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 123.466538][ T7844] No such timeout policy "syz1" [ 123.795144][ T7853] fuse: fd is not a fuse device [ 124.018747][ T7857] fuse: fd is not a fuse device [ 124.920842][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.718'. [ 125.434642][ T7888] loop5: detected capacity change from 0 to 256 [ 125.941194][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.941247][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.473679][ T7904] xt_hashlimit: size too large, truncated to 1048576 [ 126.850596][ T7914] netlink: 52 bytes leftover after parsing attributes in process `syz.0.731'. [ 126.947766][ T7919] loop5: detected capacity change from 0 to 128 [ 126.954744][ T7919] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.001869][ T7919] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.616954][ T7933] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4719] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7933] [ 127.619194][ T7933] batadv_slave_0: Caught tx_queue_len zero misconfig [ 127.732499][ T7931] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 127.858913][ T5271] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.431530][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.740'. [ 128.545719][ T7953] overlayfs: failed to clone upperpath [ 128.603565][ T7950] overlayfs: failed to clone upperpath [ 130.374515][ T7998] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[5271] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7998] [ 131.197229][ T8002] netlink: 236 bytes leftover after parsing attributes in process `syz.0.752'. [ 131.197266][ T8002] netlink: 236 bytes leftover after parsing attributes in process `syz.0.752'. [ 132.797315][ T8026] netlink: set zone limit has 8 unknown bytes [ 135.760138][ T8044] Injecting memory failure for pfn 0x136ed4 at process virtual address 0x20001000 [ 135.766886][ T8044] Memory failure: 0x136ed4: recovery action for clean LRU page: Recovered [ 135.768755][ T8044] Injecting memory failure for pfn 0x136ed3 at process virtual address 0x20002000 [ 135.770738][ T8044] Memory failure: 0x136ed3: recovery action for clean LRU page: Recovered [ 135.772292][ T8044] Injecting memory failure for pfn 0x136ed2 at process virtual address 0x20003000 [ 135.774008][ T8044] Memory failure: 0x136ed2: recovery action for clean LRU page: Recovered [ 136.355688][ T8088] overlayfs: failed to clone upperpath [ 136.406620][ T8089] overlayfs: failed to clone upperpath [ 137.253499][ T8107] syz_tun: entered allmulticast mode [ 137.600202][ T8114] netlink: 'syz.4.781': attribute type 39 has an invalid length. [ 137.611708][ T8114] syz_tun (unregistering): left allmulticast mode [ 137.614251][ T8114] bond0: (slave syz_tun): Releasing backup interface [ 137.688327][ T8115] No control pipe specified [ 137.900011][ T8119] Trying to write to read-only block-device nullb0 [ 137.979456][ T8124] bridge_slave_0: left allmulticast mode [ 137.979492][ T8124] bridge_slave_0: left promiscuous mode [ 137.981170][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.984646][ T8124] bridge_slave_1: left allmulticast mode [ 137.984668][ T8124] bridge_slave_1: left promiscuous mode [ 137.985051][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.008861][ T8124] bond0: (slave bond_slave_0): Releasing backup interface [ 138.023510][ T8126] netlink: 'syz.7.784': attribute type 10 has an invalid length. [ 138.029760][ T8124] bond0: (slave bond_slave_1): Releasing backup interface [ 138.100143][ T8127] fuse: Unknown parameter '0xffffffffffffffff' [ 138.128966][ T8124] team0: Port device team_slave_0 removed [ 138.246583][ T8133] loop5: detected capacity change from 0 to 8192 [ 138.252753][ T8133] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.945920][ T8124] team0: Port device team_slave_1 removed [ 138.970471][ T8124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.970505][ T8124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.999494][ T8124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.000899][ T8124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.003705][ T8124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.021943][ T8139] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 139.030138][ T8139] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 139.414705][ T8142] lo: entered allmulticast mode [ 139.732433][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.736400][ T8126] team0: Port device netdevsim1 added [ 139.831697][ T8135] lo: left allmulticast mode [ 140.937601][ T8168] netlink: 64 bytes leftover after parsing attributes in process `syz.7.795'. [ 141.970015][ T8192] No such timeout policy "syz1" [ 142.510471][ T8202] syz_tun: entered allmulticast mode [ 142.961680][ T8208] : renamed from bond_slave_0 (while UP) [ 143.103148][ T8195] syz_tun: left allmulticast mode [ 144.836379][ T8248] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 144.836411][ T8248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.815'. [ 144.842527][ T8248] dummy0: entered promiscuous mode [ 146.589729][ T8272] trusted_key: encrypted_key: key trusted:syz not found [ 151.351197][ T8335] netlink: 76 bytes leftover after parsing attributes in process `syz.4.835'. [ 151.355479][ T8339] xt_SECMARK: invalid mode: 2 [ 152.523446][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 152.546260][ T8365] overlayfs: failed to clone upperpath [ 152.554060][ T8365] overlayfs: missing 'workdir' [ 153.105628][ T8374] overlayfs: failed to clone upperpath [ 154.230022][ T8384] syz_tun: entered allmulticast mode [ 154.357435][ T8379] syz_tun: left allmulticast mode [ 155.833628][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 156.177118][ T8423] ªªªªªª: renamed from vlan0 (while UP) [ 156.888582][ T8439] lo: entered allmulticast mode [ 157.547138][ T8431] lo: left allmulticast mode [ 158.502610][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 158.532682][ T24] IPVS: starting estimator thread 0... [ 158.536107][ T8450] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 158.618149][ T8460] IPVS: using max 60 ests per chain, 144000 per kthread [ 158.706204][ T8463] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.708321][ T8463] overlayfs: failed to set xattr on upper [ 158.709362][ T8463] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.710606][ T8463] overlayfs: ...falling back to uuid=null. [ 158.713471][ T8463] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.714943][ T8463] overlayfs: failed to set xattr on upper [ 158.716062][ T8463] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.717356][ T8463] overlayfs: ...falling back to uuid=null. [ 161.597588][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.873'. [ 162.082362][ T8510] syz_tun: entered allmulticast mode [ 162.667568][ T8505] syz_tun: left allmulticast mode [ 162.910523][ T8530] netlink: 52 bytes leftover after parsing attributes in process `syz.7.880'. [ 163.308232][ T8530] infiniband syz2: set down [ 163.308268][ T8530] infiniband syz2: added bond_slave_0 [ 163.403269][ T8530] RDS/IB: syz2: added [ 163.403915][ T8530] smc: adding ib device syz2 with port count 1 [ 163.404382][ T8530] smc: ib device syz2 port 1 has no pnetid [ 164.409462][ T8546] netlink: 36 bytes leftover after parsing attributes in process `syz.5.885'. [ 166.081405][ T8557] netlink: 'syz.6.887': attribute type 21 has an invalid length. [ 166.081507][ T8557] netlink: 132 bytes leftover after parsing attributes in process `syz.6.887'. [ 166.696459][ T8548] Injecting memory failure for pfn 0x142201 at process virtual address 0x20001000 [ 167.106591][ T8548] Memory failure: 0x142201: recovery action for dirty LRU page: Recovered [ 167.157181][ T8560] netlink: 64 bytes leftover after parsing attributes in process `syz.4.889'. [ 167.443036][ T8573] lo: entered allmulticast mode [ 168.038657][ T8564] lo: left allmulticast mode [ 168.112615][ T8587] overlayfs: failed to clone upperpath [ 168.374833][ T8581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.302179][ T8632] tunl0: Caught tx_queue_len zero misconfig [ 170.601505][ T8639] lo: entered allmulticast mode [ 171.095850][ T8642] 8021q: VLANs not supported on gre0 [ 171.129455][ T8630] lo: left allmulticast mode [ 172.521990][ T8662] netlink: 'syz.4.911': attribute type 8 has an invalid length. [ 172.897001][ T8654] trusted_key: syz.5.912 sent an empty control message without MSG_MORE. [ 174.092475][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.7.914'. [ 175.149969][ T8699] lo: entered allmulticast mode [ 175.273336][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 175.793721][ T8692] lo: left allmulticast mode [ 177.460727][ T8730] fuse: fd is not a fuse device [ 177.566160][ T8730] lo: entered allmulticast mode [ 177.571207][ T8730] dvmrp8: entered allmulticast mode [ 177.577179][ T8728] lo: left allmulticast mode [ 178.645872][ T8734] overlayfs: failed to clone upperpath [ 178.651763][ T8734] overlayfs: missing 'lowerdir' [ 178.738814][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 179.630865][ T8759] lo: entered allmulticast mode [ 179.634075][ T4725] Bluetooth: hci5: command 0x0406 tx timeout [ 180.137192][ T8754] lo: left allmulticast mode [ 181.418040][ T8794] Soft offlining pfn 0x167844 at process virtual address 0x20ffe000 [ 181.435428][ T8794] Soft offlining pfn 0x167842 at process virtual address 0x20fff000 [ 181.610517][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.941'. [ 182.210841][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.944'. [ 182.939297][ T8824] syz_tun: entered allmulticast mode [ 183.351188][ T8833] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 183.599447][ T8817] syz_tun: left allmulticast mode [ 184.198552][ T8846] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 185.928593][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.960'. [ 187.446938][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.446995][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.977384][ T8907] fuse: Bad value for 'fd' [ 191.657416][ T8940] overlayfs: failed to clone upperpath [ 191.783554][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.6.975'. [ 193.179382][ T8962] lo: entered allmulticast mode [ 193.709331][ T8954] lo: left allmulticast mode [ 193.870801][ T8953] 9p: Bad value for 'rfdno' [ 194.051290][ T8976] netlink: 'syz.7.982': attribute type 10 has an invalid length. [ 194.102795][ T8976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.054388][ T8986] Cannot find del_set index 2 as target [ 196.416216][ T9003] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 196.940031][ T30] audit: type=1326 audit(196.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.940074][ T30] audit: type=1326 audit(196.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.945197][ T30] audit: type=1326 audit(196.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.945223][ T30] audit: type=1326 audit(196.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.945240][ T30] audit: type=1326 audit(196.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.945608][ T30] audit: type=1326 audit(196.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.945630][ T30] audit: type=1326 audit(196.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 196.945645][ T30] audit: type=1326 audit(196.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 197.058632][ T30] audit: type=1326 audit(196.920:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 197.062811][ T30] audit: type=1326 audit(196.920:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.4.989" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x7ffc0000 [ 198.215330][ T9026] syz_tun: entered allmulticast mode [ 198.267759][ T9032] netlink: 'syz.6.996': attribute type 4 has an invalid length. [ 198.441136][ T9038] netlink: 'syz.6.996': attribute type 4 has an invalid length. [ 198.649659][ T9022] syz_tun: left allmulticast mode [ 199.950095][ T9057] syz2: rxe_newlink: already configured on bond_slave_0 [ 201.154815][ T9070] lo speed is unknown, defaulting to 1000 [ 201.154860][ T9070] lo speed is unknown, defaulting to 1000 [ 201.156254][ T9070] lo speed is unknown, defaulting to 1000 [ 201.157022][ T9070] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.159775][ T9070] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 201.261318][ T9070] lo speed is unknown, defaulting to 1000 [ 201.265056][ T9070] lo speed is unknown, defaulting to 1000 [ 201.267607][ T9070] lo speed is unknown, defaulting to 1000 [ 201.270000][ T9070] lo speed is unknown, defaulting to 1000 [ 201.272653][ T9070] lo speed is unknown, defaulting to 1000 [ 202.260431][ T9099] siw: device registration error -23 [ 202.368683][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'. [ 202.368725][ T9090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.439853][ T9090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.539303][ T4723] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 204.025427][ T9186] Invalid ELF header type: 2 != 1 [ 204.512722][ T9223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1068'. [ 204.711684][ T9249] Soft offlining pfn 0x11f930 at process virtual address 0x20ffe000 [ 204.723547][ T9249] Soft offlining pfn 0x167970 at process virtual address 0x20fff000 [ 205.145934][ T9305] netlink: 'syz.5.1103': attribute type 4 has an invalid length. [ 205.235679][ T9326] netlink: 'syz.0.1112': attribute type 2 has an invalid length. [ 205.235711][ T9326] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 205.392469][ T4400] veth0_vlan: left promiscuous mode [ 205.396827][ T4813] veth0_vlan: entered promiscuous mode [ 205.446056][ T9364] geneve3: entered promiscuous mode [ 205.446092][ T9364] geneve3: entered allmulticast mode [ 205.446660][ T5124] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.446754][ T5124] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.446780][ T5124] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.446796][ T5124] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.492405][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 205.698305][ T9417] netlink: zone id is out of range [ 205.698609][ T9417] netlink: set zone limit has 8 unknown bytes [ 205.773451][ T9421] Soft offlining pfn 0x1353ec at process virtual address 0x20ffe000 [ 205.775934][ T9421] Soft offlining pfn 0x11fc37 at process virtual address 0x20fff000 [ 205.894656][ T9423] lo: entered allmulticast mode [ 206.138784][ T9430] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 206.504173][ T9406] lo: left allmulticast mode [ 206.664770][ T4723] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 206.793034][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 206.853866][ T9492] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[5837] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[9492] [ 207.054895][ T9498] Soft offlining pfn 0x219070 at process virtual address 0x20ffe000 [ 207.056772][ T9498] Soft offline: 0x219070: page already poisoned [ 207.088263][ T9498] Soft offlining pfn 0x219070 at process virtual address 0x20fff000 [ 207.090102][ T9498] Soft offline: 0x219070: page already poisoned [ 208.419633][ T9538] Soft offlining pfn 0x219070 at process virtual address 0x20ffe000 [ 208.421096][ T9538] Soft offline: 0x219070: page already poisoned [ 208.422351][ T9538] Soft offlining pfn 0x219070 at process virtual address 0x20fff000 [ 208.424015][ T9538] Soft offline: 0x219070: page already poisoned [ 208.662426][ T9544] lo: entered allmulticast mode [ 208.663974][ T9546] syz_tun: entered allmulticast mode [ 209.189663][ T9534] syz_tun: left allmulticast mode [ 209.657058][ T9563] netlink: 380 bytes leftover after parsing attributes in process `syz.6.1205'. [ 210.222827][ T9582] Soft offlining pfn 0x134cde at process virtual address 0x20ffe000 [ 210.226311][ T9582] Soft offlining pfn 0x11dd74 at process virtual address 0x20fff000 [ 211.089521][ T9608] xt_SECMARK: invalid mode: 2 [ 213.080434][ T9643] Soft offlining pfn 0x13e702 at process virtual address 0x20ffe000 [ 213.091010][ T9643] Soft offlining pfn 0x138898 at process virtual address 0x20fff000 [ 213.420499][ T9660] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1241'. [ 213.422303][ T9660] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1241'. [ 213.996599][ T9679] Soft offlining pfn 0x137a59 at process virtual address 0x20ffe000 [ 214.000265][ T9679] Soft offlining pfn 0x11f61b at process virtual address 0x20fff000 [ 214.571421][ T4723] Bluetooth: hci5: Malformed LE Event: 0x0d [ 215.288797][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 215.999804][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1259'. [ 217.172627][ T4723] Bluetooth: hci2: Malformed Event: 0x2f [ 217.316167][ T9759] tipc: Enabling of bearer rejected, failed to enable media [ 218.590857][ T9780] Soft offlining pfn 0x1363bb at process virtual address 0x20ffe000 [ 218.594843][ T9780] Soft offlining pfn 0x1363b9 at process virtual address 0x20fff000 [ 218.853995][ T9786] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1278'. [ 220.008908][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1275'. [ 220.023127][ T9786] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 220.709397][ T9810] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1286'. [ 221.049148][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1288'. [ 221.562738][ T9847] netlink: 'syz.4.1291': attribute type 10 has an invalid length. [ 221.564817][ T9847] dummy0: left promiscuous mode [ 221.630999][ T9847] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 222.013382][ T5124] bond0: (slave dummy0): interface is now down [ 222.019803][ T5124] bond0: now running without any active interface! [ 223.407657][ T9878] overlayfs: failed to clone upperpath [ 223.477605][ T9879] overlayfs: missing 'lowerdir' [ 225.106554][ T9893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1300'. [ 226.777968][ T9925] netlink: 'syz.5.1309': attribute type 10 has an invalid length. [ 226.788463][ T9925] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 227.219255][ T9960] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1329'. [ 227.534232][ T9976] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1335'. [ 227.596060][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1344'. [ 227.606871][ T9997] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1345'. [ 227.607204][ T9997] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1345'. [ 227.755623][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1357'. [ 227.796803][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1364'. [ 227.817301][T10038] fuse: fd is not a fuse device [ 227.911638][ T4723] Bluetooth: hci5: Malformed LE Event: 0x1b [ 227.965557][T10054] lo speed is unknown, defaulting to 1000 [ 228.046342][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1379'. [ 228.279356][ T5676] ================================================================== [ 228.279370][ T5676] BUG: KASAN: slab-use-after-free in put_dev+0x2c/0xf8 [ 228.279386][ T5676] Write of size 4 at addr ffff0000dac95840 by task syz.5.198/5676 [ 228.279393][ T5676] [ 228.279399][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz.5.198 Tainted: G L syzkaller #0 PREEMPT [ 228.279409][ T5676] Tainted: [L]=SOFTLOCKUP [ 228.279412][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 228.279417][ T5676] Call trace: [ 228.279419][ T5676] show_stack+0x2c/0x3c (C) [ 228.279432][ T5676] __dump_stack+0x30/0x40 [ 228.279442][ T5676] dump_stack_lvl+0xd8/0x12c [ 228.279452][ T5676] print_address_description+0xb0/0x238 [ 228.279460][ T5676] print_report+0x68/0x84 [ 228.279467][ T5676] kasan_report+0x8c/0xc4 [ 228.279476][ T5676] kasan_check_range+0x17c/0x1ac [ 228.279485][ T5676] __kasan_check_write+0x20/0x30 [ 228.279495][ T5676] put_dev+0x2c/0xf8 [ 228.279502][ T5676] gadgetfs_kill_sb+0x48/0x80 [ 228.279510][ T5676] deactivate_locked_super+0xcc/0x148 [ 228.279518][ T5676] deactivate_super+0xd8/0xf8 [ 228.279526][ T5676] cleanup_mnt+0x318/0x3a8 [ 228.279535][ T5676] __cleanup_mnt+0x20/0x30 [ 228.279544][ T5676] task_work_run+0x1cc/0x25c [ 228.279555][ T5676] do_exit+0x58c/0x1a74 [ 228.279565][ T5676] do_group_exit+0x198/0x238 [ 228.279571][ T5676] get_signal+0xfb0/0x1094 [ 228.279578][ T5676] arch_do_signal_or_restart+0x288/0x444c [ 228.279588][ T5676] exit_to_user_mode_loop+0x70/0x17c [ 228.279597][ T5676] el0_svc+0x18c/0x260 [ 228.279606][ T5676] el0t_64_sync_handler+0x44/0x104 [ 228.279614][ T5676] el0t_64_sync+0x198/0x19c [ 228.279622][ T5676] [ 228.279624][ T5676] Allocated by task 9775: [ 228.279628][ T5676] kasan_save_track+0x40/0x78 [ 228.279635][ T5676] kasan_save_alloc_info+0x40/0x50 [ 228.279643][ T5676] __kasan_kmalloc+0x9c/0xb4 [ 228.279650][ T5676] __kmalloc_noprof+0x340/0x6b8 [ 228.279657][ T5676] ieee802_11_parse_elems_full+0x114/0x21e4 [ 228.279665][ T5676] ieee80211_inform_bss+0x114/0xd70 [ 228.279673][ T5676] cfg80211_inform_single_bss_data+0xabc/0x19dc [ 228.279681][ T5676] cfg80211_inform_bss_data+0x1f0/0x2d24 [ 228.279689][ T5676] cfg80211_inform_bss_frame_data+0x348/0x838 [ 228.279698][ T5676] ieee80211_bss_info_update+0x5d0/0x944 [ 228.279705][ T5676] ieee80211_scan_rx+0x450/0x928 [ 228.279712][ T5676] ieee80211_rx_list+0x229c/0x3000 [ 228.279718][ T5676] ieee80211_rx_napi+0x18c/0x370 [ 228.279723][ T5676] ieee80211_handle_queued_frames+0xc8/0x17c [ 228.279732][ T5676] ieee80211_tasklet_handler+0x20/0x30 [ 228.279740][ T5676] tasklet_action_common+0x1dc/0x278 [ 228.279747][ T5676] tasklet_action+0x68/0x8c [ 228.279753][ T5676] handle_softirqs+0x2ec/0xd98 [ 228.279758][ T5676] __do_softirq+0x14/0x20 [ 228.279763][ T5676] [ 228.279765][ T5676] Freed by task 9775: [ 228.279768][ T5676] kasan_save_track+0x40/0x78 [ 228.279775][ T5676] kasan_save_free_info+0x54/0x6c [ 228.279783][ T5676] __kasan_slab_free+0x74/0xa4 [ 228.279789][ T5676] kfree+0x188/0x690 [ 228.279795][ T5676] ieee80211_inform_bss+0x914/0xd70 [ 228.279802][ T5676] cfg80211_inform_single_bss_data+0xabc/0x19dc [ 228.279810][ T5676] cfg80211_inform_bss_data+0x1f0/0x2d24 [ 228.279818][ T5676] cfg80211_inform_bss_frame_data+0x348/0x838 [ 228.279826][ T5676] ieee80211_bss_info_update+0x5d0/0x944 [ 228.279833][ T5676] ieee80211_scan_rx+0x450/0x928 [ 228.279840][ T5676] ieee80211_rx_list+0x229c/0x3000 [ 228.279846][ T5676] ieee80211_rx_napi+0x18c/0x370 [ 228.279852][ T5676] ieee80211_handle_queued_frames+0xc8/0x17c [ 228.279860][ T5676] ieee80211_tasklet_handler+0x20/0x30 [ 228.279872][ T5676] tasklet_action_common+0x1dc/0x278 [ 228.279879][ T5676] tasklet_action+0x68/0x8c [ 228.279885][ T5676] handle_softirqs+0x2ec/0xd98 [ 228.279891][ T5676] __do_softirq+0x14/0x20 [ 228.279896][ T5676] [ 228.279898][ T5676] The buggy address belongs to the object at ffff0000dac95800 [ 228.279898][ T5676] which belongs to the cache kmalloc-1k of size 1024 [ 228.279903][ T5676] The buggy address is located 64 bytes inside of [ 228.279903][ T5676] freed 1024-byte region [ffff0000dac95800, ffff0000dac95c00) [ 228.279910][ T5676] [ 228.279912][ T5676] The buggy address belongs to the physical page: [ 228.279916][ T5676] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ac90 [ 228.279922][ T5676] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.279928][ T5676] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 228.279935][ T5676] page_type: f5(slab) [ 228.279942][ T5676] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 228.279947][ T5676] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 228.279953][ T5676] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 228.279959][ T5676] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 228.279964][ T5676] head: 05ffc00000000003 fffffdffc36b2401 00000000ffffffff 00000000ffffffff [ 228.279969][ T5676] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.279972][ T5676] page dumped because: kasan: bad access detected [ 228.279975][ T5676] [ 228.279977][ T5676] Memory state around the buggy address: [ 228.279980][ T5676] ffff0000dac95700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.279985][ T5676] ffff0000dac95780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.279989][ T5676] >ffff0000dac95800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.279992][ T5676] ^ [ 228.279995][ T5676] ffff0000dac95880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.279999][ T5676] ffff0000dac95900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.280003][ T5676] ================================================================== [ 228.297830][ T5676] Disabling lock debugging due to kernel taint [ 228.297839][ T5676] ------------[ cut here ]------------ [ 228.297844][ T5676] refcount_t: underflow; use-after-free. [ 228.297951][ T5676] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#0: syz.5.198/5676 [ 228.378914][ T5676] Modules linked in: [ 228.379586][ T5676] CPU: 0 UID: 0 PID: 5676 Comm: syz.5.198 Tainted: G B L syzkaller #0 PREEMPT [ 228.381335][ T5676] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 228.382290][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 228.383950][ T5676] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 228.385262][ T5676] pc : refcount_warn_saturate+0x154/0x1f8 [ 228.386215][ T5676] lr : refcount_warn_saturate+0x154/0x1f8 [ 228.387163][ T5676] sp : ffff80009af876c0 [ 228.387852][ T5676] x29: ffff80009af876c0 x28: 00007dfea2415028 x27: 0000000000000001 [ 228.389157][ T5676] x26: ffff800088b3b6a0 x25: 1fffe0001b2e0b53 x24: 0000000000000003 [ 228.390550][ T5676] x23: ffff0000d9705a98 x22: dfff800000000000 x21: 00000000dcbdefb1 [ 228.391949][ T5676] x20: ffff0000dac95840 x19: ffff80008a19d000 x18: 1fffe00034bb7428 [ 228.393257][ T5676] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 228.394576][ T5676] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 228.395900][ T5676] x11: 0000000000000000 x10: 0000000000000002 x9 : 337b82b35c0f9f00 [ 228.397362][ T5676] x8 : 337b82b35c0f9f00 x7 : 0000000000000000 x6 : ffff80008048c60c [ 228.398715][ T5676] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 228.400053][ T5676] x2 : 0000000100000000 x1 : ffff0000cd548000 x0 : 0000000000000000 [ 228.401483][ T5676] Call trace: [ 228.402031][ T5676] refcount_warn_saturate+0x154/0x1f8 (P) [ 228.403010][ T5676] put_dev+0xcc/0xf8 [ 228.403664][ T5676] gadgetfs_kill_sb+0x48/0x80 [ 228.404457][ T5676] deactivate_locked_super+0xcc/0x148 [ 228.405372][ T5676] deactivate_super+0xd8/0xf8 [ 228.406117][ T5676] cleanup_mnt+0x318/0x3a8 [ 228.406844][ T5676] __cleanup_mnt+0x20/0x30 [ 228.407614][ T5676] task_work_run+0x1cc/0x25c [ 228.408400][ T5676] do_exit+0x58c/0x1a74 [ 228.409096][ T5676] do_group_exit+0x198/0x238 [ 228.409836][ T5676] get_signal+0xfb0/0x1094 [ 228.410617][ T5676] arch_do_signal_or_restart+0x288/0x444c [ 228.411584][ T5676] exit_to_user_mode_loop+0x70/0x17c [ 228.412432][ T5676] el0_svc+0x18c/0x260 [ 228.413105][ T5676] el0t_64_sync_handler+0x44/0x104 [ 228.413954][ T5676] el0t_64_sync+0x198/0x19c [ 228.414711][ T5676] irq event stamp: 2301 [ 228.415394][ T5676] hardirqs last enabled at (2301): [] finish_task_switch+0x234/0x858 [ 228.416925][ T5676] hardirqs last disabled at (2300): [] __schedule+0x2f8/0x2d80 [ 228.418423][ T5676] softirqs last enabled at (1554): [] handle_softirqs+0xc28/0xd98 [ 228.419934][ T5676] softirqs last disabled at (1517): [] __do_softirq+0x14/0x20 [ 228.421510][ T5676] ---[ end trace 0000000000000000 ]--- [ 228.462956][ T5676] bond0: (slave syz_tun): Releasing backup interface [ 228.845896][ T1380] bridge_slave_1: left allmulticast mode [ 228.845928][ T1380] bridge_slave_1: left promiscuous mode [ 228.845994][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.854849][ T1380] bridge_slave_0: left allmulticast mode [ 228.854876][ T1380] bridge_slave_0: left promiscuous mode [ 228.854937][ T1380] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.887591][ T1380] team0: Port device vxlan0 removed [ 228.894508][ T1380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.928688][ T1380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.979579][ T1380] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 229.018715][ T1380] bond0 (unregistering): Released all slaves [ 229.065081][ T1380] tipc: Left network mode [ 229.121512][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 229.232451][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 229.310456][ T1380] hsr_slave_0: left promiscuous mode [ 229.311705][ T1380] hsr_slave_1: left promiscuous mode [ 229.313697][ T1380] veth0_vlan: left promiscuous mode [ 229.375837][ T1380] team0 (unregistering): Port device team_slave_1 removed [ 229.378295][ T1380] team0 (unregistering): Port device team_slave_0 removed [ 229.407365][ T4400] 8021q: adding VLAN 0 to HW filter on device eth16 [ 229.506725][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 229.990191][ T1380] IPVS: stop unused estimator thread 0... [ 230.498111][ T4725] Bluetooth: hci2: command 0x0406 tx timeout