last executing test programs: 5.587245975s ago: executing program 3 (id=2884): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0,0x7f0000800000,0x7f', 0x15) 5.536693751s ago: executing program 3 (id=2886): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}}) 5.53644228s ago: executing program 3 (id=2887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000880)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000136000/0x4000)=nil) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, &(0x7f0000000700), 0x0, &(0x7f0000000740), &(0x7f0000000780), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dddbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2507000000080004006401ff0200000000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044014) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x2000000b}, 0x1c) shutdown(r7, 0x0) 1.831603808s ago: executing program 2 (id=2940): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 1.78927621s ago: executing program 2 (id=2942): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002440), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x3, 0x1c84055, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100, 0x6}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r4, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000002200)='./file0/file0\x00', &(0x7f0000002300), 0x0, 0x0, 0x2) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 1.744266004s ago: executing program 3 (id=2892): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 1.702185231s ago: executing program 2 (id=2943): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x1d6b\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='Conf 1\x00', 0x7) 1.634279118s ago: executing program 2 (id=2945): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.607174845s ago: executing program 0 (id=2946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 1.285869738s ago: executing program 0 (id=2947): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}}}}]}, 0x4c}}, 0x20000000) sendmmsg$inet(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="f1168cfd72e8ff25ae2eb5ecdc41136c49a3c9039a13db0fa92d37c7f1e968bd5b8a91b2ccd751d7003b7e0758bd6de18777282d6966206c58fd3e9f47adbd2ad4ee277425b7da8b9b7edd597f4e92b0560c48974738da5308a6db5a555e9da204834cf283826fa09a4a443f529f446f933b363af8268c7e4edf0c5d0e138568d9eb7859c6b6b4c3d30f0b4dbed18738e72b38d54985b664e5e23d16b38e189a90906624ec212cea2b9b849d0135da8719fc5bce1a010aadd39106302ff8f0255699ba38e546d91503760bba961e94f38347fbe6b899853e68792f26256ac90779ce1dc603b3bbfe0807bd62df4973", 0xef}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000001240)}], 0x4, &(0x7f00000022c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) 978.496894ms ago: executing program 4 (id=2949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002ac0), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x14, r1, 0x5, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 978.379019ms ago: executing program 4 (id=2950): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlm\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./dlm\x00', &(0x7f0000001300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./dlm/domain1\x00', 0x1ff) 967.955978ms ago: executing program 4 (id=2951): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 944.240795ms ago: executing program 4 (id=2952): socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_uring_enter(0xffffffffffffffff, 0x5c12, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) 842.311329ms ago: executing program 3 (id=2953): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0x2, 0xa, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x700, 0x700, 0x9f, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) exit(0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000002"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) 807.858171ms ago: executing program 2 (id=2954): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 769.714223ms ago: executing program 2 (id=2956): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x8805) 732.471854ms ago: executing program 1 (id=2957): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000080)=0xffffffff, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}, 0x20000005) 582.448345ms ago: executing program 1 (id=2958): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 470.45039ms ago: executing program 1 (id=2959): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x20) 470.046562ms ago: executing program 1 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)) sendto$inet(r3, &(0x7f0000000000)="1f", 0x1, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x5, &(0x7f0000000200)={0x812, 0xb, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000280)={0x2020}, 0x2020) 443.052124ms ago: executing program 1 (id=2961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 432.707105ms ago: executing program 0 (id=2962): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 409.89251ms ago: executing program 0 (id=2963): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='online_movable\x00', 0xf) 382.731746ms ago: executing program 1 (id=2964): r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 382.441234ms ago: executing program 0 (id=2965): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20100) fcntl$getflags(r0, 0x401) 329.312058ms ago: executing program 0 (id=2966): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0xb, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000100)='\x00', 0x1, 0x40, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4a, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 328.72191ms ago: executing program 4 (id=2967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xde6}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 303.389382ms ago: executing program 4 (id=2968): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000080)=0xffffffff, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}, 0x20000005) 0s ago: executing program 3 (id=2969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002"], 0xa0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000efff00000000000000000000000066c0c38621b522bd8a01596d"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="64d77c56d5b29860d0c6956799f6451cabe83aa86f31e4bf7f674fd95f307001a3f06593560a2e9b61b0572d42584abe06e88521751da357a9bd9c546bdac87be637de9c27528e26d3626e67c129949b294b2027635474bcc4c6798bf4045b72b4439dff9a01b01329f43be73f9a17157174d7c6d233e403b063d3e4fc63d989bcb1b998579eb5ecb14ec0b44f8638085164703ddf65aa642fc82a481835523d0e2146680f8d0b95617f7bc18abe71289f88e8380d83baf9811c323764a3949c93a1830e0a9054d60b0e3cb65834be2899d8d57db00f4d383ff81574d37aede5cab5246e5482e0997938f6e262af7a40a5e8762f84af14426dc23511925a33777a277b35d94d1f7eed30be2aa4216b20ea191bddb35cbe87d61fd00d36f90c0adb8de771f3d321c1c09154b9e21ca4c6ac3e6159cba11324db2aabdf8956027d49048a6a18e3e2fbedff4d250fd3cbad53950cd5540a443306d9eba395cb86bd25df8718ab1e09fb7d8f85125011ab8843df597d856fab15e6ba64188b16784a4249d5533a085cea0b82e50d7642da14ed6f0f64c8fc1c0dbef03fc4ec6d32f0c9289ef5ecc99f92f7aed96608fd1b87d9e9d55160f927a1df2c8b493ed267d7940b9ba114669989b9c177effbf13fe11e8a5bb1d2ad08b57c0ce3a85fff55072677af6d20fa98ba030c7d37fed8bd8bd7fa63e8142f846dfd222bb403cf2cae99e5e51cefbe16d505f4e3ea334fe435d0e8b598cec8c2794eef752572ac9dc444c36c096a2fc76ddd44320e45d605c8eba573f7c601aca42ceea0359b906a609ac24df8f257a93e5357c2c0c9595aff5a49dc7282c7de64d06cbfe4243a183084cfebe287ed6b14f99c41849adae832a55f88f7498fde8963cc69e442c0134f78a972af88b40b0dc63de7a670d6d47e32c86a4b70de5f06a7a7d651e73fbdc14ccc0c37b65622f06f2c5700ee80085c3ce94f0249618564597039ce6a6470cfcb76e97053100d50951b13cbe355e7d94b6cd26ed5f96a49ec8ca67352d57bfb93d822b350889ab9043dc0322f9807a66b97b58fd2ca5fc8822d55956d5016ccad1d63727620c5e5ed78e3b57375f8cc37821ef29faab897f1382c488dc8eb78d754f7bf28239ece878aa5cd5931d4379c19411d18b7680766f2b8058832bccf7e1013c77aa69a25dd22d003e416d0104810f1d1a8079917018869541afdd0d427d57fb6c0a246cc948f9764068f5a024a9fad9f3e46744133c9a9777da6e5c4bf8dd17cca6b519f1ab7854c01e787bf8dd9023d519bd9e637711d70fc73541d82bd32832f52d94d05f4cde525b3ec115759a16041fa8928c95ad0eccc743e2d3bc302fa21535d03f4de8389e015ecb4af25f46fdffe26f40afa339fe15ba02a2221bf0c7631e376cbd2991db62dea686ba23cebaf6c9658aa4302ad9f6289d1cf0a8ca258725c56765c935d9388d7efb5826fc36c9dc1a51178c12287da4c8dd7d32432583834715968272739ccaa0a033306ca6d30d91bda6a3205cdaf38fbaf4b866117b1716b14e42ab6de46be94cae2f928f7fe14974708d7d4d310c46af52e2ce190bfdc9f0be4729da3ff33a1bddc6d4e7e831b94bc0ab40a10a4549fc6b6a817cf06b3528665d8ee4e836fd16a3284977d76107d8ebbec20dc6b472182dad2f595fada2c3ef932e6ca5773ae675f30b54b0eb6a9bac5d9f21f3de471e1423b284ead0f83c50adf6bc7b4a6e48dc4bb4c8a00dcc0cf5dc3c64af365645d22d47c23eb0bec31f2a1a475b5dad3f28d6c2fead6388b1ea224815d74ef363477daf341d25d06850143f02ea8bec5bb1e0cd503ddd6b6c7b02bfec10358a3669ff2c2d479ee57c02543a5786fb398f9a941fa2cc38221fdffdc7afdb4c83de226e6565307eadd589b9d629dd556a49365da592c7779f49969799707f4126bb22d546f49bce401102bbd4a49cbdcfced1320cc8b4856cdd8382c00668f780af6b59c96711d51a21e62d80d3be5dcf0b807d4c0cf370e1a443e6b61210b52eee27efaff3e189ced9f5ebed137ad7c903273ac7bfc2f12dbb4a84d4de49b2c9a84e615f15791da4a39522adf827a3f2e108ee27a6ec2ee424d6e825c11ad7965715e4085b7db9ff67855a9c4add1b2f23e60602617fcd1435e4f639e17cad35c9124119c82c3233d80eb8849354a85478fd6d81cedcbfb276155ee10646cd6f989bd192e2960e1ca954a390b14aeb807c85b0fd2c1fb6df952f3c424001899d6b9b9b6b72c0f394ef3971d93a8e71d33e01f1196c3e96094215a483dc426a625ae1f0733cb88cef0512dc70d1fdfe4c8ee22f1c00d0b61f67ad24e45249658b4cf11467905c0b9af36ff6066cd11997c3dfd7f09c74a392c0d5167a5bd74e18b3c3f69eb7241a322fe6ef549a7df9f1dd0dba7f1fd52afe3f5763391e1fc1772be5f553c3ad8ce1ebf2746f14d173de977f234947573269655ed5c3b84d61906e5b9a6b181221575a8255cd0e0817ee398f6f6bdfcc8592db264768530f5f335cd1155f521f129103c91362ef58b793bbcc1d95caa386ddd0359dea7861abb678acbfe26c9fd4fc03240c0b6c50b5163be4409a42e0520b028591084ff791315299dd733bdcde89fecf3973adadbec8c6426e9a18d649b57f018197a07981d52aaba12536820efe596654b77e582ec6144bbf50b11a23f95a07d2b881178824b68e1e4c63afb62211bbd77c6b5d82e525d110c723c87e1b7af137a5d1b954f7ca22453d210b22892c7aab4057a131874f017989563eb363d8c7806fc3eba4b524a254bf0ade254c00fb2c07c5dbef80586df2be18491a5a656eb28ad80c622339f1388a6b1c61545f82dfb982160c7d20db97a75e98f3d59b314867ddc3270606292f534d598b5f98c7035ad32ad8525a8798d512433ccdeb889df1ac92126fd21d1b331ee8483a62f2d396122c649ccf66c466de9b8409c2eb49dd2633e71c2c2fecac180cdfc9906d21dbe55b26b51758ac3ee308f1047ee4f91af04ae387db075c36b65b1a11b4378614fc48ddfad2882d7001f6347513b8575afe3bb7c751e5ee91e6bf26dd4e0da893f37c97f4ba677b3a6c1a7f5b415dfe278df4eafe80c14c9388276d5d44ecda6224438c82f9bb4bb17bc714649ed10e7782b2138c794f84a641e31dc876a538525dc22823a743ce658fb0ed8ce925df8e512b672c817cd5830a13e40dba6b652f5be194260301e1c50f1ebf3239760d3b80c02eb041176a5ecb78cb23bc8a95d2e5d7c50413c0983f386857caa6fbf0217a94a1f4484feb5c729f3518c05ff7b2c32060b9def566528a4141bd9948c69bd383ccc2f869c1dc790fe2de8c18a857d54e22209b9b9bcc689d9fbaefd7c574eb349e73863cb7fe4e059a04cd8247d863b7de9f43f8ad16da4d38ea5752220e86980f4697927a8a0fd6e237a91fc3c3abb341f3ab9280217248ca2962df15f88b84adea9e87dab7173a947e1a8ad19bd53cbdb140ff5b5569c1dcec6ed6847adbb628b72eaae082438ac57ddae3887cdfb17837c8289035b075dc77d0595dc969d5e6dea1b590220545e2ff38c0a24adbe4108d0d9233f95b882f6f0ee20146d8a0d96e58584f12d02197dbace4b654ecb2477dc1ca90c09d8edc93eb3cea69be8a8ce9a6787f930d5da468b5d303c60d5a150a623b0df3a58cf9aa7772dacfbf2553aaab077fd17efba5a14068f248a1d000edae900120757cd58e1fc480861b0c543849caeed915f3ed2881f33298afc396e90b2f01ca417ad3758d6b83f47a8617a0bc5f2bbc0f2287abed3ae8343afb34dead5bf9592593e0b522e2ecfa0782cf7e23983e982e52025a8684bafb53b249c5433ac6cdb0084f03631395c1e6c8b488c89d2611a073e39113e4eb70c3b9a10b3f5c1af278780fd926323e86b88788da2da6ba86f4e7531a8588ed5135f1daa1362ceffc3c84a1344d26e8203fc6e2914e4a25bc20c8d5745bd954359a6523d319a409bad9f49636acbb6c4916f04eb0bd4660e2a3bb574349238f482be6ae243d64de0f53faea9d8e956164f16476a67737ce0817999ab405eca226b1535b66ac9cdc7ee02e2ddf175da48308c090420518eedc9930a09218b5a7665de00067f8e1fa27417dbe94247214bd2d51c7ef38e67b8469769393d5851e4724eb3fe6a622b1b5fd40d010e4a3c6cbc7f7ce2d387f38725908626cdddb4ac24839b35b09bf54a725ce1ce2325c09a63fe225dff1fb3914d35a0d1c95bafc0989b567f88165b3f05ee96e3ae345f37218d300389db9d62ad96abfa8e8f9f5da39fa8b346cadd83cdfcf00b5f99b7178e5d3ec793910d40736d102bbbf2ec2cd6ced782380a9af9f7e0da5344ad0542febb31c527e0a264d35af62611a25283c0a9f2806e95d7c2158702327aca6ecf92e12c55fe9cd96e35546fa135e30d03d5901e17448ab31299036f8a99617337ad78ab1a3beebafbca077f9dab3cda28135503e520ca5d98c5b65d49bcef31f65e0eac9b6e078750774f5d6747738481207425c2a1a36ea210153111b16a044dd7c8885dafe15f430b192f22079e6ec68abc8e57cbd399fadff2e9682315e5165de9c620d15f8887a9b12f69ed574e4a969d6cb30ff03c57a9fa6cf9a7819af668f91661457bd21c322d6854b75db7a2e7d4da1ad9497030bbeba1fe29bd5e40d6cf978aeccab36068ed219973aa496c52b2fa92fb3ffde941f85e465df44e0a986217630c0b6bb4013619ec929364127e99cbe4bae98fcaec53578989358abd0c3836945bd93e46108ab9aa8b089f822eb08b40b8cd9c9c377f67b474a466110043b933fce7e6751e265bb4472ea5ccdd00b5ddb57c8a689a136aea6862016c9817410fb987d887d37a2b92dbf5e4b4b5c9f1f072bbe87d8f26f836509d8ad39868de8c351e84ef1baac072707b8d6f630c7ef2267da94d46eef72097e2e69f5393c1aea85ac0638eeafb0af37e8c4bf45df045aef101fd9e849b72b10fa32020b21b604177a882ef1233aa52f9660d441bf880c4719631f0402f769ff3c9732263b6ada2cdd195c042116edbdd6a83c372054825e11426bd49bc45be3345ad6a740ffab1aed04a1ee2c928a10cb4e7a6eee29f7a684b71a2981ac820f1cb859fae9c54bf584c3c61984ee61829932d5db4ec7d5f395d0b4201961844421f2de06c771ed1c60d100a48ab22a661d03cdfd7c6f23d96e1dd55f97a9f624d71a3870ec5ddbd58e15ec290397c8cbbe5c1158b98afa4914aee0fd6ada55c4ac47696e11fef8d4b2a1ed1fec72d195ea15f63b7802317e8301df38b345ad4e3b23ae80e27bae1e1787455c68ba35d720af9f55779e17806f2861aec33b8f92574ea59a1f85e4d3641794cfcece2e53591c4944574bd03b019b9982123e41456463ed5cc79a86223b4a14b206237140eba5430b0bb82813cc7b088aaaa3584c0f3c76c8992d7a7ae69bdd8ecb3aa9d0d7edb4ad7271eeaed067a458bdc70aa3c021de1bc50271a4c847d9f0aedd126d894b25a79c9769e30880827029677a3776a6afdf43fd9471399c5f9649b0ac38eaf71e0daff735ecfaf4e08688e0817f56b689ef73bd2fda94be2146fe50d33c65ff03c53f380c74c22ceb11919c3b21778f2fa4c20f489e2d85b78c98038aefccdf2272221d7bc2ae7629d39b33cd17f6fa1a31cea7c0afd5e4e444e3f7c8979af903a9eecdc366b491287c0b0f4055edea31136663269518ec500467e0faeded929b44b916a1a35b3d19f45333d806f08292c73d2aadb", @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000c0000004300000040"], 0x50) openat$ptmx(0xffffff9c, &(0x7f00000004c0), 0x22080, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)="88d0308f4b18b57490aa15b048", &(0x7f00000001c0), 0x10f0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000080)="ddc057e5feed68ac0cf83a63834405e8ac72b380026c8f02d8083c326c1aae9ac5e8cf03a7c44d430d208aae8cc245b8b3f7637d64ec0e52ff0f977e9b23f1ed2d339faa2b1de4a267f7c434c0d1aca61c0b04111dc275928c2cfdf378a492477d6b7426a354bc23383dcf1a6274f052a875d94534b88cbc7ee86a077570db73f2a4a700bbe07dde21b5620fc017124fbeaff234396004c9df8e0ea097aae5fdc39468402aa8c6b74b849cd27ba6e728b5584814a12f2181b79482e89f36356ffc7ae9c9a75d81550a9c27d0255c7d7e93", &(0x7f0000000180)=""/42, &(0x7f00000002c0)="89dee70ce3c89b8cce0e0124e7f6b8298e5ff01c33cc9acdc70f6b5bc07a08aa9a9413a4a0a715fc206437a19d70f24a39ee19b37a1a8f602f1c725f09cd071aa65b607b9313c838cb83543862c965ba5ff1171897ff4fbb22558ff910ddfabf1a5b6fb143ed72de09a029a17c73bbe796b46cb312cd76201d7fb2a45d21c0bdd44abf06c03cb545bdf943a46e728b8ba0b58bb553ce9893562ca21975187cb565960695fa4449a6762a9f35026606cff2aee8abe48a6bf5a5b443615d860cee754e0977cf6015c4bee1ff374a63f0dd0112ed", &(0x7f00000003c0)="7456aa9a71f4374b08f63fc8fb875b13aa338afea2e4f76ec55796559089ba68f1e4d8aed5f6b8e3f2a4e00589352d0a5c298ab53bf784bbb587c0cbbe99c51ca62cd12b15e085d4aa65d2906fdda4d6dd332dd8607b7335280507d2823a9146773b64b35eaa30a47e57d13ff004381dabb8c1d63984aee93ae8927e113bbfe5e5359bdbb30bf7ea9a954aca0bcd7c47a9656c6b12b9db5915cebf405bbcc38c9b4c82f6ba2ec3a27860a600d56ca9a72148feded697a24a896ccacc", 0x4, r5, 0x4}, 0x38) socket$can_bcm(0x1d, 0x2, 0x2) kernel console output (not intermixed with test programs): 740][ T6930] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.141848][ T6930] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.819: couldn't read orphan inode 15 (err -117) [ 78.141861][ T6930] loop0: lost filesystem error report for type 5 error -117 [ 78.490220][ T6959] loop0: detected capacity change from 0 to 512 [ 78.500882][ T6959] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.831: corrupted in-inode xattr: invalid ea_ino [ 78.503811][ T6959] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.504043][ T6959] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.831: couldn't read orphan inode 15 (err -117) [ 78.508286][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 78.508300][ C1] EXT4-fs (loop0): initial error at time 78: ext4_iget_extra_inode:5180: inode 15 [ 78.508319][ C1] EXT4-fs (loop0): last error at time 78: ext4_iget_extra_inode:5180: inode 15 [ 78.512482][ T6959] loop0: lost filesystem error report for type 5 error -117 [ 78.519073][ T6959] overlayfs: failed to resolve './bus': -2 [ 78.549386][ T6964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.557711][ T6966] binder: 6965:6966 got transaction to invalid handle, 1 [ 78.578533][ T6966] binder: 6965:6966 got transaction to invalid handle, 1 [ 78.713234][ T6988] loop1: detected capacity change from 0 to 512 [ 78.720194][ T6988] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.845: corrupted in-inode xattr: invalid ea_ino [ 78.723093][ T6988] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.724675][ T6988] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.845: couldn't read orphan inode 15 (err -117) [ 78.724720][ T6988] loop1: lost filesystem error report for type 5 error -117 [ 78.726540][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 78.726553][ C1] EXT4-fs (loop1): initial error at time 78: ext4_iget_extra_inode:5180: inode 15 [ 78.726569][ C1] EXT4-fs (loop1): last error at time 78: ext4_orphan_get:1404 [ 78.750925][ T6988] overlayfs: failed to resolve './bus': -2 [ 78.801669][ T6994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.844009][ T6997] binder: 6996:6997 got transaction to invalid handle, 1 [ 78.844834][ T6997] binder: 6996:6997 got transaction to invalid handle, 1 [ 79.017539][ T7016] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.857: corrupted in-inode xattr: invalid ea_ino [ 79.021778][ T7016] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.022120][ T7016] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.857: couldn't read orphan inode 15 (err -117) [ 79.026071][ T7016] loop3: lost filesystem error report for type 5 error -117 [ 79.026250][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 79.026269][ C0] EXT4-fs (loop3): initial error at time 79: ext4_iget_extra_inode:5180: inode 15 [ 79.026307][ C0] EXT4-fs (loop3): last error at time 79: ext4_iget_extra_inode:5180: inode 15 [ 79.038920][ T7016] overlayfs: failed to resolve './bus': -2 [ 79.058078][ T7019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.495825][ T7048] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.871: corrupted in-inode xattr: invalid ea_ino [ 79.500263][ T7048] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.500652][ T7048] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.871: couldn't read orphan inode 15 (err -117) [ 79.505794][ T7048] loop3: lost filesystem error report for type 5 error -117 [ 79.506585][ T7048] EXT4-fs mount: 28 callbacks suppressed [ 79.509447][ T7048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.550601][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.595737][ T7053] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.873: corrupted in-inode xattr: invalid ea_ino [ 79.595774][ T7053] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.595962][ T7053] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.873: couldn't read orphan inode 15 (err -117) [ 79.595981][ T7053] loop3: lost filesystem error report for type 5 error -117 [ 79.596571][ T7053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.664937][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.731829][ T7063] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.740242][ T7064] binder: 7062:7064 got transaction to invalid handle, 1 [ 79.740271][ T7064] binder_debug: 10 callbacks suppressed [ 79.740767][ T7064] binder: 7062:7064 cannot find target node [ 79.740794][ T7064] binder: 7062:7064 transaction call to 0:0 failed 72/29201/-22, code 0 size 0-24 line 3252 [ 79.741966][ T7064] binder: 7062:7064 got transaction to invalid handle, 1 [ 79.741977][ T7064] binder: 7062:7064 cannot find target node [ 79.741989][ T7064] binder: 7062:7064 transaction async to 0:0 failed 73/29201/-22, code 0 size 0-0 line 3252 [ 79.742960][ T866] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.792722][ T4723] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.002175][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.897'. [ 81.477869][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.909'. [ 82.735534][ T7183] set_capacity_and_notify: 4 callbacks suppressed [ 82.738561][ T7183] loop3: detected capacity change from 0 to 512 [ 82.750095][ T7183] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.928: corrupted in-inode xattr: invalid ea_ino [ 82.750132][ T7183] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.750381][ T7183] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.928: couldn't read orphan inode 15 (err -117) [ 82.750398][ T7183] loop3: lost filesystem error report for type 5 error -117 [ 82.754077][ T7183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.815452][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.477236][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'. [ 83.587108][ T7218] loop4: detected capacity change from 0 to 512 [ 83.598638][ T7218] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.942: corrupted in-inode xattr: invalid ea_ino [ 83.601404][ T7218] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.605321][ T7218] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.942: couldn't read orphan inode 15 (err -117) [ 83.607461][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.607473][ C0] EXT4-fs (loop4): initial error at time 83: ext4_iget_extra_inode:5180: inode 15 [ 83.607493][ C0] EXT4-fs (loop4): last error at time 83: ext4_iget_extra_inode:5180: inode 15 [ 83.615285][ T7218] loop4: lost filesystem error report for type 5 error -117 [ 83.615906][ T7218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.757415][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.989613][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.951'. [ 84.785548][ T7259] loop2: detected capacity change from 0 to 512 [ 84.821604][ T7259] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.957: corrupted in-inode xattr: invalid ea_ino [ 84.821650][ T7259] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.826261][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 84.826299][ C1] EXT4-fs (loop2): initial error at time 84: ext4_iget_extra_inode:5180: inode 15 [ 84.826338][ C1] EXT4-fs (loop2): last error at time 84: ext4_iget_extra_inode:5180: inode 15 [ 84.830952][ T7259] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.957: couldn't read orphan inode 15 (err -117) [ 84.830976][ T7259] loop2: lost filesystem error report for type 5 error -117 [ 84.839516][ T7259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.852948][ T7259] overlayfs: missing 'lowerdir' [ 84.890162][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.360931][ T7276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.964'. [ 85.375993][ T7278] netlink: 68 bytes leftover after parsing attributes in process `syz.4.965'. [ 85.565523][ T7289] loop2: detected capacity change from 0 to 512 [ 85.578931][ T7289] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.970: corrupted in-inode xattr: invalid ea_ino [ 85.579763][ T7289] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.583962][ T7289] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.970: couldn't read orphan inode 15 (err -117) [ 85.584014][ T7289] loop2: lost filesystem error report for type 5 error -117 [ 85.586253][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 85.586275][ C1] EXT4-fs (loop2): initial error at time 85: ext4_iget_extra_inode:5180: inode 15 [ 85.586291][ C1] EXT4-fs (loop2): last error at time 85: ext4_orphan_get:1404 [ 85.594249][ T7289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.605101][ T7289] overlayfs: missing 'lowerdir' [ 85.627721][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.185767][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.186022][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.617167][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.977'. [ 86.640396][ T7319] netlink: 68 bytes leftover after parsing attributes in process `syz.2.978'. [ 86.812713][ T7327] loop3: detected capacity change from 0 to 512 [ 86.833136][ T7327] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.982: corrupted in-inode xattr: invalid ea_ino [ 86.833191][ T7327] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.833332][ T7327] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.982: couldn't read orphan inode 15 (err -117) [ 86.833348][ T7327] loop3: lost filesystem error report for type 5 error -117 [ 86.865442][ T7327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.884304][ T7327] overlayfs: missing 'lowerdir' [ 86.920478][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.357156][ T7340] syz.1.986 (7340): drop_caches: 3 [ 87.386122][ T7341] syz.1.986 (7341): drop_caches: 3 [ 87.432211][ T7343] loop0: detected capacity change from 0 to 512 [ 87.449793][ T7343] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.987: corrupted in-inode xattr: invalid ea_ino [ 87.449829][ T7343] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.449944][ T7343] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.987: couldn't read orphan inode 15 (err -117) [ 87.449957][ T7343] loop0: lost filesystem error report for type 5 error -117 [ 87.450659][ T7343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.479542][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.507601][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.508604][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.843820][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 87.857794][ T7353] netlink: 68 bytes leftover after parsing attributes in process `syz.3.991'. [ 88.159409][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159451][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159462][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159472][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159482][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159490][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159498][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159506][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159514][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.159521][ T866] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.161609][ T866] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 88.209728][ T7363] loop1: detected capacity change from 0 to 512 [ 88.221091][ T7363] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.995: corrupted in-inode xattr: invalid ea_ino [ 88.221124][ T7363] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.221248][ T7363] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.995: couldn't read orphan inode 15 (err -117) [ 88.221261][ T7363] loop1: lost filesystem error report for type 5 error -117 [ 88.222569][ T7363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.241603][ T7363] overlayfs: missing 'lowerdir' [ 88.282135][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.485778][ T7375] fido_id[7375]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.779713][ T7388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 88.845136][ T4722] Bluetooth: hci4: link tx timeout [ 88.853024][ T4722] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 89.336445][ T7393] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1005'. [ 89.542361][ T7401] loop4: detected capacity change from 0 to 512 [ 89.549311][ T7401] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1009: corrupted in-inode xattr: invalid ea_ino [ 89.549347][ T7401] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.552272][ T7401] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1009: couldn't read orphan inode 15 (err -117) [ 89.552307][ T7401] loop4: lost filesystem error report for type 5 error -117 [ 89.556313][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 89.556334][ C0] EXT4-fs (loop4): initial error at time 89: ext4_iget_extra_inode:5180: inode 15 [ 89.556374][ C0] EXT4-fs (loop4): last error at time 89: ext4_orphan_get:1404 [ 89.564125][ T7401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.583596][ T7401] overlayfs: missing 'lowerdir' [ 89.613333][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.207712][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 90.333262][ T7422] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1017'. [ 90.679863][ T7433] loop4: detected capacity change from 0 to 512 [ 90.683829][ T7433] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1021: corrupted in-inode xattr: invalid ea_ino [ 90.688277][ T7433] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.691406][ T7433] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1021: couldn't read orphan inode 15 (err -117) [ 90.695750][ T7433] loop4: lost filesystem error report for type 5 error -117 [ 90.697887][ T7433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.715994][ T7433] overlayfs: missing 'lowerdir' [ 90.748399][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.912000][ T4715] Bluetooth: hci4: command 0x0406 tx timeout [ 91.261510][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 91.279549][ T7450] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1028'. [ 91.298040][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.301031][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.683547][ T7464] loop1: detected capacity change from 0 to 512 [ 91.697220][ T7464] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1033: corrupted in-inode xattr: invalid ea_ino [ 91.697267][ T7464] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.700239][ T7464] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1033: couldn't read orphan inode 15 (err -117) [ 91.704301][ T7464] loop1: lost filesystem error report for type 5 error -117 [ 91.705753][ T7464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.732729][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 91.739552][ T7467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.744087][ T7467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.762726][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.794222][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 91.796095][ T7469] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 91.796109][ T7469] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 92.289079][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 92.345641][ T7487] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1042'. [ 92.668928][ T7496] loop1: detected capacity change from 0 to 512 [ 92.698114][ T7496] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1046: corrupted in-inode xattr: invalid ea_ino [ 92.698153][ T7496] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.698452][ T7496] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1046: couldn't read orphan inode 15 (err -117) [ 92.698473][ T7496] loop1: lost filesystem error report for type 5 error -117 [ 92.706259][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 92.706294][ C1] EXT4-fs (loop1): initial error at time 92: ext4_iget_extra_inode:5180: inode 15 [ 92.706314][ C1] EXT4-fs (loop1): last error at time 92: ext4_orphan_get:1404 [ 92.706939][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.724120][ T7496] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 92.725867][ T7496] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 92.768312][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.231064][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 93.611716][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 93.667629][ T7518] syzkaller0: entered promiscuous mode [ 93.668737][ T7518] syzkaller0: entered allmulticast mode [ 93.725081][ T7523] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1056'. [ 93.756335][ T4722] Bluetooth: hci1: unexpected cc 0x0809 length: 7 > 4 [ 93.879740][ T7533] loop1: detected capacity change from 0 to 512 [ 93.894628][ T7533] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1061: corrupted in-inode xattr: invalid ea_ino [ 93.894654][ T7533] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.894775][ T7533] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1061: couldn't read orphan inode 15 (err -117) [ 93.894794][ T7533] loop1: lost filesystem error report for type 5 error -117 [ 93.895314][ T7533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.908329][ T7533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.910380][ T7533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.947633][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.120729][ T7543] binder: tried to use weak ref as strong ref [ 94.120760][ T7543] binder: 7542:7543 Acquire 1 refcount change on invalid ref 0 ret -22 [ 94.124815][ T7543] binder: 7542:7543 got transaction to invalid handle, 1 [ 94.124855][ T7543] binder: 7542:7543 cannot find target node [ 94.124870][ T7543] binder: 7542:7543 transaction call to 0:0 failed 76/29201/-22, code 0 size 0-24 line 3252 [ 94.125015][ T7543] binder: 7542:7543 got transaction to invalid handle, 1 [ 94.125024][ T7543] binder: 7542:7543 cannot find target node [ 94.125035][ T7543] binder: 7542:7543 transaction async to 0:0 failed 77/29201/-22, code 0 size 0-0 line 3252 [ 94.126392][ T4800] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.306448][ T7557] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1070'. [ 94.535646][ T7569] binder: tried to use weak ref as strong ref [ 94.537003][ T7569] binder: 7568:7569 Acquire 1 refcount change on invalid ref 0 ret -22 [ 94.539893][ T7569] binder: 7568:7569 got transaction to invalid handle, 1 [ 94.539924][ T7569] binder: 7568:7569 cannot find target node [ 94.539946][ T7569] binder: 7568:7569 transaction call to 0:0 failed 80/29201/-22, code 0 size 0-24 line 3252 [ 94.544756][ T7569] binder: 7568:7569 got transaction to invalid handle, 1 [ 94.546176][ T7569] binder: 7568:7569 cannot find target node [ 94.547889][ T7569] binder: 7568:7569 transaction async to 0:0 failed 81/29201/-22, code 0 size 0-0 line 3252 [ 94.553235][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.583397][ T7572] loop2: detected capacity change from 0 to 512 [ 94.586388][ T7572] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1077: corrupted in-inode xattr: invalid ea_ino [ 94.586434][ T7572] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.587015][ T7572] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1077: couldn't read orphan inode 15 (err -117) [ 94.587031][ T7572] loop2: lost filesystem error report for type 5 error -117 [ 94.587997][ T7572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.726207][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.053086][ T7585] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1082'. [ 95.137141][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 95.175120][ T7597] loop4: detected capacity change from 0 to 512 [ 95.185395][ T7597] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1087: corrupted in-inode xattr: invalid ea_ino [ 95.185434][ T7597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.185551][ T7597] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1087: couldn't read orphan inode 15 (err -117) [ 95.185565][ T7597] loop4: lost filesystem error report for type 5 error -117 [ 95.186150][ T7597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.202300][ T7597] overlayfs: missing 'lowerdir' [ 95.229813][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.289055][ T866] IPVS: starting estimator thread 0... [ 95.501725][ T7608] IPVS: using max 48 ests per chain, 115200 per kthread [ 95.572093][ T7622] binder: 7620:7622 ioctl 4018620d 0 returned -22 [ 95.573687][ T7622] binder: tried to use weak ref as strong ref [ 95.575061][ T7622] binder: 7620:7622 Acquire 1 refcount change on invalid ref 0 ret -22 [ 95.652044][ T7632] loop2: detected capacity change from 0 to 512 [ 95.682382][ T7632] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1102: corrupted in-inode xattr: invalid ea_ino [ 95.682416][ T7632] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.685524][ T7632] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1102: couldn't read orphan inode 15 (err -117) [ 95.685562][ T7632] loop2: lost filesystem error report for type 5 error -117 [ 95.686346][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 95.686359][ C1] EXT4-fs (loop2): initial error at time 95: ext4_iget_extra_inode:5180: inode 15 [ 95.686379][ C1] EXT4-fs (loop2): last error at time 95: ext4_orphan_get:1404 [ 95.697835][ T7632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.709470][ T7632] overlayfs: missing 'lowerdir' [ 95.761773][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.869626][ T7646] Set syz1 is full, maxelem 65536 reached [ 95.985894][ T7654] binder: 7653:7654 ioctl 4018620d 0 returned -22 [ 96.150107][ T7666] loop2: detected capacity change from 0 to 512 [ 96.185575][ T7666] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1116: corrupted in-inode xattr: invalid ea_ino [ 96.185626][ T7666] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.186193][ T7666] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1116: couldn't read orphan inode 15 (err -117) [ 96.186253][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 96.186279][ C1] EXT4-fs (loop2): initial error at time 96: ext4_iget_extra_inode:5180: inode 15 [ 96.186324][ C1] EXT4-fs (loop2): last error at time 96: ext4_iget_extra_inode:5180: inode 15 [ 96.186389][ T7666] loop2: lost filesystem error report for type 5 error -117 [ 96.189548][ T7666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.197052][ T7666] overlayfs: missing 'lowerdir' [ 96.229990][ T7674] Set syz1 is full, maxelem 65536 reached [ 96.302912][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.481341][ T7691] binder: 7688:7691 ioctl c0306201 0 returned -14 [ 96.967921][ T7697] Set syz1 is full, maxelem 65536 reached [ 96.969641][ T7697] Set syz1 is full, maxelem 65536 reached [ 97.107972][ T7709] loop2: detected capacity change from 0 to 512 [ 97.113245][ T7709] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1132: corrupted in-inode xattr: invalid ea_ino [ 97.116875][ T7709] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.117759][ T7709] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1132: couldn't read orphan inode 15 (err -117) [ 97.121829][ T7709] loop2: lost filesystem error report for type 5 error -117 [ 97.135080][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.162587][ T7709] overlayfs: missing 'workdir' [ 97.205883][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.302728][ T7720] __nla_validate_parse: 4 callbacks suppressed [ 97.305829][ T7720] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1136'. [ 97.309760][ T7719] binder: 7717:7719 ioctl c0306201 0 returned -14 [ 97.549909][ T7737] loop3: detected capacity change from 0 to 512 [ 97.572273][ T7737] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1145: corrupted in-inode xattr: invalid ea_ino [ 97.572306][ T7737] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.576246][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 97.576281][ C0] EXT4-fs (loop3): initial error at time 97: ext4_iget_extra_inode:5180: inode 15 [ 97.576319][ C0] EXT4-fs (loop3): last error at time 97: ext4_iget_extra_inode:5180: inode 15 [ 97.582533][ T7737] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1145: couldn't read orphan inode 15 (err -117) [ 97.582572][ T7737] loop3: lost filesystem error report for type 5 error -117 [ 97.587214][ T7737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.610044][ T7737] overlayfs: missing 'workdir' [ 97.647796][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.721692][ T7746] binder: 7744:7746 ioctl c0306201 0 returned -14 [ 97.799052][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1150'. [ 98.098658][ T7767] loop1: detected capacity change from 0 to 512 [ 98.125035][ T7767] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1158: corrupted in-inode xattr: invalid ea_ino [ 98.125073][ T7767] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.125216][ T7767] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1158: couldn't read orphan inode 15 (err -117) [ 98.125230][ T7767] loop1: lost filesystem error report for type 5 error -117 [ 98.125787][ T7767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.145240][ T7767] overlayfs: missing 'workdir' [ 98.188395][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.738235][ T7785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1165'. [ 98.819857][ T7792] Set syz1 is full, maxelem 65536 reached [ 98.822193][ T7792] Set syz1 is full, maxelem 65536 reached [ 98.859336][ T7797] loop2: detected capacity change from 0 to 512 [ 98.886617][ T7797] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1171: corrupted in-inode xattr: invalid ea_ino [ 98.886659][ T7797] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.889521][ T7797] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1171: couldn't read orphan inode 15 (err -117) [ 98.889563][ T7797] loop2: lost filesystem error report for type 5 error -117 [ 98.891133][ T7797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.025315][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.199801][ T7816] binder_user_error: 14 callbacks suppressed [ 99.199846][ T7816] binder: 7814:7816 got transaction to invalid handle, 1 [ 99.199857][ T7816] binder_debug: 30 callbacks suppressed [ 99.199863][ T7816] binder: 7814:7816 cannot find target node [ 99.199878][ T7816] binder: 7814:7816 transaction call to 0:0 failed 113/29201/-22, code 0 size 0-24 line 3252 [ 99.205217][ T7816] binder: 7814:7816 got transaction to invalid handle, 1 [ 99.205231][ T7816] binder: 7814:7816 cannot find target node [ 99.205244][ T7816] binder: 7814:7816 transaction async to 0:0 failed 114/29201/-22, code 0 size 0-0 line 3252 [ 99.207528][ T866] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.230491][ T7820] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1178'. [ 99.662997][ T7841] loop2: detected capacity change from 0 to 512 [ 99.675749][ T7841] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1188: corrupted in-inode xattr: invalid ea_ino [ 99.675792][ T7841] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.678531][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.678542][ C0] EXT4-fs (loop2): initial error at time 99: ext4_iget_extra_inode:5180: inode 15 [ 99.678560][ C0] EXT4-fs (loop2): last error at time 99: ext4_iget_extra_inode:5180: inode 15 [ 99.679408][ T7841] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1188: couldn't read orphan inode 15 (err -117) [ 99.679430][ T7841] loop2: lost filesystem error report for type 5 error -117 [ 99.690374][ T7841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.778697][ T7846] binder: 7845:7846 got transaction to invalid handle, 1 [ 99.778730][ T7846] binder: 7845:7846 cannot find target node [ 99.781592][ T7846] binder: 7845:7846 transaction call to 0:0 failed 118/29201/-22, code 0 size 0-24 line 3252 [ 99.785123][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.796325][ T7846] binder: 7845:7846 got transaction to invalid handle, 1 [ 99.796357][ T7846] binder: 7845:7846 cannot find target node [ 99.796389][ T7846] binder: 7845:7846 transaction async to 0:0 failed 119/29201/-22, code 0 size 0-0 line 3252 [ 99.809998][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.854445][ T7854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1193'. [ 100.091014][ T7877] loop1: detected capacity change from 0 to 512 [ 100.394188][ T7877] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1202: corrupted in-inode xattr: invalid ea_ino [ 100.397153][ T7877] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.398163][ T7877] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1202: couldn't read orphan inode 15 (err -117) [ 100.403717][ T7877] loop1: lost filesystem error report for type 5 error -117 [ 100.405070][ T7877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.417269][ T7880] binder: BINDER_SET_CONTEXT_MGR already set [ 100.417297][ T7880] binder: 7879:7880 ioctl 4018620d 20004a80 returned -16 [ 100.417483][ T7880] binder: 7879:7880 got transaction to invalid handle, 1 [ 100.417581][ T7880] binder: 7879:7880 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.417592][ T7880] binder: 7880 RLIMIT_NICE not set [ 100.457494][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.836762][ T7892] binder: 7891:7892 got transaction to invalid handle, 1 [ 100.837032][ T7892] binder: 7891:7892 got transaction to invalid handle, 1 [ 101.231041][ T7914] loop0: detected capacity change from 0 to 512 [ 101.256194][ T7914] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1215: corrupted in-inode xattr: invalid ea_ino [ 101.256843][ T7914] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.257060][ T7914] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1215: couldn't read orphan inode 15 (err -117) [ 101.257078][ T7914] loop0: lost filesystem error report for type 5 error -117 [ 101.257614][ T7914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.312343][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.446460][ T7922] binder: 7921:7922 got transaction to invalid handle, 1 [ 102.560241][ T7959] loop1: detected capacity change from 0 to 512 [ 102.578670][ T7959] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1229: corrupted in-inode xattr: invalid ea_ino [ 102.578714][ T7959] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.581353][ T7959] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1229: couldn't read orphan inode 15 (err -117) [ 102.585635][ T7959] loop1: lost filesystem error report for type 5 error -117 [ 102.586465][ T7959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.672423][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.401702][ T8011] syzkaller0: left promiscuous mode [ 103.402784][ T8011] syzkaller0: left allmulticast mode [ 104.069019][ T30] audit: type=1400 audit(104.050:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8050 comm="syz.1.1265" saddr=63.255.255.255 src=20001 daddr=172.20.20.170 [ 104.307849][ T8074] capability: warning: `syz.1.1275' uses deprecated v2 capabilities in a way that may be insecure [ 104.654312][ T8088] binder_user_error: 3 callbacks suppressed [ 104.654608][ T8088] binder: 8085:8088 tried to acquire reference to desc 0, got 1 instead [ 104.654903][ T8088] binder: 8085:8088 ioctl c0306201 0 returned -14 [ 104.655277][ T866] binder_debug: 18 callbacks suppressed [ 104.655285][ T866] binder: undelivered TRANSACTION_COMPLETE [ 104.662386][ T866] binder: undelivered transaction 142, process died. [ 104.687142][ T8090] capability: warning: `syz.1.1283' uses 32-bit capabilities (legacy support in use) [ 106.042337][ T8168] binder: 8167:8168 tried to acquire reference to desc 0, got 1 instead [ 106.042552][ T8168] binder: 8167:8168 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 106.042566][ T8168] binder: 8168 RLIMIT_NICE not set [ 106.604028][ T30] audit: type=1326 audit(106.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.611265][ T30] audit: type=1326 audit(106.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.616773][ T30] audit: type=1326 audit(106.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.621046][ T30] audit: type=1326 audit(106.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.625860][ T30] audit: type=1326 audit(106.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.625901][ T30] audit: type=1326 audit(106.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.625926][ T30] audit: type=1326 audit(106.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.639035][ T30] audit: type=1326 audit(106.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.642890][ T30] audit: type=1326 audit(106.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x7ffc0000 [ 106.723067][ T8193] loop0: detected capacity change from 0 to 128 [ 106.731250][ T8193] FAT-fs (loop0): data area starts beyond volume (1024 > 255) [ 106.731281][ T8193] FAT-fs (loop0): Can't find a valid FAT filesystem [ 106.800427][ T8197] tun0: tun_chr_ioctl cmd 2147767511 [ 106.874335][ T26] binder: undelivered TRANSACTION_COMPLETE [ 106.890948][ T26] binder: undelivered transaction 147, process died. [ 107.231899][ T8227] Set syz1 is full, maxelem 65536 reached [ 107.233367][ T8227] Set syz1 is full, maxelem 65536 reached [ 107.952184][ T40] bond0: (slave bond_slave_0): interface is now down [ 107.952219][ T40] bond0: (slave bond_slave_1): interface is now down [ 108.059273][ T1452] bond0: (slave bond_slave_0): interface is now down [ 108.059306][ T1452] bond0: (slave bond_slave_1): interface is now down [ 108.061351][ T1452] bond0: now running without any active interface! [ 108.106367][ T8230] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.106447][ T8230] block device autoloading is deprecated and will be removed. [ 108.177925][ T8260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.953399][ T8279] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 109.187293][ T8300] loop1: detected capacity change from 0 to 2048 [ 109.254903][ T8300] loop1: p4 < > [ 109.261532][ T8300] EXT4-fs (loop1p4): unable to read superblock [ 109.355103][ T7379] udevd[7379]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 109.565297][ T8331] loop2: detected capacity change from 0 to 256 [ 109.724902][ T8340] xt_connbytes: Forcing CT accounting to be enabled [ 109.944526][ T8359] overlayfs: failed to clone upperpath [ 110.393054][ T8388] bond0: option slaves: unable to set because the bond device is up [ 110.415797][ T8394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.333083][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.452659][ T8454] xt_hashlimit: size too large, truncated to 1048576 [ 111.454281][ T8454] xt_hashlimit: invalid rate [ 111.503044][ T8453] xt_CT: No such helper "snmp_trap" [ 112.076049][ T8494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1463'. [ 112.524973][ T8513] IPVS: Error connecting to the multicast addr [ 112.722547][ T8522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1472'. [ 113.020481][ T8528] loop5: detected capacity change from 0 to 7 [ 113.023439][ T8528] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 113.024778][ T8528] loop5: partition table partially beyond EOD, truncated [ 113.026208][ T8528] loop5: p1 size 487441168 extends beyond EOD, truncated [ 113.089606][ T7379] udevd[7379]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 113.317584][ T8538] syzkaller0: mtu less than device minimum [ 113.610065][ T8553] loop4: detected capacity change from 0 to 7 [ 113.612277][ T8553] loop4: [ 113.613287][ T8553] loop4: partition table partially beyond EOD, truncated [ 114.307489][ T8567] bridge: RTM_NEWNEIGH with unconfigured vlan 2049 on bridge_slave_0 [ 114.761208][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 115.100231][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.100422][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.622687][ T8620] binder: 8619:8620 tried to acquire reference to desc 0, got 1 instead [ 115.624626][ T8620] binder: 8619:8620 got transaction with invalid data ptr [ 115.624676][ T8620] binder: 8619:8620 transaction call to 8619:0 failed 152/29201/-14, code 0 size 0-24 line 3511 [ 115.646537][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.814051][ T8648] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 116.169238][ T8680] overlayfs: failed to clone upperpath [ 116.172328][ T8680] overlayfs: failed to clone upperpath [ 116.536924][ T866] IPVS: starting estimator thread 0... [ 116.626313][ T8695] IPVS: using max 60 ests per chain, 144000 per kthread [ 117.008294][ T866] IPVS: starting estimator thread 0... [ 117.096702][ T8726] IPVS: using max 60 ests per chain, 144000 per kthread [ 117.539526][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 117.541283][ T30] audit: type=1326 audit(117.520:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8750 comm="syz.0.1574" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90979228 code=0x0 [ 117.567564][ T8760] overlayfs: failed to clone upperpath [ 117.837738][ T8782] overlayfs: failed to clone upperpath [ 117.991356][ T8792] fuse: Bad value for 'fd' [ 118.426165][ T8837] loop5: detected capacity change from 0 to 7 [ 118.429319][ T8837] Dev loop5: unable to read RDB block 7 [ 118.429357][ T8837] loop5: unable to read partition table [ 118.429426][ T8837] loop5: partition table beyond EOD, truncated [ 118.429444][ T8837] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.458783][ T8839] binder: 8838:8839 tried to acquire reference to desc 0, got 1 instead [ 118.458932][ T8839] binder: 8838:8839 got transaction with invalid data ptr [ 118.458961][ T8839] binder: 8838:8839 transaction call to 8838:0 failed 157/29201/-14, code 0 size 0-24 line 3511 [ 118.459687][ T866] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.705386][ T8863] binder: 8861:8863 tried to acquire reference to desc 0, got 1 instead [ 118.705617][ T8863] binder: 8861:8863 got transaction with invalid data ptr [ 118.705647][ T8863] binder: 8861:8863 transaction call to 8861:0 failed 162/29201/-14, code 0 size 0-24 line 3511 [ 118.706000][ T866] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.901502][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.907544][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.910521][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.913276][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.919141][ T8881] fuse: Bad value for 'fd' [ 119.111540][ T8899] loop5: detected capacity change from 0 to 7 [ 119.113639][ T8899] Dev loop5: unable to read RDB block 7 [ 119.113677][ T8899] loop5: unable to read partition table [ 119.113737][ T8899] loop5: partition table beyond EOD, truncated [ 119.113754][ T8899] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.195808][ T8904] loop4: detected capacity change from 0 to 7 [ 119.199710][ T8904] Dev loop4: unable to read RDB block 7 [ 119.199743][ T8904] loop4: unable to read partition table [ 119.199806][ T8904] loop4: partition table beyond EOD, truncated [ 119.199816][ T8904] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.255170][ T8908] fuse: Bad value for 'fd' [ 119.373470][ T8910] hub 5-0:1.0: USB hub found [ 119.373627][ T8910] hub 5-0:1.0: 8 ports detected [ 119.781227][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.784418][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.846582][ T30] audit: type=1326 audit(119.820:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2579228 code=0x7ffc0000 [ 119.846627][ T30] audit: type=1326 audit(119.820:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2579228 code=0x7ffc0000 [ 119.861463][ T30] audit: type=1326 audit(119.840:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb2579228 code=0x7ffc0000 [ 119.861505][ T30] audit: type=1326 audit(119.840:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2579228 code=0x7ffc0000 [ 119.861538][ T30] audit: type=1326 audit(119.840:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffffb2579228 code=0x7ffc0000 [ 119.861557][ T30] audit: type=1326 audit(119.840:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.2.1663" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2579228 code=0x7ffc0000 [ 120.136682][ T40] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.136722][ T40] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.136756][ T40] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.136779][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.274364][ T8975] loop5: detected capacity change from 0 to 7 [ 120.275079][ T8975] Dev loop5: unable to read RDB block 7 [ 120.275095][ T8975] loop5: unable to read partition table [ 120.275151][ T8975] loop5: partition table beyond EOD, truncated [ 120.275160][ T8975] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.587105][ T9005] loop5: detected capacity change from 0 to 7 [ 120.587791][ T9005] Dev loop5: unable to read RDB block 7 [ 120.587807][ T9005] loop5: unable to read partition table [ 120.587861][ T9005] loop5: partition table beyond EOD, truncated [ 120.587870][ T9005] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.769057][ T4475] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.927591][ T4475] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 120.930727][ T4475] usb 1-1: config 0 has no interfaces? [ 120.933239][ T4475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.933263][ T4475] usb 1-1: Product: syz [ 120.933281][ T4475] usb 1-1: Manufacturer: syz [ 120.933292][ T4475] usb 1-1: SerialNumber: syz [ 120.944629][ T4475] usb 1-1: config 0 descriptor?? [ 121.013779][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.014019][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.124823][ T9052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.135313][ T9052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.361756][ T9052] syz_tun: left promiscuous mode [ 121.454665][ T8994] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.509000][ T8994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.515658][ T9101] tun0: tun_chr_ioctl cmd 2147767511 [ 121.516463][ T40] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.516514][ T40] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.516539][ T40] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.516560][ T40] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.517638][ T9086] usb 1-1: USB disconnect, device number 2 [ 121.660069][ T9135] overlayfs: failed to resolve './file0/file0': -2 [ 121.683065][ C0] Unknown status report in ack skb [ 121.819324][ T9166] loop5: detected capacity change from 0 to 7 [ 121.825112][ T9166] Dev loop5: unable to read RDB block 7 [ 121.827095][ T9166] loop5: unable to read partition table [ 121.828212][ T9166] loop5: partition table beyond EOD, truncated [ 121.829536][ T9166] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.114271][ T9192] binder: 9190:9192 tried to acquire reference to desc 0, got 1 instead [ 122.114826][ T9192] binder: 9190:9192 got transaction with invalid data ptr [ 122.114853][ T9192] binder: 9190:9192 transaction call to 9190:0 failed 167/29201/-14, code 0 size 0-24 line 3511 [ 122.114977][ T9192] binder: 9190:9192 ioctl c0306201 0 returned -14 [ 122.163418][ T9198] loop5: detected capacity change from 0 to 7 [ 122.163870][ T9198] Dev loop5: unable to read RDB block 7 [ 122.163887][ T9198] loop5: unable to read partition table [ 122.163936][ T9198] loop5: partition table beyond EOD, truncated [ 122.163945][ T9198] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.245355][ T9206] fuse: Bad value for 'fd' [ 122.425114][ T4402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.447929][ T9231] binder: 9230:9231 tried to acquire reference to desc 0, got 1 instead [ 122.449869][ T9231] binder: 9230:9231 got transaction with invalid data ptr [ 122.451249][ T9231] binder: 9230:9231 transaction call to 9230:0 failed 172/29201/-14, code 0 size 0-24 line 3511 [ 122.453596][ T9231] binder: 9230:9231 ioctl c0306201 0 returned -14 [ 122.495291][ T9236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.662980][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.663174][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.674361][ T9261] binder: 9260:9261 tried to acquire reference to desc 0, got 1 instead [ 122.675939][ T9261] binder: 9260:9261 got transaction with invalid data ptr [ 122.678913][ T9261] binder: 9260:9261 transaction call to 9260:0 failed 177/29201/-14, code 0 size 0-24 line 3511 [ 122.719292][ T9267] fuse: Bad value for 'fd' [ 122.854382][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 122.859051][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.860891][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.164169][ T9335] hub 5-0:1.0: USB hub found [ 123.164921][ T9335] hub 5-0:1.0: 8 ports detected [ 123.313186][ T9349] syzkaller0: entered promiscuous mode [ 123.314335][ T9349] syzkaller0: entered allmulticast mode [ 123.327126][ T9349] tipc: Enabled bearer , priority 0 [ 123.328053][ T9349] syzkaller0: mtu less than device minimum [ 123.458466][ T9363] loop4: detected capacity change from 0 to 7 [ 123.459455][ T9363] loop4: [ 123.459466][ T9363] loop4: partition table partially beyond EOD, truncated [ 123.702822][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1786'. [ 124.726840][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'. [ 125.927051][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927106][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.456460][ T9602] device-mapper: ioctl: name not supplied when creating device [ 126.734010][ T9615] overlayfs: failed to resolve './file0/file0': -2 [ 126.962031][ T9639] overlayfs: failed to clone upperpath [ 126.967099][ T9639] overlayfs: failed to resolve './file0/file0': -2 [ 126.999399][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 127.142038][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1862'. [ 127.204561][ T9661] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 127.810185][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.811947][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.902431][ T9672] overlayfs: failed to resolve './file1': -2 [ 127.904573][ T9672] overlayfs: failed to resolve './file1': -2 [ 127.941522][ T9679] fuse: Bad value for 'fd' [ 127.944063][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 128.476249][ T9706] loop5: detected capacity change from 0 to 7 [ 128.476905][ T9706] Dev loop5: unable to read RDB block 7 [ 128.476941][ T9706] loop5: unable to read partition table [ 128.477072][ T9706] loop5: partition table beyond EOD, truncated [ 128.477095][ T9706] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.804716][ T9724] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 128.819328][ T9724] bridge0: port 3(syz_tun) entered disabled state [ 128.819952][ T9724] syz_tun: left allmulticast mode [ 128.820040][ T9724] bridge0: port 3(syz_tun) entered disabled state [ 128.824060][ T9724] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 129.411286][ T9732] binder: 9729:9732 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 130.269344][ T9752] binder: 9751:9752 tried to acquire reference to desc 0, got 1 instead [ 130.272352][ T9752] binder: 9751:9752 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.275444][ T9752] binder: 9752 RLIMIT_NICE not set [ 130.276581][ T9752] binder: 9752 RLIMIT_NICE not set [ 130.279590][ T9752] binder: release 9751:9752 transaction 189 out, still active [ 130.279627][ T9752] binder: release 9751:9752 transaction 182 in, still active [ 130.282737][ T9752] binder: undelivered TRANSACTION_COMPLETE [ 130.284233][ T9752] binder: 9752 RLIMIT_NICE not set [ 130.285665][ T9752] binder: 9752 RLIMIT_NICE not set [ 130.287011][ T9752] binder: 9752:9751 reply target not found [ 130.288241][ T9752] binder: 9751:9752 transaction reply to 0:0 failed 190/29189/0, code 0 size 0-0 line 3184 [ 130.288277][ T9752] binder: send failed reply for transaction 189, target dead [ 130.288300][ T9752] binder: send failed reply for transaction 182 to 9751:9752 [ 130.299337][ T9084] binder: undelivered TRANSACTION_ERROR: 29190 [ 130.299364][ T9084] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.612934][ T9766] bridge0: port 2(bridge_slave_1) entered listening state [ 130.620444][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.906084][ T9792] syzkaller0: entered promiscuous mode [ 130.906124][ T9792] syzkaller0: entered allmulticast mode [ 130.914783][ T9792] tipc: Started in network mode [ 130.914822][ T9792] tipc: Node identity 2a80136be8e7, cluster identity 4711 [ 130.914916][ T9792] tipc: Enabled bearer , priority 0 [ 131.024413][ T9798] loop4: detected capacity change from 0 to 7 [ 131.026589][ T9798] Dev loop4: unable to read RDB block 7 [ 131.026627][ T9798] loop4: AHDI p2 p3 [ 131.026641][ T9798] loop4: partition table partially beyond EOD, truncated [ 131.026733][ T9798] loop4: p3 start 335544320 is beyond EOD, truncated [ 131.153628][ T9808] syzkaller0: entered promiscuous mode [ 131.153667][ T9808] syzkaller0: entered allmulticast mode [ 131.433412][ T9820] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 131.444342][ T9820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.466815][ T9820] bond1: (slave dummy0): making interface the new active one [ 131.468438][ T9820] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 131.474952][ T9820] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 131.474986][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1925'. [ 131.475180][ T9820] dummy0: entered promiscuous mode [ 131.478944][ T9820] bond1: (slave dummy0): Releasing active interface [ 131.593022][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.593217][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.026676][ T4893] tipc: Node number set to 3261535083 [ 132.047215][ T9864] binder: 9863:9864 tried to acquire reference to desc 0, got 1 instead [ 132.047758][ T9864] binder: 9863:9864 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.047771][ T9864] binder: 9864 RLIMIT_NICE not set [ 132.048535][ T9864] binder: release 9863:9864 transaction 202 out, still active [ 132.186186][ T9876] loop5: detected capacity change from 0 to 7 [ 132.187126][ T9876] Dev loop5: unable to read RDB block 7 [ 132.187143][ T9876] loop5: unable to read partition table [ 132.187201][ T9876] loop5: partition table beyond EOD, truncated [ 132.187209][ T9876] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.291707][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 132.935897][ T9898] binder_alloc: 9896: binder_alloc_buf size 1024 failed, no address space [ 132.935968][ T9898] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 132.963537][ T9903] syzkaller0: mtu less than device minimum [ 133.887760][ T9928] loop4: detected capacity change from 0 to 7 [ 133.889181][ T9928] Dev loop4: unable to read RDB block 7 [ 133.889196][ T9928] loop4: AHDI p2 p3 [ 133.889206][ T9928] loop4: partition table partially beyond EOD, truncated [ 133.889471][ T9928] loop4: p3 start 335544320 is beyond EOD, truncated [ 133.939891][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 133.963217][ T9932] binder_alloc: 9931: binder_alloc_buf, no vma [ 134.035816][ T9946] overlayfs: missing 'lowerdir' [ 134.037510][ T9946] overlayfs: failed to clone upperpath [ 134.065887][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.066088][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.193041][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.193427][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.630331][ T9972] overlayfs: missing 'lowerdir' [ 134.652682][ T9974] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 135.111259][T10006] netlink: 'syz.3.1993': attribute type 12 has an invalid length. [ 135.316278][ T9084] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 135.466745][ T9084] usb 1-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 135.468197][ T9084] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.468262][ T9084] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.469019][ T9084] usb 1-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 135.469029][ T9084] usb 1-1: Manufacturer: syz [ 135.475337][ T9084] usb 1-1: config 0 descriptor?? [ 135.478392][ T9084] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 135.789091][T10045] syzkaller0: mtu less than device minimum [ 135.847570][T10048] input: syz0 as /devices/virtual/input/input2 [ 135.852738][T10048] syzkaller0: left promiscuous mode [ 135.852773][T10048] syzkaller0: left allmulticast mode [ 135.882349][T10055] fuse: Bad value for 'fd' [ 135.925784][ T4829] usb 1-1: USB disconnect, device number 3 [ 135.998554][T10070] binder_user_error: 14 callbacks suppressed [ 135.999894][T10070] binder: 10069:10070 tried to acquire reference to desc 0, got 1 instead [ 136.002130][T10070] binder: 10069:10070 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 136.004969][T10070] binder: 10070 RLIMIT_NICE not set [ 136.006127][T10070] binder: 10070 RLIMIT_NICE not set [ 136.007583][T10070] binder_debug: 34 callbacks suppressed [ 136.007608][T10070] binder: release 10069:10070 transaction 241 in, still active [ 136.010156][T10070] binder: send failed reply for transaction 241 to 10069:10070 [ 136.011882][T10070] binder: 10069:10070 got reply transaction with no transaction stack [ 136.013490][T10070] binder: 10069:10070 transaction reply to 0:0 failed 248/29201/-71, code 0 size 0-0 line 3155 [ 136.021241][ T4803] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.369937][T10096] syzkaller0: mtu less than device minimum [ 136.456799][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 136.458704][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 136.462822][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.467246][T10104] bond1: (slave bond0): making interface the new active one [ 136.470651][T10104] bond1: (slave bond0): Enslaving as an active interface with an up link [ 136.474128][T10104] netlink: 'syz.0.2037': attribute type 4 has an invalid length. [ 136.476062][T10104] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2037'. [ 136.481658][T10104] .`: renamed from bond0 (while UP) [ 136.495051][T10107] loop4: detected capacity change from 0 to 7 [ 136.495471][T10107] Dev loop4: unable to read RDB block 7 [ 136.495485][T10107] loop4: AHDI p2 p3 [ 136.495495][T10107] loop4: partition table partially beyond EOD, truncated [ 136.495559][T10107] loop4: p3 start 335544320 is beyond EOD, truncated [ 136.806771][ T4829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.891942][T10133] loop4: detected capacity change from 0 to 7 [ 136.893505][T10133] Dev loop4: unable to read RDB block 7 [ 136.894746][T10133] loop4: AHDI p2 p3 [ 136.895705][T10133] loop4: partition table partially beyond EOD, truncated [ 136.897424][T10133] loop4: p3 start 335544320 is beyond EOD, truncated [ 136.969222][ T4829] usb 1-1: Using ep0 maxpacket: 32 [ 136.969927][ T4829] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 136.970683][ T4829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.970695][ T4829] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.972694][ T4829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.972710][ T4829] usb 1-1: Product: syz [ 136.972719][ T4829] usb 1-1: Manufacturer: syz [ 136.972726][ T4829] usb 1-1: SerialNumber: syz [ 136.974355][ T4829] usb 1-1: config 0 descriptor?? [ 137.124580][T10163] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2061'. [ 137.323979][T10182] syzkaller0: entered promiscuous mode [ 137.324013][T10182] syzkaller0: entered allmulticast mode [ 137.795041][T10200] tipc: Enabling of bearer rejected, already enabled [ 137.797719][T10200] syzkaller0: mtu less than device minimum [ 137.851178][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.854064][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.513741][T10242] syzkaller0: entered promiscuous mode [ 138.513781][T10242] syzkaller0: entered allmulticast mode [ 139.172169][T10277] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 139.204148][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 139.224427][T10279] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3454114026/3454114027 [ 139.224694][T10279] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3454114026/3454114027 [ 139.649046][T10293] syzkaller0: entered promiscuous mode [ 139.650365][T10293] syzkaller0: entered allmulticast mode [ 139.653650][T10293] tipc: Enabled bearer , priority 0 [ 139.659542][T10293] tipc: Resetting bearer [ 139.663560][T10292] tipc: Resetting bearer [ 139.671029][T10292] tipc: Disabling bearer [ 139.747537][T10297] veth1_to_hsr: entered allmulticast mode [ 139.747848][T10297] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 140.037554][ T4829] usb 1-1: USB disconnect, device number 4 [ 140.151424][T10330] kernel profiling enabled (shift: 16) [ 140.431147][T10336] binder: 10335:10336 tried to acquire reference to desc 0, got 1 instead [ 140.433170][T10336] binder: 10335:10336 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 140.433202][T10336] binder: 10336 RLIMIT_NICE not set [ 140.433221][T10336] binder: 10336 RLIMIT_NICE not set [ 140.438421][T10336] binder_alloc: 10335: binder_alloc_buf, no vma [ 140.439831][T10336] binder: cannot allocate buffer: vma cleared, target dead or dying [ 140.439935][T10336] binder: 10335:10336 transaction call to 10335:10336 failed 260/29189/-3, code 0 size 0-0 line 3408 [ 140.443747][T10336] binder: release 10335:10336 transaction 253 in, still active [ 140.443773][T10336] binder: send failed reply for transaction 253 to 10335:10336 [ 140.443806][T10336] binder: undelivered TRANSACTION_ERROR: 29189 [ 140.449359][T10336] binder: 10335:10336 got reply transaction with no transaction stack [ 140.450838][T10336] binder: 10335:10336 transaction reply to 0:0 failed 261/29201/-71, code 0 size 0-0 line 3155 [ 140.726850][T10350] ======================================================= [ 140.726850][T10350] WARNING: The mand mount option has been deprecated and [ 140.726850][T10350] and is ignored by this kernel. Remove the mand [ 140.726850][T10350] option from the mount to silence this warning. [ 140.726850][T10350] ======================================================= [ 140.727113][ T4803] kernel write not supported for file /vcsu (pid: 4803 comm: kworker/1:4) [ 140.897774][T10360] syzkaller0: entered promiscuous mode [ 140.897807][T10360] syzkaller0: entered allmulticast mode [ 141.190403][T10378] tipc: Enabling of bearer rejected, failed to enable media [ 141.722732][T10408] loop4: detected capacity change from 0 to 7 [ 141.735788][T10408] Dev loop4: unable to read RDB block 7 [ 141.735818][T10408] loop4: AHDI p2 p3 [ 141.735838][T10408] loop4: partition table partially beyond EOD, truncated [ 141.735933][T10408] loop4: p3 start 335544320 is beyond EOD, truncated [ 141.782257][T10410] tipc: Enabling of bearer rejected, already enabled [ 141.784662][T10410] syzkaller0: mtu less than device minimum [ 142.002055][T10431] loop4: detected capacity change from 0 to 7 [ 142.003700][T10431] Dev loop4: unable to read RDB block 7 [ 142.005029][T10431] loop4: AHDI p2 p3 [ 142.009111][T10431] loop4: partition table partially beyond EOD, truncated [ 142.010809][T10431] loop4: p3 start 335544320 is beyond EOD, truncated [ 142.051314][T10437] loop1: detected capacity change from 0 to 256 [ 142.058313][T10437] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 142.058350][T10437] FAT-fs (loop1): Filesystem has been set read-only [ 142.059043][T10437] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 142.503013][T10458] loop0: detected capacity change from 0 to 8192 [ 142.507369][T10458] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.842246][T10472] loop3: detected capacity change from 0 to 32768 [ 142.878473][T10472] loop3: p1 p3 < > [ 142.886545][ T9085] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 142.971344][ T7379] udevd[7379]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 142.973704][T10238] udevd[10238]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.980823][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.012413][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 143.038229][ T9085] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 143.040820][ T9085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.040851][ T9085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.040873][ T9085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.042126][ T9085] usb 1-1: config 0 descriptor?? [ 143.089890][T10494] loop4: detected capacity change from 0 to 7 [ 143.090560][T10494] Dev loop4: unable to read RDB block 7 [ 143.090582][T10494] loop4: AHDI p2 p3 [ 143.090592][T10494] loop4: partition table partially beyond EOD, truncated [ 143.090843][T10494] loop4: p3 start 335544320 is beyond EOD, truncated [ 143.457514][ T9085] hid-generic 0003:0925:8066.0002: unbalanced collection at end of report description [ 143.460027][ T9085] hid-generic 0003:0925:8066.0002: probe with driver hid-generic failed with error -22 [ 143.668826][ T9085] usb 1-1: USB disconnect, device number 5 [ 144.074723][T10536] binder: 10535:10536 tried to acquire reference to desc 0, got 1 instead [ 144.075097][T10536] binder: 10535:10536 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 144.075109][T10536] binder: 10536 RLIMIT_NICE not set [ 144.125762][T10537] binder: 10535:10537 got transaction to invalid handle, 3 [ 144.125790][T10537] binder_debug: 1 callbacks suppressed [ 144.125809][T10537] binder: 10535:10537 cannot find target node [ 144.125824][T10537] binder: 10535:10537 transaction call to 0:0 failed 266/29201/-22, code 0 size 0-0 line 3252 [ 144.125967][T10537] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.126111][T10537] binder: 10535:10537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 144.126121][T10537] binder: 10537 RLIMIT_NICE not set [ 144.126232][T10537] binder: 10535:10537 got reply transaction with no transaction stack [ 144.126245][T10537] binder: 10535:10537 transaction reply to 0:0 failed 267/29201/-71, code 0 size 0-0 line 3155 [ 144.191261][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.191662][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.209554][T10545] tipc: Enabling of bearer rejected, already enabled [ 144.210121][T10545] syzkaller0: mtu less than device minimum [ 144.229879][T10547] loop4: detected capacity change from 0 to 7 [ 144.231781][T10547] Dev loop4: unable to read RDB block 7 [ 144.233120][T10547] loop4: AHDI p2 p3 [ 144.234128][T10547] loop4: partition table partially beyond EOD, truncated [ 144.235991][T10547] loop4: p3 start 335544320 is beyond EOD, truncated [ 144.804159][T10558] overlayfs: failed to clone upperpath [ 144.904899][ T4803] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.940306][T10572] tipc: Started in network mode [ 144.940346][T10572] tipc: Node identity aa9840d650cf, cluster identity 4711 [ 144.940478][T10572] tipc: Enabled bearer , priority 0 [ 144.941011][T10572] syzkaller0: mtu less than device minimum [ 145.017345][T10583] loop1: detected capacity change from 0 to 128 [ 145.022208][T10583] FAT-fs (loop1): data area starts beyond volume (1024 > 255) [ 145.022250][T10583] FAT-fs (loop1): Can't find a valid FAT filesystem [ 145.026617][T10585] loop3: detected capacity change from 0 to 256 [ 145.031160][T10585] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 145.031201][T10585] FAT-fs (loop3): Filesystem has been set read-only [ 145.315717][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.315785][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.426300][ T4803] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 145.577142][ T4803] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 145.578018][ T4803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.578032][ T4803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.578047][ T4803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.580380][ T4803] usb 1-1: config 0 descriptor?? [ 145.793586][T10628] fuse: Bad value for 'fd' [ 145.815463][ T1281] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 145.815651][ T1281] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 145.818027][ T1281] bond0: active interface up! [ 145.850686][T10634] fuse: Bad value for 'fd' [ 145.887972][T10638] overlayfs: failed to clone upperpath [ 145.956351][ T4808] tipc: Node number set to 4200022230 [ 145.959502][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 145.960249][T10646] overlayfs: missing 'lowerdir' [ 145.969392][T10648] tipc: Resetting bearer [ 145.980565][T10648] tipc: Disabling bearer [ 145.985703][ T4803] hid-generic 0003:0925:8066.0003: unbalanced collection at end of report description [ 145.987948][ T4803] hid-generic 0003:0925:8066.0003: probe with driver hid-generic failed with error -22 [ 146.188075][ T4808] usb 1-1: USB disconnect, device number 6 [ 146.260418][T10675] overlayfs: missing 'workdir' [ 146.753895][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 146.994545][T10728] overlayfs: failed to clone upperpath [ 147.074367][T10744] overlayfs: failed to clone upperpath [ 147.075973][T10744] overlayfs: failed to clone upperpath [ 147.109259][T10749] fuse: fd is not a fuse device [ 147.225720][T10759] overlayfs: failed to clone upperpath [ 147.360553][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.362434][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.903507][T10806] syzkaller0: left promiscuous mode [ 147.904830][T10806] syzkaller0: left allmulticast mode [ 147.960430][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 147.962278][T10810] tipc: Resetting bearer [ 147.972655][T10810] tipc: Disabling bearer [ 148.074881][T10825] overlayfs: failed to resolve './bus': -2 [ 148.097628][T10827] fuse: Bad value for 'fd' [ 148.121391][T10832] overlayfs: failed to clone upperpath [ 148.142560][T10835] overlayfs: failed to clone upperpath [ 148.311927][T10857] overlayfs: failed to resolve './bus': -2 [ 148.350865][T10861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.352836][T10861] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.356375][ T9086] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 148.358875][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.373064][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.375433][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.378466][T10861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.378499][T10861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.380379][T10861] veth1_vlan: left promiscuous mode [ 148.381507][T10861] veth0_vlan: left promiscuous mode [ 148.382188][T10861] veth0_vlan: entered promiscuous mode [ 148.382831][T10861] veth1_vlan: entered promiscuous mode [ 148.384506][T10861] veth1_macvtap: left promiscuous mode [ 148.384819][T10861] veth0_macvtap: left promiscuous mode [ 148.385302][T10861] veth0_macvtap: entered promiscuous mode [ 148.385609][T10861] veth1_macvtap: entered promiscuous mode [ 148.388631][T10861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.389046][T10861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.389680][T10861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.390067][T10861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.392075][T10861] syz_tun: entered promiscuous mode [ 148.398745][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.398805][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.399699][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.399722][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.426383][ T1281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.426702][ T1452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.426738][ T1452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.436298][ T1281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.518046][ T9086] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 148.518841][ T9086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 148.518859][ T9086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.522055][ T9086] usb 1-1: config 0 descriptor?? [ 148.523069][T10833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.636645][T10880] syzkaller0: entered promiscuous mode [ 148.636673][T10880] syzkaller0: entered allmulticast mode [ 148.927794][ T9086] hid_parser_main: 11 callbacks suppressed [ 148.927830][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927846][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927856][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927866][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927875][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927884][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927892][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927901][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927910][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 148.927919][ T9086] logitech-djreceiver 0003:046D:C513.0004: unknown main item tag 0x0 [ 149.132350][ T9086] usb 1-1: USB disconnect, device number 7 [ 149.274445][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.274507][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.321096][T10891] syzkaller0: entered promiscuous mode [ 149.321127][T10891] syzkaller0: entered allmulticast mode [ 149.322591][T10891] tipc: Enabled bearer , priority 0 [ 149.325398][T10891] tipc: Resetting bearer [ 149.329608][T10890] tipc: Resetting bearer [ 149.338942][T10890] tipc: Disabling bearer [ 149.423785][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 149.675820][T10911] syzkaller0: entered promiscuous mode [ 149.677739][T10911] syzkaller0: entered allmulticast mode [ 150.260946][T10919] syzkaller1: entered promiscuous mode [ 150.260983][T10919] syzkaller1: entered allmulticast mode [ 150.396321][T10946] overlayfs: failed to resolve './cgroup': -2 [ 150.480103][ T30] audit: type=1326 audit(150.460:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10957 comm="syz.4.2390" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c579228 code=0x0 [ 150.512049][T10961] tipc: Enabling of bearer rejected, already enabled [ 150.512665][T10961] syzkaller0: mtu less than device minimum [ 150.666290][ T9086] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.817485][ T9086] usb 1-1: Using ep0 maxpacket: 16 [ 150.817906][ T9086] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 150.818619][ T9086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.818637][ T9086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 150.818648][ T9086] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.818663][ T9086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.819973][ T9086] usb 1-1: config 0 descriptor?? [ 150.959281][T11018] loop1: detected capacity change from 0 to 512 [ 150.960949][T11018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.965208][T11018] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 150.965236][T11018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 150.965354][T11018] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 150.965372][T11018] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 150.974963][T11018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.980142][T11018] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2415: dx entry: limit 65535 != root limit 120 [ 150.983234][T11018] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2415: Corrupt directory, running e2fsck is recommended [ 150.997596][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.065599][T11026] loop1: detected capacity change from 0 to 256 [ 151.072619][T11026] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 151.075156][T11026] FAT-fs (loop1): Filesystem has been set read-only [ 151.203976][T11028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.207518][T11028] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.209804][T11028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.224082][T11028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.224703][T11028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.229825][T11028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.231951][T11028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.235359][ T9086] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 151.238390][T11028] veth1_vlan: left promiscuous mode [ 151.239846][T11028] veth0_vlan: left promiscuous mode [ 151.240315][T11028] veth0_vlan: entered promiscuous mode [ 151.243268][T11028] veth1_vlan: entered promiscuous mode [ 151.246992][T11028] veth1_macvtap: left promiscuous mode [ 151.248587][T11028] veth0_macvtap: left promiscuous mode [ 151.250149][T11028] veth0_macvtap: entered promiscuous mode [ 151.251737][T11028] veth1_macvtap: entered promiscuous mode [ 151.254808][T11028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.257173][T11028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.259953][T11028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.262306][T11028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.267127][T11028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.269173][T11028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.274752][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.274800][ T15] bridge0: port 1(bridge_slave_0) entered listening state [ 151.275277][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.275304][ T15] bridge0: port 2(bridge_slave_1) entered listening state [ 151.307138][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.307182][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.307214][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.307238][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.400204][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.400410][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.425009][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2429'. [ 152.533749][ T9086] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 152.533787][ T9086] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 152.533813][ T9086] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 152.544687][ T9086] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 152.544771][ T9086] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 152.554964][ T9086] usb 1-1: USB disconnect, device number 8 [ 152.649283][T11073] fuse: fd is not a fuse device [ 152.713932][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 152.794669][T11095] overlayfs: failed to resolve 'work': -2 [ 152.798866][T11095] overlayfs: failed to resolve 'work': -2 [ 152.803704][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.804416][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.911883][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 152.973589][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.982806][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.053484][T11123] overlayfs: failed to resolve 'upper': -2 [ 153.055375][T11123] overlayfs: failed to resolve 'upper': -2 [ 153.167846][T11136] fuse: fd is not a fuse device [ 153.287036][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 153.287309][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 153.626726][ T4725] Bluetooth: hci1: command 0x0406 tx timeout [ 153.627122][ T4725] Bluetooth: hci3: command 0x0406 tx timeout [ 153.630407][ T4718] Bluetooth: hci2: command 0x0406 tx timeout [ 154.095834][T11155] loop2: detected capacity change from 0 to 256 [ 154.110718][T11155] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.114797][T11155] FAT-fs (loop2): Filesystem has been set read-only [ 154.117497][T11155] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.133839][ T4808] binder: undelivered freeze notification, 0000000000000000 [ 155.016305][ T4808] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 155.176697][ T4808] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 155.180041][ T4808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.182320][ T4808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.189070][ T4808] usb 1-1: config 0 descriptor?? [ 155.291534][T11213] loop2: detected capacity change from 0 to 512 [ 155.301843][T11213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.310607][T11213] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 155.333352][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.350817][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.351163][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.366271][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.366296][ C1] bridge0: topology change detected, propagating [ 155.366440][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.366455][ C1] bridge0: topology change detected, propagating [ 155.418839][T11227] overlayfs: failed to clone upperpath [ 155.420606][T11227] overlayfs: failed to clone upperpath [ 155.716659][ T4808] hid_parser_main: 25 callbacks suppressed [ 155.718190][ T4808] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 155.718211][ T4808] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 155.718222][ T4808] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 155.718232][ T4808] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 155.718241][ T4808] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 155.718250][ T4808] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 155.722161][T11232] fuse: fd is not a fuse device [ 155.729496][ T4808] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID vef.fd Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 155.759052][T11237] overlayfs: failed to clone lowerpath [ 155.835119][T11245] overlayfs: failed to resolve 'lower': -2 [ 155.838304][T11245] overlayfs: failed to resolve 'lower': -2 [ 155.883133][T11251] overlayfs: failed to clone upperpath [ 155.884899][T11251] overlayfs: failed to clone upperpath [ 155.916025][ T9085] usb 1-1: USB disconnect, device number 9 [ 155.953992][T11259] netlink: 'syz.3.2514': attribute type 4 has an invalid length. [ 155.981728][T11261] netlink: 5412 bytes leftover after parsing attributes in process `syz.3.2515'. [ 156.160404][T11268] loop4: detected capacity change from 0 to 7 [ 156.162642][T11268] Dev loop4: unable to read RDB block 7 [ 156.164128][T11268] loop4: AHDI p2 [ 156.165061][T11268] loop4: partition table partially beyond EOD, truncated [ 156.211056][T11272] overlayfs: failed to resolve 'lower': -2 [ 156.213555][T11272] overlayfs: failed to resolve 'lower': -2 [ 156.272071][T11276] veth0_to_bond: entered promiscuous mode [ 156.272777][T11276] macsec2: entered promiscuous mode [ 156.272867][T11276] macsec2: entered allmulticast mode [ 156.272875][T11276] veth0_to_bond: entered allmulticast mode [ 156.293349][T11278] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 156.350793][T11286] loop1: detected capacity change from 0 to 128 [ 156.419595][T11296] overlayfs: failed to resolve 'lower': -2 [ 156.422507][T11296] overlayfs: failed to resolve 'lower': -2 [ 156.443292][T11298] loop2: detected capacity change from 0 to 128 [ 156.454489][T11298] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.454532][T11298] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 156.454544][T11298] FAT-fs (loop2): Can't find a valid FAT filesystem [ 156.486996][T11304] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 156.528181][T11310] loop1: detected capacity change from 0 to 512 [ 156.550736][T11310] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.552517][T11310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 156.554194][T11310] System zones: 0-1, 15-15, 18-18, 34-34 [ 156.556002][T11310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.557676][T11310] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 156.559677][T11310] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 156.562507][T11310] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 156.564051][T11310] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2538: bad orphan inode 16 [ 156.565369][T11310] loop1: lost filesystem error report for type 5 error -117 [ 156.565592][T11310] ext4_test_bit(bit=15, block=18) = 1 [ 156.565604][T11310] is_bad_inode(inode)=0 [ 156.565611][T11310] NEXT_ORPHAN(inode)=0 [ 156.565616][T11310] max_ino=32 [ 156.565620][T11310] i_nlink=2 [ 156.566159][T11310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.582304][T11310] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 156.589544][T11317] loop2: detected capacity change from 0 to 512 [ 156.591491][T11317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.598228][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.607553][T11317] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 156.607618][T11317] EXT4-fs (loop2): 1 truncate cleaned up [ 156.608057][T11317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.639582][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.660323][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2542'. [ 156.720746][T11328] overlayfs: failed to resolve 'upper': -2 [ 156.722778][T11328] overlayfs: failed to resolve 'upper': -2 [ 156.760046][T11335] overlayfs: failed to clone upperpath [ 156.762609][T11335] overlayfs: failed to clone upperpath [ 156.830089][T11345] Boot memory [50000000 58000000] offlining attempted [ 156.831787][T11345] Boot memory [48000000 50000000] offlining attempted [ 157.348929][T11348] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.349101][T11348] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.410877][T11348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.412266][T11348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.567826][T11363] overlayfs: failed to resolve './bus': -2 [ 157.570369][T11348] tipc: Resetting bearer [ 157.578851][ T1281] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.578910][ T1281] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.578937][ T1281] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.578955][ T1281] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.638693][T11368] overlayfs: failed to clone upperpath [ 157.642946][T11368] overlayfs: failed to clone upperpath [ 157.648060][T11361] 0: reclassify loop, rule prio 0, protocol 03 [ 157.665971][T11370] overlayfs: failed to clone upperpath [ 157.706660][T11372] fuse: Bad value for 'fd' [ 157.789485][T11380] loop1: detected capacity change from 0 to 4096 [ 157.808030][T11388] fuse: fd is not a fuse device [ 157.812738][T11380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.841961][T11391] overlayfs: failed to resolve './bus': -2 [ 158.578154][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.702508][T11403] fuse: Bad value for 'fd' [ 158.798677][T11406] tipc: Enabling of bearer rejected, failed to enable media [ 158.880054][T11422] loop2: detected capacity change from 0 to 1024 [ 158.947650][T11422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.949020][T11422] EXT4-fs: inline encryption not supported [ 158.952250][T11422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.976894][T11422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.220344][ T9086] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.247056][T11422] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2582: lblock 0 mapped to illegal pblock 0 (length 1) [ 159.248185][T11422] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 159.248203][T11422] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.248203][T11422] [ 159.251111][T11422] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2582: bg 0: block 112: padding at end of block bitmap is not set [ 159.257537][T11422] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 159.257581][T11422] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.257581][T11422] [ 159.257598][T11422] EXT4-fs (loop2): Total free blocks count 0 [ 159.257608][T11422] EXT4-fs (loop2): Free/Dirty block details [ 159.257620][T11422] EXT4-fs (loop2): free_blocks=0 [ 159.257632][T11422] EXT4-fs (loop2): dirty_blocks=64 [ 159.257639][T11422] EXT4-fs (loop2): Block reservation details [ 159.284679][ T4726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.286157][ T4720] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 159.291139][ T4726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.293177][ T4726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.301002][ T4726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.302967][ T4726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.350751][ T8351] syz_tun (unregistering): left promiscuous mode [ 159.377864][ T9086] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.379864][ T9086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.379882][ T9086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.379893][ T9086] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.379910][ T9086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.392174][ T9086] usb 1-1: config 0 descriptor?? [ 159.421868][T11443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.423860][T11443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.500706][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.503310][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.503423][T11429] bridge_slave_0: entered allmulticast mode [ 159.506692][T11429] bridge_slave_0: entered promiscuous mode [ 159.507549][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.507596][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.507660][T11429] bridge_slave_1: entered allmulticast mode [ 159.508135][T11429] bridge_slave_1: entered promiscuous mode [ 159.521468][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.522729][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.533660][T11429] team0: Port device team_slave_0 added [ 159.534532][T11429] team0: Port device team_slave_1 added [ 159.542008][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.542034][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.542050][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.542679][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.542685][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.542696][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.555103][T11429] hsr_slave_0: entered promiscuous mode [ 159.555449][T11429] hsr_slave_1: entered promiscuous mode [ 159.555697][T11429] debugfs: 'hsr0' already exists in 'hsr' [ 159.555708][T11429] Cannot create hsr debugfs directory [ 159.600555][T11459] tipc: Enabling of bearer rejected, failed to enable media [ 159.622574][T11429] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.687477][T11429] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.699204][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 159.788869][T11429] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.800460][ T9086] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.802364][ T9086] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 159.804339][ T9086] plantronics 0003:047F:FFFF.0007: parse failed [ 159.805478][ T9086] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 160.080886][ T9086] usb 1-1: USB disconnect, device number 10 [ 160.108435][T11429] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.122216][T11489] tipc: Enabling of bearer rejected, already enabled [ 160.124236][T11489] syzkaller0: mtu less than device minimum [ 160.170360][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'. [ 160.171074][T11495] tipc: Resetting bearer [ 160.185584][T11495] tipc: Disabling bearer [ 160.207470][T11429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.214974][T11429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.215546][T11429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.219638][T11429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.221665][T11429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.224167][T11429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.225770][T11429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.233950][T11429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.267593][T11511] loop1: detected capacity change from 0 to 512 [ 160.273339][T11511] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2606: iget: bad i_size value: 38620345925642 [ 160.276944][T11511] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.277249][T11511] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2606: couldn't read orphan inode 15 (err -117) [ 160.281107][T11511] loop1: lost filesystem error report for type 5 error -117 [ 160.282171][T11511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.338567][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.365130][T11518] loop1: detected capacity change from 0 to 512 [ 160.365492][T11518] EXT4-fs: inline encryption not supported [ 160.372695][T11429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.374444][T11518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.374469][T11518] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 160.383510][T11429] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.393145][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.393198][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.401334][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.401380][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.413396][T11520] loop2: detected capacity change from 0 to 512 [ 160.447429][T11520] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2609: bg 0: block 5: invalid block bitmap [ 160.447471][T11520] loop2: lost filesystem error report for type 5 error -117 [ 160.452990][T11520] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 160.453413][T11520] loop2: lost filesystem error report for type 5 error -117 [ 160.453956][T11520] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2609: invalid indirect mapped block 3 (level 2) [ 160.453982][T11520] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.454690][T11520] EXT4-fs (loop2): 1 orphan inode deleted [ 160.454705][T11520] EXT4-fs (loop2): 1 truncate cleaned up [ 160.455153][T11520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.486348][ T4722] Bluetooth: hci5: command tx timeout [ 161.496089][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2613'. [ 161.562296][T11429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.617507][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 161.697795][ T3932] bond0: (slave bond_slave_0): interface is now down [ 161.697827][ T3932] bond0: (slave bond_slave_1): interface is now down [ 161.705344][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.708509][T11560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.826674][T11429] veth0_vlan: entered promiscuous mode [ 161.830155][T11429] veth1_vlan: entered promiscuous mode [ 161.837730][ T12] bond0: (slave bond_slave_0): interface is now down [ 161.837753][ T12] bond0: (slave bond_slave_1): interface is now down [ 161.839458][ T12] bond0: now running without any active interface! [ 161.855617][T11429] veth0_macvtap: entered promiscuous mode [ 161.870326][T11429] veth1_macvtap: entered promiscuous mode [ 161.873613][T11429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.874683][T11429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.899010][ T3736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.899093][ T3736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.899154][ T3736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.927750][ T1195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.948063][T11586] Boot memory [48000000 50000000] offlining attempted [ 161.951553][T11586] Boot memory [48000000 50000000] offlining attempted [ 161.953943][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.953974][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.965458][ T3736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.965482][ T3736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.981674][T11593] loop1: detected capacity change from 0 to 256 [ 162.054992][T11604] loop4: detected capacity change from 0 to 256 [ 162.066903][T11604] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 162.066930][T11604] FAT-fs (loop4): Can't find a valid FAT filesystem [ 162.151920][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.152116][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.202239][T11626] loop2: detected capacity change from 0 to 256 [ 162.205639][T11626] FAT-fs (loop2): Directory bread(block 1285) failed [ 162.207969][T11626] FAT-fs (loop2): Directory bread(block 1286) failed [ 162.208009][T11626] FAT-fs (loop2): Directory bread(block 1287) failed [ 162.208074][T11626] FAT-fs (loop2): Directory bread(block 1288) failed [ 162.213886][T11626] FAT-fs (loop2): Directory bread(block 1285) failed [ 162.214716][T11624] syz_tun (unregistering): left allmulticast mode [ 162.214733][T11624] syz_tun (unregistering): left promiscuous mode [ 162.214761][T11624] bridge0: port 3(syz_tun) entered disabled state [ 162.219381][T11626] FAT-fs (loop2): Directory bread(block 1286) failed [ 162.219425][T11626] FAT-fs (loop2): Directory bread(block 1287) failed [ 162.219463][T11626] FAT-fs (loop2): Directory bread(block 1288) failed [ 162.219498][T11626] FAT-fs (loop2): Directory bread(block 1285) failed [ 162.219517][T11626] FAT-fs (loop2): Directory bread(block 1286) failed [ 162.257659][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 162.391025][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2653'. [ 162.455921][T11651] Boot memory [48000000 50000000] offlining attempted [ 162.508140][T11663] Illegal XDP return value 4095308084 on prog (id 67) dev syz_tun, expect packet loss! [ 162.629835][T11677] fuse: fd is not a fuse device [ 162.645443][T11680] fuse: fd is not a fuse device [ 163.530459][ T4722] Bluetooth: hci5: command tx timeout [ 163.542126][T11686] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 163.545563][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2669'. [ 163.547490][T11686] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 163.547523][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2669'. [ 163.547572][T11686] iwpm_send_hello: Unable to send a nlmsg [ 163.708539][T11702] loop2: detected capacity change from 0 to 512 [ 163.710184][T11702] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.791825][T11712] overlayfs: failed to clone upperpath [ 163.800505][T11712] overlayfs: failed to clone upperpath [ 164.156530][T11747] overlayfs: missing 'lowerdir' [ 164.526496][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 164.796871][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 164.826151][T11803] overlayfs: failed to clone upperpath [ 165.059865][T11844] overlayfs: failed to clone upperpath [ 165.176711][T11861] overlayfs: failed to clone upperpath [ 165.178689][T11861] overlayfs: failed to clone upperpath [ 165.359823][T11876] overlayfs: failed to clone upperpath [ 165.606603][ T4722] Bluetooth: hci5: command tx timeout [ 165.771032][T11922] syzkaller0: entered promiscuous mode [ 165.772313][T11922] syzkaller0: entered allmulticast mode [ 165.777243][T11919] loop1: detected capacity change from 0 to 4096 [ 165.781156][T11919] EXT4-fs: inline encryption not supported [ 165.782525][T11919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.782549][T11919] EXT4-fs (loop1): Test dummy encryption mode enabled [ 165.783267][T11919] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 165.783301][T11919] System zones: 0-5 [ 165.795926][T11919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.808671][T11919] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 165.829309][T11919] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 165.898060][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.090101][T11942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2773'. [ 166.213464][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.216053][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.687099][ T4722] Bluetooth: hci5: command tx timeout [ 167.706374][ T9084] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.832220][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 167.886320][ T9084] usb 1-1: Using ep0 maxpacket: 8 [ 167.886777][ T9084] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 167.887589][ T9084] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.887604][ T9084] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.887622][ T9084] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 167.887653][ T9084] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 167.887673][ T9084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.892270][ T9084] hub 1-1:1.0: bad descriptor, ignoring hub [ 167.892288][ T9084] hub 1-1:1.0: probe with driver hub failed with error -5 [ 167.892578][ T9084] cdc_wdm 1-1:1.0: skipping garbage [ 167.892587][ T9084] cdc_wdm 1-1:1.0: skipping garbage [ 167.898170][ T9084] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.898181][ T9084] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.929315][ T4722] Bluetooth: hci3: unexpected event 0x10 length: 4 > 1 [ 167.930024][ T4722] Bluetooth: hci3: hardware error 0x00 [ 167.975178][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2800'. [ 168.041257][T12017] ip6erspan0: entered allmulticast mode [ 168.152666][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 168.175804][T12030] device-mapper: ioctl: Unable to rename non-existent device, to  [ 168.235067][T12034] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3362207274/3362207275 [ 168.235243][T12034] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3362207274/3362207275 [ 168.286783][T12040] loop4: detected capacity change from 0 to 7 [ 168.288001][ T9086] usb 1-1: USB disconnect, device number 11 [ 168.290416][T12040] Dev loop4: unable to read RDB block 7 [ 168.290452][T12040] loop4: AHDI p2 p3 [ 168.290462][T12040] loop4: partition table partially beyond EOD, truncated [ 168.290528][T12040] loop4: p3 start 335544320 is beyond EOD, truncated [ 168.307845][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'. [ 168.371996][T12051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.372207][T12051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.856669][T12112] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 169.873797][T12114] overlayfs: missing 'workdir' [ 170.036367][ T4722] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 171.319269][T12150] lo: entered allmulticast mode [ 171.436656][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 171.489279][T12171] loop2: detected capacity change from 0 to 512 [ 171.502652][T12171] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.533612][T12171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.562880][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.686432][ T9084] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.710092][T12188] loop2: detected capacity change from 0 to 2048 [ 171.730064][T12188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.749439][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.846487][ T9084] usb 1-1: Using ep0 maxpacket: 8 [ 171.846933][ T9084] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.847631][ T9084] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 171.847650][ T9084] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.847661][ T9084] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.847672][ T9084] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.847682][ T9084] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.847698][ T9084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.925795][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 172.598829][ T9084] usb 1-1: GET_CAPABILITIES returned 0 [ 172.598870][ T9084] usbtmc 1-1:16.0: can't read capabilities [ 172.762618][T12224] loop2: detected capacity change from 0 to 128 [ 172.805429][ T4808] usb 1-1: USB disconnect, device number 12 [ 172.954926][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2885'. [ 173.143052][T12246] xfrm0: entered allmulticast mode [ 173.971080][ T4726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.973123][ T4726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.984377][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.989615][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.991409][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.011464][T12263] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 174.011498][T12263] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.102480][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'. [ 174.152683][T11468] bridge0: port 3(syz_tun) entered disabled state [ 174.163712][T11468] syz_tun (unregistering): left allmulticast mode [ 174.163742][T11468] syz_tun (unregistering): left promiscuous mode [ 174.163766][T11468] bridge0: port 3(syz_tun) entered disabled state [ 174.264469][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.264548][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.264621][T12260] bridge_slave_0: entered allmulticast mode [ 174.265905][T12260] bridge_slave_0: entered promiscuous mode [ 174.268934][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.268977][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.269035][T12260] bridge_slave_1: entered allmulticast mode [ 174.270621][T12260] bridge_slave_1: entered promiscuous mode [ 174.287852][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.290782][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.323361][T12260] team0: Port device team_slave_0 added [ 174.324144][T12260] team0: Port device team_slave_1 added [ 174.353134][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.353162][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.353179][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.353702][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.353710][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.353727][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.354801][T12298] overlayfs: failed to clone upperpath [ 174.393013][T12260] hsr_slave_0: entered promiscuous mode [ 174.394397][T12260] hsr_slave_1: entered promiscuous mode [ 174.395772][T12260] debugfs: 'hsr0' already exists in 'hsr' [ 174.397186][T12260] Cannot create hsr debugfs directory [ 174.421970][T12301] loop0: detected capacity change from 0 to 2048 [ 174.436189][T12303] overlayfs: failed to clone upperpath [ 174.453015][T12301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.550111][T12260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.552684][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 174.669435][T12260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.980612][T12260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.019171][ T4803] IPVS: starting estimator thread 0... [ 175.063925][T12260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.106417][T12334] IPVS: using max 60 ests per chain, 144000 per kthread [ 175.135214][T12339] overlayfs: failed to clone upperpath [ 175.258518][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.051644][ T4722] Bluetooth: hci0: command tx timeout [ 176.144354][T12260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.160507][T12260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.168354][T12260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.173236][T12260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.182674][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 176.207850][T12260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.211200][T12260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.213086][T12260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.220020][T12260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.329701][T12260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.334282][T12260] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.339791][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.339842][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.359032][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.359074][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.365657][T12260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.365690][T12260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.390277][ T9085] IPVS: starting estimator thread 0... [ 176.496930][T12378] IPVS: using max 60 ests per chain, 144000 per kthread [ 176.529035][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 176.530976][ T4722] Bluetooth: hci2: unexpected subevent 0x06 length: 232 > 10 [ 176.552007][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.582263][T12260] veth0_vlan: entered promiscuous mode [ 176.587253][T12260] veth1_vlan: entered promiscuous mode [ 176.594008][T12260] veth0_macvtap: entered promiscuous mode [ 176.598167][T12260] veth1_macvtap: entered promiscuous mode [ 176.612742][T12260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.619681][T12260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.628278][ T1187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.628334][ T1187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.628360][ T1187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.628377][ T1187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.632259][T12415] overlayfs: failed to clone upperpath [ 176.656983][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.657013][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.669148][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.669175][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.747234][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 176.749319][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 177.510408][T12452] overlayfs: failed to clone upperpath [ 177.701768][T12457] dlm: plock device version mismatch: kernel (1.2.0), user (1.1795293184.7105641) [ 177.754436][T12469] syzkaller0: entered promiscuous mode [ 177.754465][T12469] syzkaller0: entered allmulticast mode [ 178.087469][ T4722] Bluetooth: hci0: command tx timeout [ 178.482166][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 178.49061 ** replaying previous printk message ** [ 178.490617][T12502] ------------[ cut here ]------------ [ 178.490647][T12502] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 178.490846][T12502] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x480/0x4ac, CPU#0: syz.3.2969/12502 [ 178.495415][T12502] Modules linked in: [ 178.496098][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.3.2969 Not tainted syzkaller #0 PREEMPT [ 178.497625][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 178.499335][T12502] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 178.500652][T12502] pc : netdev_queue_get_dma_dev+0x480/0x4ac [ 178.501654][T12502] lr : netdev_queue_get_dma_dev+0x480/0x4ac [ 178.502683][T12502] sp : ffff800093dd7880 [ 178.503387][T12502] x29: ffff800093dd7880 x28: 1fffe0001adcc015 x27: dfff800000000000 [ 178.504796][T12502] x26: ffff7000127baf1c x25: 0000000002000000 x24: 0000000000000000 [ 178.506213][T12502] x23: dfff800000000000 x22: ffff80008a19d000 x21: 0000000000000000 [ 178.507656][T12502] x20: ffff0000f9944000 x19: 0000000002000000 x18: 00000000ffffffff [ 178.509097][T12502] x17: ffff80008a7d6000 x16: 0000000000000003 x15: ffff80008a35fda0 [ 178.510476][T12502] x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000 [ 178.511818][T12502] x11: 0000000000000000 x10: 0000000000080000 x9 : 4b0c68552df57c00 [ 178.513181][T12502] x8 : 4b0c68552df57c00 x7 : ffff80008048c5b8 x6 : 0000000000000000 [ 178.514608][T12502] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 178.516014][T12502] x2 : 0000000100000000 x1 : ffff0000d0353a80 x0 : 0000000000000001 [ 178.517417][T12502] Call trace: [ 178.517975][T12502] netdev_queue_get_dma_dev+0x480/0x4ac (P) [ 178.518984][T12502] zcrx_register_netdev+0x1b8/0x460 [ 178.519862][T12502] io_register_zcrx+0x7ac/0xa00 [ 178.520680][T12502] __arm64_sys_io_uring_register+0x7f0/0x13fc [ 178.521682][T12502] invoke_syscall+0x98/0x244 [ 178.522466][T12502] el0_svc_common+0xec/0x23c [ 178.523234][T12502] do_el0_svc+0x4c/0x5c [ 178.523984][T12502] el0_svc+0x64/0x260 [ 178.524683][T12502] el0t_64_sync_handler+0x44/0x104 [ 178.525545][T12502] el0t_64_sync+0x198/0x19c [ 178.526310][T12502] irq event stamp: 462 [ 178.527011][T12502] hardirqs last enabled at (461): [] vprintk_store+0x924/0xb94 [ 178.528561][T12502] hardirqs last disabled at (462): [] el1_brk64+0x20/0x54 [ 178.530000][T12502] softirqs last enabled at (432): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 178.531691][T12502] softirqs last disabled at (430): [] fpsimd_restore_current_state+0x44/0x9c8 [ 178.533375][T12502] ---[ end trace 0000000000000000 ]--- [ 178.566334][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 180.167045][ T4722] Bluetooth: hci0: command tx timeout [ 182.246628][ T4722] Bluetooth: hci0: command tx timeout [ 182.806283][ T4722] Bluetooth: hci1: command 0x0406 tx timeout [ 187.367325][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.368691][ T1596] ieee802154 phy1 wpan1: encryption failed: -22