last executing test programs: 3.771803939s ago: executing program 2 (id=1183): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, 0x0, 0xd}, 0x20000810) 3.720729102s ago: executing program 2 (id=1186): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f61000194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200006056db0000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef988b0411b1bc0ba9bc28d0eb6a73ad76be9facd030082b6a3cc2040e84b398d279e50535b6557df8a633cfc76b057f89b74640476e973c21df5435e3b81aaba048fa4264d4c155100"/180, 0xb4}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.589984639s ago: executing program 2 (id=1189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff0200000000000000000000000000010420"], 0x0) 3.393305291s ago: executing program 2 (id=1193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.097252438s ago: executing program 2 (id=1197): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = dup(r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = msgget(0x1, 0x200) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f0000001180)=""/150) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xffff, 0x0) sendmmsg$unix(r8, &(0x7f0000008300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="cd", 0x1}], 0x1}}], 0x2, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) write$binfmt_misc(r4, &(0x7f0000000000)="840fca35ef850f634e04841fa8ee638e4261538fb96e32ff0a358af91853977296e0ce7189c5c5ac15692eebf741f8c082db0b55b81b7a560bbed8fbbd73915f08e2b2bb8b272c5bf078ce18b758be4440699ba7c4757798e05deec56cef114906feb3770a1bc65895f9f19dc5d7a391c87e687eb935e9fd7c6cdcf36682d3b5494db74512852e7181aabf54704be3c62ea273d534fb5d03510c4afb9a403e37a0abb100f92df773364816495cc2443c414ac6ea6955f81b7709f84fee87f5b85aee62a4340d3996b7a6a990a68338bfbaecaf8cd38c27e61386aad1ed1507ca48b4cd72549df751b6888d54ca186dad5e383743bcd11f681aa6ccbf6f2afdf87706853168aadec62dcce656e6c5c1f2afb25cd4cbd091700db260746b48f237db2889ac3ac4d9f4f433a5021d05a76d71753d392ef64142d070c043f3cc001bcf467a0db235d9e323b670944b55c5951861b6c8e762cbcf5013b691712a177cfaa0cca7bea7c364f3971cba0e1615940b2945a14aa6062a7dd77822c5ad2fc4e59dd554ea6f9c40ac0346863a18884be786698ae4d02895d8118361d743e7a7498e32203d8579e997bb77868ed3d681483ed7a2ecf781cc2a74ce63ae7709d14bc628370a2f9460ba34baa6aeb804002445d1fed84831d8cbd43a643459824702bd0b641d804989e32bb40c95c13aa6b4f0a5a29ec42a0ed2935a1f3b407833803c949f20a4fea671d3b0b9c577bb9921331a022a7a163e5e4efe9677278c2c63f0e7678390f48cb9012b0508affa95db7f84c6107ee6313347fb1e80d52c7cd6dd358037246deff0a68991c7d2571ce15a45c4f9372ca34f8b002145c89749a5e297a64ef7c61ad4d4325e80d5b959de4e2f8515f0a7ce9a7d91350da688ac74d99ace660f521b93acc37063be6eb2a0f1f28e6f64c5a8ff84fe04facc78912e9a42f4b2112c190ea7293aba95882711e535f695b51d5a478581e3769f1ddd7ffbb6e1beb34f17c61c11943a5109d250b444e26df32d11cc96272028816d4e4edc8be48407b9b2838b28abb0171fb1ea759240607b839a962e264e4dd3f8da5265f19ed096376157e9dcb6e1807cba7d4726fef418c075b069239e41ba30168783d84f106311cde507dfa419b0e74618137dbbf4ab77071263d2191a10794349a8f2d86308cf9cb9c09cc536ed838bb50d20f152568d8796bd65f8bbc4cbce22678bae6fd8fe5a6f35e2e7e707bb47fb01b76276e067d3cc35499da7720c948167fa694aefe59b024080ae3bb514f922b213c8c5a852238c54f0b73c64da3ef81bfea5c34948e85e6f194959bf6190f2e4622a577ee17c2cc5389b65d21283c8dd8cf49e591911f1633f8ffa8b342806c49c0088c4decdee3e3ed7426a16ef6f25082f510934d914131d6239b1cd55d5b76770b5ac9d91c406ec00ee98bf693f1c95d0c5da641a550eb5b521245540192908de96526262d5264c8a2eeb51c881a57f312e89787aa96a10d15746bb555c5982b197413cdca1206c13fd9bf7e90423789b3b3d355b33c77068da55b62e34ef4b919d8e17a22f13e0d805af2003c74aad419651fdfe5a47762a70775dec023d69b52985175ca86dcc590f73331e37e3683bf36a6c21d5f73a514da208e714062d0ae8302018e2fd5e00846831ebd657324bec329743c915e5b7899380bc983ee0f8ddf0ec98745f915f12f10906738a8ab1221d98b5515f24b8701e2bf0d1f763a1e54527b48e82994d368237a802a0930310dbdf717ab1afa296b11cb7e062b4789416b2345e1217172eb242fbef18ac1a81e1c5ab39ee40a69677c0d14e74132a85e334aba0d6f22b543e01d43cd00bc691e569287ee6ba87dc37bda27cc587ec255b9a4510d18b3952c5940931e83d06b851f4bf67cacb1d2b1d4ce15e9763d916bed8cb895915bd3bd2300894258d1c27d4f06e8b0bcac25882699e4bee49a15956c7ad687de6b8e4a08ee570da8c79183a52fd648712e509f6ba4c32b59e5de66a727f85a7115562c7e5529007df9113b8ccd9d97fc295ed07f3e7f8f74985a27aba2e002f0da17c5462a22323ed4fd0db4a5cce56477866cd3805082bed01918af165ea9afdcc2b7db3ad57cb61ad91cae02af40e31d5024b7c595a166859ab62fe6cc66a68eb0670ef14d2de0777c1dcfe10a4775c70d7904335df52420399625ef271728aa678a8fa88afda68b2849ff4260fe066ecb789670799d9d0938b6fb35767bcbefdf1f2272dc884f5d8f65935af582d33c5ea201a69c19958f2b355e3b9c554cab9b5ea868cfef36729b37ad92ed93e0e36e191134a319c03236e8936c594d896f9adaa4aea43ca1f782bd2d07018784e3dfea0f5eb3ff38b24bb5517f41dd19b108001e0be6fab50da9a1cc5a546f50febaa18f51941dc987c202a5afcedba57c8440e0bbb32a538dfd69f79147577597e19d94164e08dd916d4e838f3ca9aaf57eb99ec70e87167e06bfeabc65c25ec4b6e3365c8b485d649deb1e3c327520fb53d343653b08d61558c43a5c881ab21f27f862d8753b2d6e568ae74727035d66e62e097b6bf6a0364213118af52962bfbc5a498cb7f137c4df7ac5383a9a92d9d6fee3169a72ddce06e6be12d09165f54ae0da907907cfd89efa98d94c1704562772c1b0a816db4dad479011ca706fb603175bbd500111eec0ce8267a04cb6a6375e2654f1a3c639509d7b2b5ac4f5f72316b4cc7b0cbb744d3c617e142a3b2a10392aa27d37cfa4475b0157fbfe8eec62ecde23e55d384669872e74fff5cb24bbedb218a3fcef9bf511099e608b87caf4aaeac56a97c4792359d4de1925b2f3e1ea7bfb13f6c06f25127e59d7bdc7fb94ea5e51e2587ce4e4bde7e306d6d7a4e125486f5cf9316e902ab8bbc42eae7fcbc301b2f4bf91203cf4671a6f78e4d9d46e12950ab4001a7c0b20a43c8b8ad3c3b9ae5a0e2ac6b94ef12970349506256787952f096e1c10d18d8d64792da7e2fe9ec488c7f108687436dd7a798720265c59e227be598f4be65edb9310b1ee11cf3ba62fb5dc4714d3c326c738e31ad74092bfe6bb069c4a38b010e365a6bb821ecdce9ff29ead0ef04bd2f19726a4d51655898154ca6a4ae9e0975700f75689cc21dfc6bc12b6fad995969dad389a2a3b1b559e032bdfc37e172a0c18e0e9294dcd125532642f2674987d62dbe9eb1295a9599f020c9f47364060e665ae0992dde1492fea5cb90c247681c026e16ed00bb2e6455c97661686a1184c5257d592567086ec7d2671036135ca778779ab32c0bc7eb4ed583d9e9a3485ae61d510c6677884509de8456d68ff9a6d4dd780f99d6270bce11498dd7939ad8f328359bd18add4106756d2b9fbefb9bfe9aa18fbb64203ff919e16513cae9355853b96481ecf225752ebc7d5c6cda602a66e28c43fc8a7121666029927f54e1bf09b92c7219a1f77e7e2cb7bb4fdf84b8df880927101e46912c05cb3f5ae6eb3830d1bffc5e0e5f2891492f93572c9d37e054d8e0c9de287ed9750644279b7611e1ceead4196c8a5af251aa091f08eda58df872087742213f908ad7fc3ffb3d827d1e11e294a75c4abcd80ec8397ce8500a0c829cc0893c657b9f0f06725ce8dbeb5ddc1bcd9d6cba284ddcfadb52608421d8c917008892ad96cb276146ad42b030f349fddab71d95ca1d160f87f12aec424c8f2b0d373a8576e476a8fd749621b05d325d3ebc463056df97d8b511ca4661a384ad2510d3109a8b562d4a4ab8dee8829e4bec80508af32ce435593c8f2de7a057ab631643d1b52f643d0f771e29e2141fc8dee22a54ced1f518a416582b0f6b10a5eb6b928d5f3f39d093252616925eb8f21358aac5a1b38d0fac318d83aa3237849a808a45c085089581115ea955c171cb9a2bd985424ac24276930e05438f43f4ff17d83ac3b6f4360b2e3e4811451a5fe460414a2a6079dcb96e14afedca6f763a2dbca8f06086acd1afedf7c673a844babcf4fe91eb4ca95fdc37bb658d018dd0277e9f772585be6d7c13ef92b46da6e925dcb8ef883370e91cda014ee11da49373a73e5ebe917a15955784cddb7a6e40a035df5006a7be11197705379e5ded8ca31110a6b74802e93ad6f0c4bbc8ebb593d7a578aac26a8af1c22f789baea913d8ce260ecc16887eb423ad7ef306cf33a92021550c06f336b54bfba1f2adf6f0e9b03c9d5ba888b37d0a8060aa3d9b832d7107fb8adef8cb2f23c1b721191c135252c4a606c657f8e289e13d0eb42477c0f5b8023de27570e23bc58ce2056d560c4d40e66cdc4197575217bf70015c95f69656677b7243158fe61ed01b6c2a7e2af26e4ff59fd3c2a5a64481acc6cd849a554df21ff4ddd96ee7cd4c9f537223e23ace73972f7344d6ed198a50621afa5a8171f0222fa5c65a22a1e805bce4e80a646c43c785726b269f571f5fc4b24bf0bd63166c86caf7fee6619050773af77d06b17e600c191af9f5626214b92b8bf95d3a5e83b224544abef7c98dd2c87447416e719f0b0817cca1f323c2998960316d994324dc9d7aa8a165fa0e1f14066d2e9606ccb40368cdd6fc59d450ecb23619061b35335e997dc46c23e55862ac563e0b9351b72842840d0c43566d069c63dd45f18b3c1f94880f718194b9173aba91abe8667bf1ec8e0b1ed9abaae35080601b11dc848158ef836283cf15edc72884f595a14b06693ca6787c890e808328f09321dc054c0550285177b931604e0fdf16d3fab576ee37183c8fbd6aee9efd687d1836daa60752db31a8cd446132d2954528e5583ad305a234e60364a0452a548fcdbda33fe080d68c228ed5fedf0799aec49d19587ae4f5add4399531f6ec7b989dcb096cf652b45af063a289520a98d560e44220a1683a51ab3634bcee510031f6a410f425f2cef0d540662dfd086fcb57d49ff232d12d6f41747d5fb53c4c7f9dad8ac51ddfd20d9ab6c2dc8fc447c0be64381d98706e8827ecd10ef684fcb6b655bc421a05b486a8f1ff81de6b89ec120714bad4b7368d658863edc05adce7b7ee5ab2a6378aad1187a19acc00bdfe76ba6438ff6270e30cc06b981a39307f80749a16358dfd5e9a96a521d3d5ed979ae734fe2e8f3165602bdda82044c8e154b57025582afda41e942bc0faeb3d4fe9f57872fe596a9aa1aa29da58c829fcc09b296ecaba23734f532de2ca3798a4846d9065e487c55839e85c5a9835558bceb97af2c761b2424c28acb81431baee2fcc3f4d42e36b3eaa527e9ce4d47c89f78f89097ac3092256671b1cc652bd43f87c167c1bc449ed5099f3b21dbb6c8638de9f97f01933bec0b9af75ddbbedcbdfaac7a5be1242352253e24ed6edfea54471888c6857673816fab5465537f26d56c15ed30ebcf9d748427b60b24b04cd10eea48e63761d309c849d6a5aeff1e3b36cf2c2807d34e381617354d1e607d833aa18feb5c3ce94c9652317ef5944c3d1389cdc9b439940b4089c4285b01ade22d607c9873d00b3fa19431763b2efb048d0a75cb46449d650c9787b415a064e2b6e77d06281bced69b798f002ddbebf9d0ba192aa7033a0fc5ed3b00b", 0xf6d) 1.651039413s ago: executing program 0 (id=1226): r0 = socket(0x2, 0x80802, 0x0) sendmmsg$unix(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}], 0x1, 0x81) 1.605624356s ago: executing program 1 (id=1227): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004480)=[{{&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000080) 1.605278686s ago: executing program 0 (id=1228): unshare(0x22020600) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) unshare(0x2020600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x40000) 1.599373777s ago: executing program 1 (id=1229): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24008000, 0x0, 0x0) shutdown(r4, 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008", @ANYRES32=r7], 0x2c}}, 0x18) 880.985239ms ago: executing program 4 (id=1237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0x0, 0x9}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xff000000, 0xff, 0xffffffff]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 777.295555ms ago: executing program 4 (id=1241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffff9}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c, 0x0}}], 0x1, 0xc0c0) 753.082656ms ago: executing program 3 (id=1242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x1, 0x2b, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x2000080c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0xb}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) 713.988789ms ago: executing program 1 (id=1243): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x4, 0x4) 708.630019ms ago: executing program 3 (id=1244): syz_clone(0x2000000, &(0x7f0000000080)="22e0560668c894a8ee205962429eb291731811e56f84d90d9320f0961e97243f2993c55394ee612c62f8be03371eef23495ee1d2cd00aa8653e6669d54d2e9a2fa0d788e4d7f04edd1ae2f70170095e703c5829596bb24b22aa645c53a163bccf7f975270d758c3ab209d85012fd93", 0x6f, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYBLOB="800002000800000008001b000000000008002800"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 668.855981ms ago: executing program 3 (id=1245): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 665.540571ms ago: executing program 0 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r1, 0x1, 0x30bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000854) 613.410024ms ago: executing program 4 (id=1247): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0xc4c03d16, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=""/209}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xf}, {0x8, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 613.069515ms ago: executing program 1 (id=1248): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f0000000140)="f61000194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200006056db0000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef988b0411b1bc0ba9bc28d0eb6a73ad76be9facd030082b6a3cc2040e84b398d279e50535b6557df8a633cfc76b057f89b74640476e973c21df5435e3b81aaba048fa4264d4c155100"/182, 0xb6}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 607.301045ms ago: executing program 1 (id=1249): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010001fff29bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067656e65766500001c0002800500040009000000050008000100000005000d000100000008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 593.778865ms ago: executing program 0 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 516.29997ms ago: executing program 0 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0x0, 0x9}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xff000000, 0xff, 0xffffffff]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 514.661731ms ago: executing program 4 (id=1252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) 498.737941ms ago: executing program 1 (id=1253): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24008000, 0x0, 0x0) shutdown(r4, 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e0000000000080003", @ANYRES32=r7], 0x2c}}, 0x18) 487.431252ms ago: executing program 4 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x3, 0x4, 0x400}, 0x50) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 486.284432ms ago: executing program 3 (id=1255): syz_clone(0x2000000, &(0x7f0000000080)="22e0560668c894a8ee205962429eb291731811e56f84d90d9320f0961e97243f2993c55394ee612c62f8be03371eef23495ee1d2cd00aa8653e6669d54d2e9a2fa0d788e4d7f04edd1ae2f70170095e703c5829596bb24b22aa645c53a163bccf7f975270d758c3ab209d85012fd93", 0x6f, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYBLOB="800002000800000008001b000000000008002800"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 417.497726ms ago: executing program 4 (id=1256): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000000c000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="809a861d63c7497ef5b7ebe30d2fef527bc2aa7159a8fce509f9d9a8fcf5205ff5fff977da60dec8c78d6404253de202a69a70a1271fea8a38ff9a9025d83e36ba2c07292217b39e7350ef305ca459c22cc85bae159887f3f970d85059348831626cf67834ef8e118b1e020a59e6cc057a1337a9d302c069697086ad44b6983b1ad9ec668099ec5abfbd454e003355", 0x8f}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000500045a0cb00100007a31000000000500010006000000050005000a0000001400078008001140000000690800124000007fff1000033e56296b69e0179f7876e196bb24da0a6cd13c05cd60491c8bf04df8ca08d4c8fe44a3bb64be9bd1452e03fc897d72403e78871e1f65092974922ad5d269d16b418e6cd9ab600e15a22c5e8148d9b060069cf00ce77eb16e7c8c842da7290cee4c8253"], 0x5c}}, 0x400c041) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000180)='syz0\x00', 0x1ff) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/244, 0xf4, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) ioctl$TUNSETOWNER(r7, 0x400454cc, 0xffffffffffffffff) close(0x4) 397.331417ms ago: executing program 3 (id=1257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffff9}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c, 0x0}}], 0x1, 0xc0c0) 375.176928ms ago: executing program 0 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xfcc0}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}}, 0x0) 301.431723ms ago: executing program 3 (id=1259): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f0000000140)="f61000194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200006056db0000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef988b0411b1bc0ba9bc28d0eb6a73ad76be9facd030082b6a3cc2040e84b398d279e50535b6557df8a633cfc76b057f89b74640476e973c21df5435e3b81aaba048fa4264d4c155100"/182, 0xb6}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x4}, {0x9, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3d}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001080)="03", 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.302361][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.303585][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.306648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.356738][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.358070][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.359898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.366593][ T4437] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 35.412540][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.413899][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.415631][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.477641][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.478796][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.480407][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.508316][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.509984][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.512209][ T4440] binder: BINDER_SET_CONTEXT_MGR already set [ 35.512440][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.513168][ T4440] binder: 4438:4440 ioctl 4018620d 20000180 returned -16 [ 35.529944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.531245][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.533310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.555745][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 35.557152][ T4444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8'. [ 35.587022][ T4448] capability: warning: `syz.3.10' uses deprecated v2 capabilities in a way that may be insecure [ 35.733816][ T4461] loop1: detected capacity change from 0 to 512 [ 35.765129][ T4461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.828614][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 35.958717][ T4478] loop4: detected capacity change from 0 to 512 [ 35.987630][ T4478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.025557][ T4485] loop2: detected capacity change from 0 to 512 [ 36.028178][ T4485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.039130][ T4485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.049207][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 36.069178][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.072162][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.073565][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.087729][ T4497] loop4: detected capacity change from 0 to 1024 [ 36.091050][ T4497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.092554][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 36.092561][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 36.127437][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 36.129255][ T4497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.171337][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 36.172806][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 36.175381][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 36.180335][ T27] audit: type=1326 audit(36.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.183901][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 36.197268][ T27] audit: type=1326 audit(36.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.205961][ T27] audit: type=1326 audit(36.170:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.217861][ T27] audit: type=1326 audit(36.170:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.241500][ T27] audit: type=1326 audit(36.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.249468][ T27] audit: type=1326 audit(36.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.282921][ T27] audit: type=1326 audit(36.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa1375928 code=0x7ffc0000 [ 36.630479][ T4540] loop2: detected capacity change from 0 to 512 [ 36.632255][ T4540] EXT4-fs: Ignoring removed orlov option [ 36.633357][ T4540] EXT4-fs: Ignoring removed i_version option [ 36.658606][ T4540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.675929][ T4543] netlink: 48 bytes leftover after parsing attributes in process `syz.4.41'. [ 36.682957][ T4540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.704700][ T4541] binder: BINDER_SET_CONTEXT_MGR already set [ 36.706124][ T4541] binder: 4535:4541 ioctl 4018620d 20000180 returned -16 [ 36.736089][ T4540] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.43: corrupted inode contents [ 36.743550][ T4540] EXT4-fs (loop2): Remounting filesystem read-only [ 36.744875][ T4540] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz.2.43: mark_inode_dirty error [ 36.749057][ T4540] EXT4-fs (loop2): Remounting filesystem read-only [ 36.755101][ T4540] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.43: corrupted inode contents [ 36.760225][ T4540] EXT4-fs (loop2): Remounting filesystem read-only [ 36.767605][ T4540] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.43: mark_inode_dirty error [ 36.769939][ T4540] EXT4-fs (loop2): Remounting filesystem read-only [ 36.788985][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 37.207301][ T4560] loop3: detected capacity change from 0 to 1024 [ 37.208846][ T4560] EXT4-fs: Ignoring removed orlov option [ 37.209940][ T4560] EXT4-fs: inline encryption not supported [ 37.223783][ T4560] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 37.227894][ T4560] EXT4-fs error (device loop3): ext4_get_journal_inode:5756: comm syz.3.50: inode #102: comm syz.3.50: iget: illegal inode # [ 37.247579][ T4560] EXT4-fs (loop3): no journal found [ 37.248547][ T4560] EXT4-fs (loop3): can't get journal size [ 37.252878][ T4560] EXT4-fs (loop3): failed to initialize system zone (-22) [ 37.254290][ T4560] EXT4-fs (loop3): mount failed [ 37.309182][ T4569] loop3: detected capacity change from 0 to 256 [ 37.311948][ T4570] process 'syz.1.51' launched './file1' with NULL argv: empty string added [ 37.377744][ T4575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55'. [ 37.386564][ T4577] loop3: detected capacity change from 0 to 512 [ 37.397311][ T4577] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 37.409870][ T4577] EXT4-fs (loop3): 1 truncate cleaned up [ 37.415781][ T4577] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.469970][ T4577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.56: bg 0: block 488: padding at end of block bitmap is not set [ 37.484540][ T4577] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 37.575786][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 37.653771][ T4589] IPVS: sed: FWM 3 0x00000003 - no destination available [ 37.989005][ T4608] binder: BINDER_SET_CONTEXT_MGR already set [ 37.990100][ T4608] binder: 4604:4608 ioctl 4018620d 20000180 returned -16 [ 38.055560][ T4612] loop2: detected capacity change from 0 to 4096 [ 38.074103][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.112467][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 38.142942][ T4615] loop2: detected capacity change from 0 to 164 [ 38.171659][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 38.173123][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 38.252402][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 38.253625][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 38.253674][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 38.698130][ T4633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.751803][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 38.753269][ T4639] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 38.754765][ T4639] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 38.756928][ T4633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.797822][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 38.943294][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.945078][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.955709][ T4648] xt_hashlimit: size too large, truncated to 1048576 [ 39.291068][ T4676] binder: BINDER_SET_CONTEXT_MGR already set [ 39.292787][ T4676] binder: 4672:4676 ioctl 4018620d 20000180 returned -16 [ 39.315117][ T4679] netlink: 'syz.4.92': attribute type 39 has an invalid length. [ 39.864298][ T4685] raw_sendmsg: syz.3.94 forgot to set AF_INET. Fix it! [ 40.074493][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 40.256535][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 40.258453][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 40.396984][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 40.397007][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 40.399003][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 40.904972][ T4713] set_capacity_and_notify: 1 callbacks suppressed [ 40.904982][ T4713] loop4: detected capacity change from 0 to 128 [ 40.930796][ T4713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 40.935601][ T4713] System zones: 1-3, 19-19, 35-36 [ 40.942437][ T4713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.013686][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 41.080095][ T4720] netlink: 'syz.1.108': attribute type 39 has an invalid length. [ 41.115051][ T4718] binder: BINDER_SET_CONTEXT_MGR already set [ 41.116078][ T4718] binder: 4716:4718 ioctl 4018620d 20000180 returned -16 [ 41.240291][ T4728] loop4: detected capacity change from 0 to 256 [ 41.254981][ T4728] ======================================================= [ 41.254981][ T4728] WARNING: The mand mount option has been deprecated and [ 41.254981][ T4728] and is ignored by this kernel. Remove the mand [ 41.254981][ T4728] option from the mount to silence this warning. [ 41.254981][ T4728] ======================================================= [ 41.288335][ T4728] FAT-fs (loop4): Directory bread(block 64) failed [ 41.289429][ T4728] FAT-fs (loop4): Directory bread(block 65) failed [ 41.290594][ T4728] FAT-fs (loop4): Directory bread(block 66) failed [ 41.293044][ T4728] FAT-fs (loop4): Directory bread(block 67) failed [ 41.294166][ T4728] FAT-fs (loop4): Directory bread(block 68) failed [ 41.301315][ T4728] FAT-fs (loop4): Directory bread(block 69) failed [ 41.302521][ T4728] FAT-fs (loop4): Directory bread(block 70) failed [ 41.303577][ T4728] FAT-fs (loop4): Directory bread(block 71) failed [ 41.304624][ T4728] FAT-fs (loop4): Directory bread(block 72) failed [ 41.311277][ T4728] FAT-fs (loop4): Directory bread(block 73) failed [ 42.168311][ T4749] loop4: detected capacity change from 0 to 512 [ 42.222577][ T4749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.255581][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 42.659823][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 42.661793][ T4776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.664061][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 42.665520][ T4776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.727027][ T4783] loop1: detected capacity change from 0 to 128 [ 42.770669][ T4783] FAT-fs (loop1): Directory bread(block 32) failed [ 42.771956][ T4783] FAT-fs (loop1): Directory bread(block 33) failed [ 42.773078][ T4783] FAT-fs (loop1): Directory bread(block 34) failed [ 42.774141][ T4783] FAT-fs (loop1): Directory bread(block 35) failed [ 42.775164][ T4783] FAT-fs (loop1): Directory bread(block 36) failed [ 42.776154][ T4783] FAT-fs (loop1): Directory bread(block 37) failed [ 42.780616][ T4783] FAT-fs (loop1): Directory bread(block 38) failed [ 42.791668][ T4783] FAT-fs (loop1): Directory bread(block 39) failed [ 42.792719][ T4783] FAT-fs (loop1): Directory bread(block 40) failed [ 42.793669][ T4783] FAT-fs (loop1): Directory bread(block 41) failed [ 42.933323][ T4783] syz.1.132: attempt to access beyond end of device [ 42.933323][ T4783] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 42.944386][ T4783] FAT-fs (loop1): Filesystem has been set read-only [ 42.945667][ T4783] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 43.635149][ T4800] loop3: detected capacity change from 0 to 2048 [ 43.684608][ T4800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.719260][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 44.644667][ T4835] netlink: 'syz.3.148': attribute type 39 has an invalid length. [ 44.767496][ T4839] loop1: detected capacity change from 0 to 2048 [ 44.800247][ T4839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.891095][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 45.290297][ T4878] loop2: detected capacity change from 0 to 2048 [ 45.313284][ T4880] netlink: 'syz.1.165': attribute type 39 has an invalid length. [ 45.333443][ T4878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.353805][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 45.409871][ T4892] loop2: detected capacity change from 0 to 256 [ 45.568408][ T4908] netlink: 'syz.2.177': attribute type 39 has an invalid length. [ 45.667835][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 45.831617][ T4922] loop2: detected capacity change from 0 to 1024 [ 45.838811][ T4922] EXT4-fs: Ignoring removed oldalloc option [ 45.839712][ T4922] EXT4-fs: inline encryption not supported [ 45.841567][ T4922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.846768][ T4922] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #3: block 1: comm syz.2.183: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.849627][ T4922] Quota error (device loop2): write_blk: dquota write failed [ 45.850931][ T4922] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.856062][ T4922] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.183: Failed to acquire dquot type 0 [ 45.858372][ T4922] EXT4-fs error (device loop2): ext4_free_blocks:6221: comm syz.2.183: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.861245][ T4922] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.183: Invalid inode bitmap blk 0 in block_group 0 [ 45.863515][ T4922] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 45.865023][ T4922] EXT4-fs (loop2): 1 orphan inode deleted [ 45.865914][ T4922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.871816][ T4404] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.878021][ T4404] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 45.880379][ T4404] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 45.887456][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 45.960992][ T4928] Zero length message leads to an empty skb [ 46.777750][ T4954] netlink: 'syz.4.194': attribute type 39 has an invalid length. [ 47.021389][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.025226][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.089946][ T233] tipc: Subscription rejected, illegal request [ 47.226464][ T4982] netlink: 'syz.1.205': attribute type 39 has an invalid length. [ 47.619466][ T5000] loop4: detected capacity change from 0 to 128 [ 47.638010][ T5000] FAT-fs (loop4): Directory bread(block 32) failed [ 47.639090][ T5000] FAT-fs (loop4): Directory bread(block 33) failed [ 47.640151][ T5000] FAT-fs (loop4): Directory bread(block 34) failed [ 47.643090][ T5000] FAT-fs (loop4): Directory bread(block 35) failed [ 47.644208][ T5000] FAT-fs (loop4): Directory bread(block 36) failed [ 47.645473][ T5000] FAT-fs (loop4): Directory bread(block 37) failed [ 47.646609][ T5000] FAT-fs (loop4): Directory bread(block 38) failed [ 47.647656][ T5000] FAT-fs (loop4): Directory bread(block 39) failed [ 47.648732][ T5000] FAT-fs (loop4): Directory bread(block 40) failed [ 47.649704][ T5000] FAT-fs (loop4): Directory bread(block 41) failed [ 47.916585][ T5011] netlink: 'syz.2.216': attribute type 39 has an invalid length. [ 48.022490][ T5023] loop2: detected capacity change from 0 to 128 [ 48.027662][ T5023] FAT-fs (loop2): Directory bread(block 32) failed [ 48.028873][ T5023] FAT-fs (loop2): Directory bread(block 33) failed [ 48.030055][ T5023] FAT-fs (loop2): Directory bread(block 34) failed [ 48.031748][ T5023] FAT-fs (loop2): Directory bread(block 35) failed [ 48.032974][ T5023] FAT-fs (loop2): Directory bread(block 36) failed [ 48.034516][ T5023] FAT-fs (loop2): Directory bread(block 37) failed [ 48.035771][ T5023] FAT-fs (loop2): Directory bread(block 38) failed [ 48.037111][ T5023] FAT-fs (loop2): Directory bread(block 39) failed [ 48.038451][ T5023] FAT-fs (loop2): Directory bread(block 40) failed [ 48.039636][ T5023] FAT-fs (loop2): Directory bread(block 41) failed [ 48.127481][ T5029] loop1: detected capacity change from 0 to 512 [ 48.137097][ T5029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.146276][ T5028] loop2: detected capacity change from 0 to 128 [ 48.170656][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 48.178052][ T5028] FAT-fs (loop2): Directory bread(block 32) failed [ 48.180390][ T5028] FAT-fs (loop2): Directory bread(block 33) failed [ 48.182630][ T5028] FAT-fs (loop2): Directory bread(block 34) failed [ 48.183845][ T5028] FAT-fs (loop2): Directory bread(block 35) failed [ 48.186113][ T5028] FAT-fs (loop2): Directory bread(block 36) failed [ 48.187278][ T5028] FAT-fs (loop2): Directory bread(block 37) failed [ 48.189191][ T5028] FAT-fs (loop2): Directory bread(block 38) failed [ 48.190270][ T5028] FAT-fs (loop2): Directory bread(block 39) failed [ 48.194764][ T5028] FAT-fs (loop2): Directory bread(block 40) failed [ 48.195897][ T5028] FAT-fs (loop2): Directory bread(block 41) failed [ 48.247931][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.252644][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.333104][ T5041] loop0: detected capacity change from 0 to 512 [ 48.338254][ T5042] netlink: 'syz.1.228': attribute type 39 has an invalid length. [ 48.357018][ T5041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.384946][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 48.421772][ T5052] loop1: detected capacity change from 0 to 128 [ 48.436575][ T5052] FAT-fs (loop1): Directory bread(block 32) failed [ 48.437670][ T5052] FAT-fs (loop1): Directory bread(block 33) failed [ 48.438912][ T5052] FAT-fs (loop1): Directory bread(block 34) failed [ 48.439928][ T5052] FAT-fs (loop1): Directory bread(block 35) failed [ 48.441028][ T5052] FAT-fs (loop1): Directory bread(block 36) failed [ 48.442139][ T5052] FAT-fs (loop1): Directory bread(block 37) failed [ 48.443218][ T5052] FAT-fs (loop1): Directory bread(block 38) failed [ 48.444246][ T5052] FAT-fs (loop1): Directory bread(block 39) failed [ 48.445345][ T5052] FAT-fs (loop1): Directory bread(block 40) failed [ 48.446344][ T5052] FAT-fs (loop1): Directory bread(block 41) failed [ 48.448598][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 48.537048][ T5058] loop1: detected capacity change from 0 to 512 [ 48.558623][ T5058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.575309][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 48.606857][ T5064] loop1: detected capacity change from 0 to 128 [ 48.626111][ T5064] FAT-fs (loop1): Directory bread(block 32) failed [ 48.627230][ T5064] FAT-fs (loop1): Directory bread(block 33) failed [ 48.628286][ T5064] FAT-fs (loop1): Directory bread(block 34) failed [ 48.629283][ T5064] FAT-fs (loop1): Directory bread(block 35) failed [ 48.630373][ T5064] FAT-fs (loop1): Directory bread(block 36) failed [ 48.635159][ T5064] FAT-fs (loop1): Directory bread(block 37) failed [ 48.636203][ T5064] FAT-fs (loop1): Directory bread(block 38) failed [ 48.637220][ T5064] FAT-fs (loop1): Directory bread(block 39) failed [ 48.638341][ T5064] FAT-fs (loop1): Directory bread(block 40) failed [ 48.639359][ T5064] FAT-fs (loop1): Directory bread(block 41) failed [ 49.110375][ T5074] netlink: 'syz.4.240': attribute type 39 has an invalid length. [ 49.237522][ T5091] loop2: detected capacity change from 0 to 128 [ 49.237979][ T5089] loop4: detected capacity change from 0 to 512 [ 49.244688][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.284615][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 49.366623][ T5098] netlink: 44 bytes leftover after parsing attributes in process `syz.4.249'. [ 49.395887][ T5100] FAT-fs (loop0): Directory bread(block 32) failed [ 49.399191][ T5100] FAT-fs (loop0): Directory bread(block 33) failed [ 49.405644][ T5100] FAT-fs (loop0): Directory bread(block 34) failed [ 49.408139][ T5100] FAT-fs (loop0): Directory bread(block 35) failed [ 49.411700][ T5100] FAT-fs (loop0): Directory bread(block 36) failed [ 49.414936][ T5100] FAT-fs (loop0): Directory bread(block 37) failed [ 49.419484][ T5100] FAT-fs (loop0): Directory bread(block 38) failed [ 49.425900][ T5100] FAT-fs (loop0): Directory bread(block 39) failed [ 49.429332][ T5100] FAT-fs (loop0): Directory bread(block 40) failed [ 49.433636][ T5100] FAT-fs (loop0): Directory bread(block 41) failed [ 49.554005][ T5108] FAT-fs (loop0): Directory bread(block 32) failed [ 49.556907][ T5108] FAT-fs (loop0): Directory bread(block 33) failed [ 49.559159][ T5108] FAT-fs (loop0): Directory bread(block 34) failed [ 49.562432][ T5108] FAT-fs (loop0): Directory bread(block 35) failed [ 49.564540][ T5108] FAT-fs (loop0): Directory bread(block 36) failed [ 49.567768][ T5108] FAT-fs (loop0): Directory bread(block 37) failed [ 49.570004][ T5108] FAT-fs (loop0): Directory bread(block 38) failed [ 49.573313][ T5108] FAT-fs (loop0): Directory bread(block 39) failed [ 49.576461][ T5108] FAT-fs (loop0): Directory bread(block 40) failed [ 49.579688][ T5108] FAT-fs (loop0): Directory bread(block 41) failed [ 49.642190][ T5108] syz.0.253: attempt to access beyond end of device [ 49.642190][ T5108] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 49.655322][ T5108] FAT-fs (loop0): Filesystem has been set read-only [ 49.659109][ T5108] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 49.708719][ T5115] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.714270][ T5115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.727268][ T5115] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.729890][ T5115] EXT4-fs (loop1): 1 truncate cleaned up [ 49.731981][ T5115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.748910][ T5115] xt_hashlimit: size too large, truncated to 1048576 [ 50.019122][ T5125] netlink: 164 bytes leftover after parsing attributes in process `syz.3.258'. [ 50.061274][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.110090][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.217362][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 50.243272][ T14] usb 1-1: too many configurations: 39, using maximum allowed: 8 [ 50.257432][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.258941][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.260220][ T14] usb 1-1: Product: syz [ 50.260863][ T14] usb 1-1: Manufacturer: syz [ 50.264243][ T14] usb 1-1: SerialNumber: syz [ 50.281511][ T14] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 50.301025][ T14] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 50.307176][ T14] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 51.219571][ T5158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.269'. [ 52.037348][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 53.017389][ T112] usb 1-1: USB disconnect, device number 2 [ 53.095200][ T5219] set_capacity_and_notify: 4 callbacks suppressed [ 53.095210][ T5219] loop2: detected capacity change from 0 to 128 [ 53.101540][ T5219] FAT-fs (loop2): Directory bread(block 32) failed [ 53.102815][ T5219] FAT-fs (loop2): Directory bread(block 33) failed [ 53.103932][ T5219] FAT-fs (loop2): Directory bread(block 34) failed [ 53.105074][ T5219] FAT-fs (loop2): Directory bread(block 35) failed [ 53.106170][ T5219] FAT-fs (loop2): Directory bread(block 36) failed [ 53.107392][ T5219] FAT-fs (loop2): Directory bread(block 37) failed [ 53.108617][ T5219] FAT-fs (loop2): Directory bread(block 38) failed [ 53.109763][ T5219] FAT-fs (loop2): Directory bread(block 39) failed [ 53.111007][ T5219] FAT-fs (loop2): Directory bread(block 40) failed [ 53.115450][ T5219] FAT-fs (loop2): Directory bread(block 41) failed [ 53.141668][ T5219] syz.2.291: attempt to access beyond end of device [ 53.141668][ T5219] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 53.144060][ T5219] FAT-fs (loop2): Filesystem has been set read-only [ 53.145305][ T5219] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 53.583822][ T5237] loop4: detected capacity change from 0 to 1024 [ 53.599757][ T5237] EXT4-fs: inline encryption not supported [ 53.648084][ T5237] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.297: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.650709][ T5237] EXT4-fs (loop4): Remounting filesystem read-only [ 53.652520][ T5237] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 53.653875][ T5237] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.297: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.656297][ T5237] EXT4-fs (loop4): Remounting filesystem read-only [ 53.657357][ T5237] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 53.659442][ T5237] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.297: Failed to acquire dquot type 0 [ 53.663907][ T5237] EXT4-fs (loop4): Remounting filesystem read-only [ 53.665005][ T5237] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 53.666920][ T5237] EXT4-fs (loop4): Remounting filesystem read-only [ 53.668005][ T5237] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.297: mark_inode_dirty error [ 53.672534][ T5237] EXT4-fs (loop4): Remounting filesystem read-only [ 53.673618][ T5237] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 53.675363][ T5237] EXT4-fs (loop4): 1 orphan inode deleted [ 53.676408][ T5237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.681743][ T4733] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.684343][ T4733] EXT4-fs (loop4): Remounting filesystem read-only [ 53.686888][ T4733] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 53.688361][ T4733] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 53.694687][ T4733] EXT4-fs (loop4): Remounting filesystem read-only [ 53.700941][ T5237] EXT4-fs (loop4): shut down requested (1) [ 53.715450][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 53.735210][ T5241] loop4: detected capacity change from 0 to 128 [ 53.742995][ T5241] FAT-fs (loop4): Directory bread(block 32) failed [ 53.744160][ T5241] FAT-fs (loop4): Directory bread(block 33) failed [ 53.745321][ T5241] FAT-fs (loop4): Directory bread(block 34) failed [ 53.746603][ T5241] FAT-fs (loop4): Directory bread(block 35) failed [ 53.747797][ T5241] FAT-fs (loop4): Directory bread(block 36) failed [ 53.748936][ T5241] FAT-fs (loop4): Directory bread(block 37) failed [ 53.750157][ T5241] FAT-fs (loop4): Directory bread(block 38) failed [ 53.751810][ T5241] FAT-fs (loop4): Directory bread(block 39) failed [ 53.753010][ T5241] FAT-fs (loop4): Directory bread(block 40) failed [ 53.754093][ T5241] FAT-fs (loop4): Directory bread(block 41) failed [ 53.812375][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.813870][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.965319][ T5250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.302'. [ 54.255561][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 54.258983][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.261638][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.262974][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.269924][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 54.272842][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.274799][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.276175][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.314447][ T5266] team0: Device gtp0 is of different type [ 54.410144][ T5269] loop2: detected capacity change from 0 to 8192 [ 54.413147][ T5269] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.436875][ T5266] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 54.438337][ T5266] netlink: 5 bytes leftover after parsing attributes in process `syz.2.309'. [ 54.837913][ T5279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.314'. [ 55.258121][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 55.261404][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.263726][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.265030][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.272907][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 55.275854][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.277828][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.279118][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.699579][ T5305] team0: Device gtp0 is of different type [ 55.756115][ T5305] loop3: detected capacity change from 0 to 8192 [ 55.761955][ T5305] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.790625][ T5305] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 55.792638][ T5305] netlink: 5 bytes leftover after parsing attributes in process `syz.3.324'. [ 55.848652][ T5309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'. [ 56.245975][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 56.249404][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.252200][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.253665][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.262857][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.264861][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.266083][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.769370][ T5343] netlink: 'syz.3.340': attribute type 39 has an invalid length. [ 57.058725][ T5370] netlink: 'syz.0.352': attribute type 39 has an invalid length. [ 57.059371][ T5367] loop4: detected capacity change from 0 to 1024 [ 57.063731][ T5367] EXT4-fs: inline encryption not supported [ 57.089115][ T5367] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.349: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.091954][ T5367] EXT4-fs (loop4): Remounting filesystem read-only [ 57.092964][ T5367] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 57.094225][ T5367] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.349: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.096551][ T5367] EXT4-fs (loop4): Remounting filesystem read-only [ 57.097748][ T5367] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 57.099203][ T5367] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.349: Failed to acquire dquot type 0 [ 57.103927][ T5367] EXT4-fs (loop4): Remounting filesystem read-only [ 57.105138][ T5367] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 57.107494][ T5367] EXT4-fs (loop4): Remounting filesystem read-only [ 57.110900][ T5367] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.349: mark_inode_dirty error [ 57.114277][ T5367] EXT4-fs (loop4): Remounting filesystem read-only [ 57.115530][ T5367] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 57.117329][ T5367] EXT4-fs (loop4): 1 orphan inode deleted [ 57.118194][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.126421][ T5367] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.349: lblock 0 mapped to illegal pblock 16 (length 1) [ 57.129773][ T5367] EXT4-fs (loop4): Remounting filesystem read-only [ 57.132459][ T4404] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.135621][ T4404] EXT4-fs (loop4): Remounting filesystem read-only [ 57.136791][ T4404] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 57.138321][ T4404] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 57.142693][ T4404] EXT4-fs (loop4): Remounting filesystem read-only [ 57.154722][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 57.160323][ T4327] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.163846][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 57.165022][ T4327] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 57.166794][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 57.167889][ T4327] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 57.169752][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 57.285014][ T5389] loop2: detected capacity change from 0 to 512 [ 57.299306][ T5389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.357: error while reading EA inode 32 err=-116 [ 57.302651][ T5389] EXT4-fs (loop2): Remounting filesystem read-only [ 57.305668][ T5389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.357: error while reading EA inode 32 err=-116 [ 57.308412][ T5389] EXT4-fs (loop2): Remounting filesystem read-only [ 57.314932][ T5389] EXT4-fs (loop2): 1 orphan inode deleted [ 57.316018][ T5389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.337714][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 57.410824][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.416117][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.417295][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.439019][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.443198][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.446648][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.466423][ T5406] loop0: detected capacity change from 0 to 1024 [ 57.467860][ T5406] EXT4-fs: inline encryption not supported [ 57.489290][ T5406] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.365: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.496980][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 57.498169][ T5406] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 57.506762][ T5406] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.365: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.511720][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 57.512773][ T5406] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 57.514075][ T5406] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.365: Failed to acquire dquot type 0 [ 57.516826][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 57.517767][ T5406] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 57.519254][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 57.520301][ T5406] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.365: mark_inode_dirty error [ 57.522893][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 57.523983][ T5406] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 57.525629][ T5406] EXT4-fs (loop0): 1 orphan inode deleted [ 57.526620][ T5406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.531586][ T11] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.534157][ T11] EXT4-fs (loop0): Remounting filesystem read-only [ 57.535357][ T11] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 57.536823][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 57.540297][ T5406] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 16: comm syz.0.365: lblock 0 mapped to illegal pblock 16 (length 1) [ 57.546638][ T11] EXT4-fs (loop0): Remounting filesystem read-only [ 57.551811][ T5406] EXT4-fs (loop0): Remounting filesystem read-only [ 57.578780][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 57.581097][ T4329] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.588200][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 57.593343][ T4329] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 57.596725][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 57.598379][ T4329] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 57.608706][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 57.630263][ T5418] netlink: 'syz.1.371': attribute type 39 has an invalid length. [ 58.019292][ T5441] loop3: detected capacity change from 0 to 1024 [ 58.020771][ T5441] EXT4-fs: inline encryption not supported [ 58.034323][ T5441] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.379: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.041408][ T5441] EXT4-fs (loop3): Remounting filesystem read-only [ 58.050313][ T5441] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 58.076384][ T5441] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.379: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.104800][ T5441] EXT4-fs (loop3): Remounting filesystem read-only [ 58.116245][ T5441] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.379: Failed to acquire dquot type 0 [ 58.126366][ T5441] EXT4-fs (loop3): Remounting filesystem read-only [ 58.131362][ T5441] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 58.146564][ T5441] EXT4-fs (loop3): Remounting filesystem read-only [ 58.148918][ T5441] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.379: mark_inode_dirty error [ 58.160036][ T5441] EXT4-fs (loop3): Remounting filesystem read-only [ 58.169778][ T5441] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 58.177256][ T5441] EXT4-fs (loop3): 1 orphan inode deleted [ 58.178313][ T5441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.191484][ T5150] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.193932][ T5150] EXT4-fs (loop3): Remounting filesystem read-only [ 58.194978][ T5150] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 0 [ 58.196900][ T5150] EXT4-fs (loop3): Remounting filesystem read-only [ 58.212703][ T5441] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.379: lblock 0 mapped to illegal pblock 16 (length 1) [ 58.225586][ T5441] EXT4-fs (loop3): Remounting filesystem read-only [ 58.263437][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 58.268561][ T4320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.279500][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 58.287032][ T4320] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 58.291009][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 58.295304][ T4320] EXT4-fs error (device loop3): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 58.302695][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 58.512572][ T5457] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 58.712137][ T5473] loop1: detected capacity change from 0 to 1024 [ 58.716052][ T5473] EXT4-fs: inline encryption not supported [ 58.733819][ T5473] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.392: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.736716][ T5473] EXT4-fs (loop1): Remounting filesystem read-only [ 58.739010][ T5473] __quota_error: 2 callbacks suppressed [ 58.739024][ T5473] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 58.743984][ T5473] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.392: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.746551][ T5473] EXT4-fs (loop1): Remounting filesystem read-only [ 58.747559][ T5473] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 58.748906][ T5473] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.392: Failed to acquire dquot type 0 [ 58.750852][ T5473] EXT4-fs (loop1): Remounting filesystem read-only [ 58.752129][ T5473] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 58.753645][ T5473] EXT4-fs (loop1): Remounting filesystem read-only [ 58.754704][ T5473] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.392: mark_inode_dirty error [ 58.757424][ T5473] EXT4-fs (loop1): Remounting filesystem read-only [ 58.758383][ T5473] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 58.760027][ T5473] EXT4-fs (loop1): 1 orphan inode deleted [ 58.760938][ T5473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.766901][ T5473] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz.1.392: lblock 0 mapped to illegal pblock 16 (length 1) [ 58.769378][ T5473] EXT4-fs (loop1): Remounting filesystem read-only [ 58.779666][ T9] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.782341][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 58.783500][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 58.784971][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 58.788690][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 58.803257][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 58.804287][ T4321] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.806802][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 58.807835][ T4321] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 58.810532][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 58.812840][ T4321] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 58.814633][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 58.969399][ T5497] loop1: detected capacity change from 0 to 512 [ 58.984981][ T5497] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 58.995298][ T5497] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 58.996531][ T5497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.999382][ T5497] EXT4-fs error (device loop1): ext4_xattr_set_entry:1616: inode #2: comm syz.1.403: corrupted xattr entries [ 59.018268][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 59.086084][ T5509] loop1: detected capacity change from 0 to 1024 [ 59.090841][ T5509] EXT4-fs: inline encryption not supported [ 59.099029][ T5510] __nla_validate_parse: 13 callbacks suppressed [ 59.099039][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 59.181067][ T5509] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.407: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.186097][ T5509] EXT4-fs (loop1): Remounting filesystem read-only [ 59.187380][ T5509] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 59.189837][ T5509] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.407: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.205214][ T5509] EXT4-fs (loop1): Remounting filesystem read-only [ 59.209700][ T5509] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 59.217023][ T5509] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.407: Failed to acquire dquot type 0 [ 59.227751][ T5509] EXT4-fs (loop1): Remounting filesystem read-only [ 59.232596][ T5509] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 59.235162][ T5509] EXT4-fs (loop1): Remounting filesystem read-only [ 59.237350][ T5509] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.407: mark_inode_dirty error [ 59.241293][ T5509] EXT4-fs (loop1): Remounting filesystem read-only [ 59.242416][ T5509] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 59.245304][ T5509] EXT4-fs (loop1): 1 orphan inode deleted [ 59.246219][ T5509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.252444][ T9] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.259287][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 59.264130][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 59.269094][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 59.274634][ T5509] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz.1.407: lblock 0 mapped to illegal pblock 16 (length 1) [ 59.278339][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 59.280764][ T5509] EXT4-fs (loop1): Remounting filesystem read-only [ 59.295359][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 59.296776][ T4321] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 59.298979][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 59.300083][ T4321] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 59.305121][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 59.306275][ T4321] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 59.311956][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 59.343335][ T5519] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 59.355838][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.358638][ T5519] device bridge_slave_1 left promiscuous mode [ 59.360052][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.417965][ T5519] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 59.473013][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 59.756984][ T5554] 9pnet_fd: Insufficient options for proto=fd [ 59.796928][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 59.848909][ T27] audit: type=1326 audit(59.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5559 comm="syz.3.429" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac775928 code=0x0 [ 60.058431][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 60.134912][ T5590] loop3: detected capacity change from 0 to 128 [ 60.140508][ T5590] FAT-fs (loop3): Directory bread(block 32) failed [ 60.151772][ T5590] FAT-fs (loop3): Directory bread(block 33) failed [ 60.152929][ T5590] FAT-fs (loop3): Directory bread(block 34) failed [ 60.153839][ T5590] FAT-fs (loop3): Directory bread(block 35) failed [ 60.154986][ T5590] FAT-fs (loop3): Directory bread(block 36) failed [ 60.156035][ T5590] FAT-fs (loop3): Directory bread(block 37) failed [ 60.157003][ T5590] FAT-fs (loop3): Directory bread(block 38) failed [ 60.158038][ T5590] FAT-fs (loop3): Directory bread(block 39) failed [ 60.159011][ T5590] FAT-fs (loop3): Directory bread(block 40) failed [ 60.160100][ T5590] FAT-fs (loop3): Directory bread(block 41) failed [ 60.309892][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 60.495619][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 60.788911][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.790548][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.002201][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 61.426754][ T5660] loop1: detected capacity change from 0 to 2048 [ 61.457431][ T5660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.494281][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 61.543861][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 61.620335][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 61.811705][ T5678] loop1: detected capacity change from 0 to 4096 [ 61.839380][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.873793][ T5680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.876212][ T5680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.898202][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 62.004596][ T5693] loop4: detected capacity change from 0 to 512 [ 62.015530][ T5693] EXT4-fs: Ignoring removed orlov option [ 62.017665][ T5693] EXT4-fs: Ignoring removed i_version option [ 62.025100][ T5693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.088101][ T5693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.095034][ T5688] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.483: corrupted inode contents [ 62.098142][ T5688] EXT4-fs (loop4): Remounting filesystem read-only [ 62.099342][ T5688] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #2: comm syz.4.483: mark_inode_dirty error [ 62.101985][ T5688] EXT4-fs (loop4): Remounting filesystem read-only [ 62.103418][ T5688] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.483: corrupted inode contents [ 62.105618][ T5688] EXT4-fs (loop4): Remounting filesystem read-only [ 62.106728][ T5688] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.483: mark_inode_dirty error [ 62.108938][ T5688] EXT4-fs (loop4): Remounting filesystem read-only [ 62.127075][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 62.589553][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 62.784963][ T5714] loop3: detected capacity change from 0 to 1024 [ 62.786563][ T5714] EXT4-fs: inline encryption not supported [ 62.792706][ T5714] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.489: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.795219][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 62.796380][ T5714] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 62.797712][ T5714] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.489: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.800313][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 62.801612][ T5714] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 62.803056][ T5714] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.489: Failed to acquire dquot type 0 [ 62.804979][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 62.806115][ T5714] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 62.807830][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 62.808876][ T5714] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.489: mark_inode_dirty error [ 62.810936][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 62.812872][ T5714] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 62.814539][ T5714] EXT4-fs (loop3): 1 orphan inode deleted [ 62.815441][ T5714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.820230][ T5714] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.489: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.824984][ T5714] EXT4-fs (loop3): Remounting filesystem read-only [ 62.825011][ T4404] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.828606][ T4404] EXT4-fs (loop3): Remounting filesystem read-only [ 62.829705][ T4404] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 62.831319][ T4404] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 62.846464][ T4404] EXT4-fs (loop3): Remounting filesystem read-only [ 62.848910][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 62.850032][ T4320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 62.852544][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 62.853638][ T4320] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 62.855380][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 62.856506][ T4320] EXT4-fs error (device loop3): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 62.858552][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 62.885784][ T5717] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 62.892368][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.907329][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.908452][ T5717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.913186][ T5717] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.946308][ T5721] loop3: detected capacity change from 0 to 4096 [ 62.987532][ T5726] loop1: detected capacity change from 0 to 128 [ 62.999342][ T5726] FAT-fs (loop1): Directory bread(block 32) failed [ 63.000653][ T5726] FAT-fs (loop1): Directory bread(block 33) failed [ 63.004091][ T5726] FAT-fs (loop1): Directory bread(block 34) failed [ 63.006390][ T5726] FAT-fs (loop1): Directory bread(block 35) failed [ 63.008576][ T5726] FAT-fs (loop1): Directory bread(block 36) failed [ 63.009836][ T5726] FAT-fs (loop1): Directory bread(block 37) failed [ 63.012062][ T5726] FAT-fs (loop1): Directory bread(block 38) failed [ 63.014328][ T5726] FAT-fs (loop1): Directory bread(block 39) failed [ 63.016553][ T5726] FAT-fs (loop1): Directory bread(block 40) failed [ 63.017682][ T5726] FAT-fs (loop1): Directory bread(block 41) failed [ 63.305388][ T5748] EXT4-fs: inline encryption not supported [ 63.331066][ T5748] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.500: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.331563][ T5748] EXT4-fs (loop4): Remounting filesystem read-only [ 63.331605][ T5748] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.500: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.331737][ T5748] EXT4-fs (loop4): Remounting filesystem read-only [ 63.331746][ T5748] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.500: Failed to acquire dquot type 0 [ 63.331834][ T5748] EXT4-fs (loop4): Remounting filesystem read-only [ 63.331927][ T5748] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 63.332018][ T5748] EXT4-fs (loop4): Remounting filesystem read-only [ 63.332024][ T5748] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.500: mark_inode_dirty error [ 63.332092][ T5748] EXT4-fs (loop4): Remounting filesystem read-only [ 63.332098][ T5748] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 63.332130][ T5748] EXT4-fs (loop4): 1 orphan inode deleted [ 63.334803][ T5748] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.500: lblock 0 mapped to illegal pblock 16 (length 1) [ 63.338531][ T5748] EXT4-fs (loop4): Remounting filesystem read-only [ 63.351980][ T4404] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.352640][ T4404] EXT4-fs (loop4): Remounting filesystem read-only [ 63.352658][ T4404] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 63.352751][ T4404] EXT4-fs (loop4): Remounting filesystem read-only [ 63.375510][ T4327] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 63.377526][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 63.453268][ T4327] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 63.464644][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 63.465734][ T4327] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 63.467792][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 63.580646][ T5761] FAT-fs (loop1): Directory bread(block 32) failed [ 63.586368][ T5761] FAT-fs (loop1): Directory bread(block 33) failed [ 63.587740][ T5761] FAT-fs (loop1): Directory bread(block 34) failed [ 63.591063][ T5761] FAT-fs (loop1): Directory bread(block 35) failed [ 63.600531][ T5761] FAT-fs (loop1): Directory bread(block 36) failed [ 63.604856][ T5761] FAT-fs (loop1): Directory bread(block 37) failed [ 63.606013][ T5761] FAT-fs (loop1): Directory bread(block 38) failed [ 63.607137][ T5761] FAT-fs (loop1): Directory bread(block 39) failed [ 63.608287][ T5761] FAT-fs (loop1): Directory bread(block 40) failed [ 63.609995][ T5761] FAT-fs (loop1): Directory bread(block 41) failed [ 64.036571][ T5774] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 64.094818][ T5774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.096557][ T5777] netlink: 'syz.2.512': attribute type 39 has an invalid length. [ 64.101714][ T5780] bond1: (slave geneve2): making interface the new active one [ 64.104358][ T5780] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 64.105916][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 64.145292][ T5782] set_capacity_and_notify: 3 callbacks suppressed [ 64.145301][ T5782] loop1: detected capacity change from 0 to 1024 [ 64.150435][ T5782] EXT4-fs: inline encryption not supported [ 64.157920][ T5782] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.514: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.160398][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 64.172897][ T5782] __quota_error: 3 callbacks suppressed [ 64.172913][ T5782] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 64.175280][ T5782] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.514: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.179829][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 64.182015][ T5782] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 64.183543][ T5782] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.514: Failed to acquire dquot type 0 [ 64.188099][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 64.196117][ T5782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 64.201483][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 64.202628][ T5782] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.514: mark_inode_dirty error [ 64.204502][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 64.205506][ T5782] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 64.207206][ T5782] EXT4-fs (loop1): 1 orphan inode deleted [ 64.211159][ T5782] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 16: comm syz.1.514: lblock 0 mapped to illegal pblock 16 (length 1) [ 64.213665][ T9] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.217567][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 64.218682][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 64.220324][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 64.222992][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 64.224268][ T5782] EXT4-fs (loop1): Remounting filesystem read-only [ 64.236311][ T4321] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.240267][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 64.241510][ T4321] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 64.243231][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 64.244470][ T4321] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 64.247314][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 64.384378][ T5804] loop2: detected capacity change from 0 to 128 [ 64.398255][ T5804] FAT-fs (loop2): Directory bread(block 32) failed [ 64.403537][ T5804] FAT-fs (loop2): Directory bread(block 33) failed [ 64.406735][ T5804] FAT-fs (loop2): Directory bread(block 34) failed [ 64.407941][ T5804] FAT-fs (loop2): Directory bread(block 35) failed [ 64.409077][ T5804] FAT-fs (loop2): Directory bread(block 36) failed [ 64.410174][ T5804] FAT-fs (loop2): Directory bread(block 37) failed [ 64.413384][ T5804] FAT-fs (loop2): Directory bread(block 38) failed [ 64.414341][ T5804] FAT-fs (loop2): Directory bread(block 39) failed [ 64.415300][ T5804] FAT-fs (loop2): Directory bread(block 40) failed [ 64.416245][ T5804] FAT-fs (loop2): Directory bread(block 41) failed [ 64.478586][ T5808] loop4: detected capacity change from 0 to 512 [ 64.493676][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494730][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.505007][ T5808] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.522: error while reading EA inode 32 err=-116 [ 64.508260][ T5808] EXT4-fs (loop4): Remounting filesystem read-only [ 64.510662][ T5808] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.522: error while reading EA inode 32 err=-116 [ 64.515431][ T5808] EXT4-fs (loop4): Remounting filesystem read-only [ 64.517992][ T5808] EXT4-fs (loop4): 1 orphan inode deleted [ 64.568182][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.570426][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.571411][ T5813] netlink: 'syz.4.524': attribute type 39 has an invalid length. [ 64.638977][ T5820] loop4: detected capacity change from 0 to 1024 [ 64.640561][ T5820] EXT4-fs: inline encryption not supported [ 64.650073][ T5820] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.527: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.655721][ T5820] EXT4-fs (loop4): Remounting filesystem read-only [ 64.658081][ T5820] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 64.660598][ T5820] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.527: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.667267][ T5820] EXT4-fs (loop4): Remounting filesystem read-only [ 64.669435][ T5820] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 64.672952][ T5820] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.527: Failed to acquire dquot type 0 [ 64.677971][ T5820] EXT4-fs (loop4): Remounting filesystem read-only [ 64.680300][ T5820] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 64.684219][ T5820] EXT4-fs (loop4): Remounting filesystem read-only [ 64.687306][ T5820] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.527: mark_inode_dirty error [ 64.692128][ T5820] EXT4-fs (loop4): Remounting filesystem read-only [ 64.694228][ T5820] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 64.699042][ T5820] EXT4-fs (loop4): 1 orphan inode deleted [ 64.701835][ T9] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.706872][ T9] EXT4-fs (loop4): Remounting filesystem read-only [ 64.708028][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 64.709529][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 64.711730][ T9] EXT4-fs (loop4): Remounting filesystem read-only [ 64.718710][ T5820] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.527: lblock 0 mapped to illegal pblock 16 (length 1) [ 64.724579][ T5820] EXT4-fs (loop4): Remounting filesystem read-only [ 64.736209][ T4327] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.738828][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 64.740090][ T4327] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 64.742258][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 64.743360][ T4327] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 64.745451][ T4327] EXT4-fs (loop4): Remounting filesystem read-only [ 64.788692][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 64.905791][ T5828] loop3: detected capacity change from 0 to 128 [ 64.920918][ T5828] FAT-fs (loop3): Directory bread(block 32) failed [ 64.923873][ T5828] FAT-fs (loop3): Directory bread(block 33) failed [ 64.928347][ T5828] FAT-fs (loop3): Directory bread(block 34) failed [ 64.935532][ T5828] FAT-fs (loop3): Directory bread(block 35) failed [ 64.938953][ T5828] FAT-fs (loop3): Directory bread(block 36) failed [ 64.941816][ T5828] FAT-fs (loop3): Directory bread(block 37) failed [ 64.944137][ T5828] FAT-fs (loop3): Directory bread(block 38) failed [ 64.947024][ T5828] FAT-fs (loop3): Directory bread(block 39) failed [ 64.948367][ T5828] FAT-fs (loop3): Directory bread(block 40) failed [ 64.954914][ T5828] FAT-fs (loop3): Directory bread(block 41) failed [ 65.358938][ T5839] loop1: detected capacity change from 0 to 512 [ 65.373352][ T5839] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.535: error while reading EA inode 32 err=-116 [ 65.379007][ T5839] EXT4-fs (loop1): Remounting filesystem read-only [ 65.387860][ T5839] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.535: error while reading EA inode 32 err=-116 [ 65.392212][ T5839] EXT4-fs (loop1): Remounting filesystem read-only [ 65.393806][ T5839] EXT4-fs (loop1): 1 orphan inode deleted [ 65.418263][ T5843] netlink: 'syz.3.536': attribute type 39 has an invalid length. [ 65.503076][ T5849] loop0: detected capacity change from 0 to 1024 [ 65.506581][ T5849] EXT4-fs: inline encryption not supported [ 65.529721][ T5849] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.539: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.538759][ T5849] EXT4-fs (loop0): Remounting filesystem read-only [ 65.539872][ T5849] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 65.541156][ T5849] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.539: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.541459][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.545712][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.551785][ T5849] EXT4-fs (loop0): Remounting filesystem read-only [ 65.553189][ T5849] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 65.555550][ T5849] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.539: Failed to acquire dquot type 0 [ 65.557650][ T5849] EXT4-fs (loop0): Remounting filesystem read-only [ 65.558790][ T5849] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 65.560476][ T5849] EXT4-fs (loop0): Remounting filesystem read-only [ 65.564657][ T5849] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.539: mark_inode_dirty error [ 65.566661][ T5849] EXT4-fs (loop0): Remounting filesystem read-only [ 65.567706][ T5849] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 65.569417][ T5849] EXT4-fs (loop0): 1 orphan inode deleted [ 65.572695][ T9] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.575381][ T9] EXT4-fs (loop0): Remounting filesystem read-only [ 65.576497][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 65.577939][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 65.585011][ T9] EXT4-fs (loop0): Remounting filesystem read-only [ 65.587473][ T5849] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 16: comm syz.0.539: lblock 0 mapped to illegal pblock 16 (length 1) [ 65.589855][ T5849] EXT4-fs (loop0): Remounting filesystem read-only [ 65.608526][ T4329] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.610984][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 65.618179][ T4329] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 65.620004][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 65.627911][ T4329] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 65.630530][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 65.699844][ T5859] loop0: detected capacity change from 0 to 128 [ 65.708407][ T5859] FAT-fs (loop0): Directory bread(block 32) failed [ 65.709554][ T5859] FAT-fs (loop0): Directory bread(block 33) failed [ 65.710686][ T5859] FAT-fs (loop0): Directory bread(block 34) failed [ 65.712278][ T5859] FAT-fs (loop0): Directory bread(block 35) failed [ 65.713411][ T5859] FAT-fs (loop0): Directory bread(block 36) failed [ 65.714505][ T5859] FAT-fs (loop0): Directory bread(block 37) failed [ 65.715822][ T5859] FAT-fs (loop0): Directory bread(block 38) failed [ 65.717119][ T5859] FAT-fs (loop0): Directory bread(block 39) failed [ 65.718272][ T5859] FAT-fs (loop0): Directory bread(block 40) failed [ 65.719469][ T5859] FAT-fs (loop0): Directory bread(block 41) failed [ 66.182163][ T5874] loop3: detected capacity change from 0 to 512 [ 66.203105][ T5874] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.548: error while reading EA inode 32 err=-116 [ 66.205690][ T5874] EXT4-fs (loop3): Remounting filesystem read-only [ 66.208011][ T5874] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.548: error while reading EA inode 32 err=-116 [ 66.210377][ T5874] EXT4-fs (loop3): Remounting filesystem read-only [ 66.213460][ T5874] EXT4-fs (loop3): 1 orphan inode deleted [ 66.214510][ T5874] EXT4-fs mount: 16 callbacks suppressed [ 66.214523][ T5874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.234709][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 66.273260][ T5878] netlink: 'syz.3.549': attribute type 39 has an invalid length. [ 66.422169][ T5885] loop3: detected capacity change from 0 to 1024 [ 66.429163][ T5885] EXT4-fs: inline encryption not supported [ 66.433150][ T5885] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.552: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.435580][ T5885] EXT4-fs (loop3): Remounting filesystem read-only [ 66.436760][ T5885] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 66.438180][ T5885] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.552: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.440836][ T5885] EXT4-fs (loop3): Remounting filesystem read-only [ 66.443085][ T5885] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.552: Failed to acquire dquot type 0 [ 66.445070][ T5885] EXT4-fs (loop3): Remounting filesystem read-only [ 66.446219][ T5885] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 66.448025][ T5885] EXT4-fs (loop3): Remounting filesystem read-only [ 66.449160][ T5885] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.552: mark_inode_dirty error [ 66.480897][ T5885] EXT4-fs (loop3): Remounting filesystem read-only [ 66.483199][ T5885] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 66.485851][ T5885] EXT4-fs (loop3): 1 orphan inode deleted [ 66.486996][ T5885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.493897][ T5885] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.552: lblock 0 mapped to illegal pblock 16 (length 1) [ 66.502077][ T9] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.504621][ T9] EXT4-fs (loop3): Remounting filesystem read-only [ 66.505767][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 66.506536][ T5888] FAT-fs (loop1): Directory bread(block 32) failed [ 66.507766][ T5885] EXT4-fs (loop3): Remounting filesystem read-only [ 66.508899][ T5888] FAT-fs (loop1): Directory bread(block 33) failed [ 66.510697][ T9] EXT4-fs (loop3): Remounting filesystem read-only [ 66.512085][ T5888] FAT-fs (loop1): Directory bread(block 34) failed [ 66.513274][ T5888] FAT-fs (loop1): Directory bread(block 35) failed [ 66.514451][ T5888] FAT-fs (loop1): Directory bread(block 36) failed [ 66.515623][ T5888] FAT-fs (loop1): Directory bread(block 37) failed [ 66.516806][ T5888] FAT-fs (loop1): Directory bread(block 38) failed [ 66.517998][ T5888] FAT-fs (loop1): Directory bread(block 39) failed [ 66.519283][ T5888] FAT-fs (loop1): Directory bread(block 40) failed [ 66.520445][ T5888] FAT-fs (loop1): Directory bread(block 41) failed [ 66.553368][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 66.556642][ T4320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 66.560971][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 66.566504][ T4320] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 66.570904][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 66.574196][ T4320] EXT4-fs error (device loop3): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 66.578351][ T4320] EXT4-fs (loop3): Remounting filesystem read-only [ 66.724453][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.728317][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.736259][ T5903] netlink: 'syz.0.560': attribute type 39 has an invalid length. [ 66.985394][ T5917] device ipip0 entered promiscuous mode [ 67.312762][ T5925] FAT-fs (loop3): Directory bread(block 32) failed [ 67.315003][ T5925] FAT-fs (loop3): Directory bread(block 33) failed [ 67.317163][ T5925] FAT-fs (loop3): Directory bread(block 34) failed [ 67.319352][ T5925] FAT-fs (loop3): Directory bread(block 35) failed [ 67.320550][ T5925] FAT-fs (loop3): Directory bread(block 36) failed [ 67.323754][ T5925] FAT-fs (loop3): Directory bread(block 37) failed [ 67.326065][ T5925] FAT-fs (loop3): Directory bread(block 38) failed [ 67.328319][ T5925] FAT-fs (loop3): Directory bread(block 39) failed [ 67.330508][ T5925] FAT-fs (loop3): Directory bread(block 40) failed [ 67.335037][ T5925] FAT-fs (loop3): Directory bread(block 41) failed [ 67.402246][ T5927] EXT4-fs: inline encryption not supported [ 67.406260][ T5927] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.567: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.408984][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 67.410266][ T5927] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.567: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.414082][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 67.415337][ T5927] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.567: Failed to acquire dquot type 0 [ 67.417403][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 67.418711][ T5927] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 67.420544][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 67.421844][ T5927] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.567: mark_inode_dirty error [ 67.424115][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 67.425344][ T5927] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 67.427249][ T5927] EXT4-fs (loop3): 1 orphan inode deleted [ 67.428373][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.433219][ T4733] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.440624][ T4733] EXT4-fs (loop3): Remounting filesystem read-only [ 67.446178][ T4733] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 67.450370][ T4733] EXT4-fs (loop3): Remounting filesystem read-only [ 67.469447][ T5927] EXT4-fs (loop3): shut down requested (1) [ 67.497600][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 67.548195][ T5932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.568103][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 67.634520][ T5940] netlink: 'syz.2.572': attribute type 39 has an invalid length. [ 67.778226][ T5954] FAT-fs (loop3): Directory bread(block 32) failed [ 67.779274][ T5954] FAT-fs (loop3): Directory bread(block 33) failed [ 67.780427][ T5954] FAT-fs (loop3): Directory bread(block 34) failed [ 67.781655][ T5954] FAT-fs (loop3): Directory bread(block 35) failed [ 67.782820][ T5954] FAT-fs (loop3): Directory bread(block 36) failed [ 67.783899][ T5954] FAT-fs (loop3): Directory bread(block 37) failed [ 67.785070][ T5954] FAT-fs (loop3): Directory bread(block 38) failed [ 67.786248][ T5954] FAT-fs (loop3): Directory bread(block 39) failed [ 67.787325][ T5954] FAT-fs (loop3): Directory bread(block 40) failed [ 67.788652][ T5954] FAT-fs (loop3): Directory bread(block 41) failed [ 67.869728][ T5959] tls_set_device_offload: netdev not found [ 67.921351][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.923008][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.925013][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.930296][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.960091][ T5961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.975136][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 68.125136][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 68.153751][ T5979] tun0: tun_chr_ioctl cmd 1074025675 [ 68.154717][ T5979] tun0: persist enabled [ 68.155694][ T5979] tun0: tun_chr_ioctl cmd 1074025675 [ 68.156599][ T5979] tun0: persist enabled [ 68.380882][ T5991] FAT-fs (loop1): Directory bread(block 32) failed [ 68.382206][ T5991] FAT-fs (loop1): Directory bread(block 33) failed [ 68.383383][ T5991] FAT-fs (loop1): Directory bread(block 34) failed [ 68.386634][ T5991] FAT-fs (loop1): Directory bread(block 35) failed [ 68.387918][ T5991] FAT-fs (loop1): Directory bread(block 36) failed [ 68.392478][ T5991] FAT-fs (loop1): Directory bread(block 37) failed [ 68.398911][ T5991] FAT-fs (loop1): Directory bread(block 38) failed [ 68.399980][ T5991] FAT-fs (loop1): Directory bread(block 39) failed [ 68.402753][ T5991] FAT-fs (loop1): Directory bread(block 40) failed [ 68.404767][ T5991] FAT-fs (loop1): Directory bread(block 41) failed [ 68.569763][ T5999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.598933][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 68.629350][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 68.870556][ T6025] FAT-fs (loop2): Directory bread(block 32) failed [ 68.871929][ T6025] FAT-fs (loop2): Directory bread(block 33) failed [ 68.874270][ T6025] FAT-fs (loop2): Directory bread(block 34) failed [ 68.877780][ T6025] FAT-fs (loop2): Directory bread(block 35) failed [ 68.878962][ T6025] FAT-fs (loop2): Directory bread(block 36) failed [ 68.880099][ T6025] FAT-fs (loop2): Directory bread(block 37) failed [ 68.890773][ T6025] FAT-fs (loop2): Directory bread(block 38) failed [ 68.899585][ T6025] FAT-fs (loop2): Directory bread(block 39) failed [ 68.903182][ T6025] FAT-fs (loop2): Directory bread(block 40) failed [ 68.908049][ T6025] FAT-fs (loop2): Directory bread(block 41) failed [ 69.487089][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 69.611952][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 69.615354][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.617559][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.618869][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.622379][ T1514] cfg80211: failed to load regulatory.db [ 69.630645][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 69.633827][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.635981][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.637393][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.873644][ T6064] binder: 6059:6064 ioctl 4018620d 0 returned -22 [ 70.362194][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 70.645061][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 70.648726][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.650796][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.653974][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.663827][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 70.667029][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.669884][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.671132][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.710599][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.713748][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.249275][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 71.479349][ T6115] set_capacity_and_notify: 9 callbacks suppressed [ 71.479359][ T6115] loop2: detected capacity change from 0 to 1024 [ 71.495666][ T6115] EXT4-fs: Ignoring removed orlov option [ 71.555686][ T6115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.688283][ T6132] netlink: 'syz.3.641': attribute type 39 has an invalid length. [ 71.691040][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 71.859277][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.864896][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.939594][ T6172] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.652'. [ 73.226090][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.236114][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.785583][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 73.857831][ T6217] loop4: detected capacity change from 0 to 128 [ 73.909404][ T6217] FAT-fs (loop4): Directory bread(block 32) failed [ 73.910771][ T6217] FAT-fs (loop4): Directory bread(block 33) failed [ 73.912473][ T6217] FAT-fs (loop4): Directory bread(block 34) failed [ 73.920851][ T6217] FAT-fs (loop4): Directory bread(block 35) failed [ 73.926371][ T6217] FAT-fs (loop4): Directory bread(block 36) failed [ 73.927550][ T6217] FAT-fs (loop4): Directory bread(block 37) failed [ 73.930854][ T6217] FAT-fs (loop4): Directory bread(block 38) failed [ 73.934848][ T6217] FAT-fs (loop4): Directory bread(block 39) failed [ 73.937385][ T6217] FAT-fs (loop4): Directory bread(block 40) failed [ 73.938542][ T6217] FAT-fs (loop4): Directory bread(block 41) failed [ 74.018471][ T6217] syz.4.671: attempt to access beyond end of device [ 74.018471][ T6217] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 74.026371][ T6217] FAT-fs (loop4): Filesystem has been set read-only [ 74.030834][ T6217] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 74.129982][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 74.178585][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 74.182089][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.184063][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.185328][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.195717][ T6243] netlink: 'syz.1.684': attribute type 39 has an invalid length. [ 74.202146][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 74.204984][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.206751][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.207974][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.253347][ T6245] loop2: detected capacity change from 0 to 8192 [ 74.308648][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.310158][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.417631][ T6269] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 74.420425][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 74.421477][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.426000][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.427562][ T6269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.437952][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 74.439047][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.440288][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.463514][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 74.465296][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 74.466284][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.468486][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.477824][ T6277] netlink: 'syz.0.695': attribute type 39 has an invalid length. [ 74.483218][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 74.484348][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.485660][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.502730][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 74.503838][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.507601][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.517106][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 74.518134][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.525379][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.528262][ T6266] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 74.529360][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.530740][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 74.534872][ T6283] vhci_hcd: connection closed [ 74.536331][ T11] vhci_hcd: stop threads [ 74.538040][ T11] vhci_hcd: release socket [ 74.538816][ T11] vhci_hcd: disconnect device [ 74.540094][ T6281] vhci_hcd: connection closed [ 74.540278][ T6279] vhci_hcd: connection closed [ 74.540360][ T6271] vhci_hcd: connection closed [ 74.541100][ T6273] vhci_hcd: connection closed [ 74.543297][ T4665] vhci_hcd: stop threads [ 74.544727][ T4665] vhci_hcd: release socket [ 74.546600][ T4665] vhci_hcd: disconnect device [ 74.550068][ T6267] vhci_hcd: connection closed [ 74.551106][ T4665] vhci_hcd: stop threads [ 74.553230][ T4665] vhci_hcd: release socket [ 74.553947][ T4665] vhci_hcd: disconnect device [ 74.554768][ T6289] vhci_hcd: connection closed [ 74.555464][ T4665] vhci_hcd: stop threads [ 74.556926][ T4665] vhci_hcd: release socket [ 74.557646][ T4665] vhci_hcd: disconnect device [ 74.558398][ T4665] vhci_hcd: stop threads [ 74.559110][ T4665] vhci_hcd: release socket [ 74.560469][ T4665] vhci_hcd: disconnect device [ 74.564170][ T4665] vhci_hcd: stop threads [ 74.564895][ T4665] vhci_hcd: release socket [ 74.565758][ T4665] vhci_hcd: disconnect device [ 74.567375][ T4665] vhci_hcd: stop threads [ 74.568009][ T4665] vhci_hcd: release socket [ 74.568734][ T4665] vhci_hcd: disconnect device [ 74.611655][ T6295] loop1: detected capacity change from 0 to 8192 [ 74.632417][ T4366] vhci_hcd: vhci_device speed not set [ 74.682077][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.684188][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.685392][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.695346][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.697286][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.698643][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.926359][ T6308] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 74.932215][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.094002][ T6316] netlink: 'syz.4.706': attribute type 39 has an invalid length. [ 75.213613][ T6324] loop3: detected capacity change from 0 to 8192 [ 75.218005][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.220312][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.233148][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.252693][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.255323][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.257888][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.394227][ T6343] device ipip0 entered promiscuous mode [ 75.429438][ T6346] netlink: 'syz.3.720': attribute type 39 has an invalid length. [ 75.604638][ T6362] loop2: detected capacity change from 0 to 8192 [ 75.992096][ T6375] binder: BINDER_SET_CONTEXT_MGR already set [ 76.006788][ T6375] binder: 6367:6375 ioctl 4018620d 200000c0 returned -16 [ 76.178482][ T6380] netlink: 'syz.3.733': attribute type 39 has an invalid length. [ 76.321312][ T6396] loop0: detected capacity change from 0 to 8192 [ 76.424903][ T6404] loop3: detected capacity change from 0 to 1024 [ 76.428666][ T6404] EXT4-fs: Ignoring removed nobh option [ 76.429670][ T6404] EXT4-fs: Ignoring removed bh option [ 76.433903][ T6404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.457580][ T6404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.502979][ T6412] netlink: 'syz.0.747': attribute type 39 has an invalid length. [ 76.523733][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 76.584143][ T6415] device ipip0 entered promiscuous mode [ 76.789467][ T6444] netlink: 'syz.3.760': attribute type 39 has an invalid length. [ 76.792766][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.825240][ T6450] loop3: detected capacity change from 0 to 128 [ 76.836725][ T6450] FAT-fs (loop3): Directory bread(block 32) failed [ 76.838142][ T6450] FAT-fs (loop3): Directory bread(block 33) failed [ 76.839450][ T6450] FAT-fs (loop3): Directory bread(block 34) failed [ 76.840690][ T6450] FAT-fs (loop3): Directory bread(block 35) failed [ 76.842029][ T6450] FAT-fs (loop3): Directory bread(block 36) failed [ 76.843258][ T6450] FAT-fs (loop3): Directory bread(block 37) failed [ 76.844467][ T6450] FAT-fs (loop3): Directory bread(block 38) failed [ 76.845669][ T6450] FAT-fs (loop3): Directory bread(block 39) failed [ 76.846907][ T6450] FAT-fs (loop3): Directory bread(block 40) failed [ 76.848277][ T6450] FAT-fs (loop3): Directory bread(block 41) failed [ 76.873741][ T6450] syz.3.761: attempt to access beyond end of device [ 76.873741][ T6450] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 76.879347][ T6450] FAT-fs (loop3): Filesystem has been set read-only [ 76.881652][ T6450] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 77.148562][ T6489] loop4: detected capacity change from 0 to 512 [ 77.153947][ T6489] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.764: error while reading EA inode 32 err=-116 [ 77.156347][ T6489] EXT4-fs (loop4): Remounting filesystem read-only [ 77.157513][ T6489] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.764: error while reading EA inode 32 err=-116 [ 77.159852][ T6489] EXT4-fs (loop4): Remounting filesystem read-only [ 77.162607][ T6489] EXT4-fs (loop4): 1 orphan inode deleted [ 77.163774][ T6489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.180745][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 77.567602][ T6533] loop4: detected capacity change from 0 to 128 [ 77.573390][ T6533] FAT-fs (loop4): Directory bread(block 32) failed [ 77.574454][ T6533] FAT-fs (loop4): Directory bread(block 33) failed [ 77.575582][ T6533] FAT-fs (loop4): Directory bread(block 34) failed [ 77.576510][ T6533] FAT-fs (loop4): Directory bread(block 35) failed [ 77.577579][ T6533] FAT-fs (loop4): Directory bread(block 36) failed [ 77.578601][ T6533] FAT-fs (loop4): Directory bread(block 37) failed [ 77.579647][ T6533] FAT-fs (loop4): Directory bread(block 38) failed [ 77.580681][ T6533] FAT-fs (loop4): Directory bread(block 39) failed [ 77.583974][ T6533] FAT-fs (loop4): Directory bread(block 40) failed [ 77.584962][ T6533] FAT-fs (loop4): Directory bread(block 41) failed [ 77.620521][ T6537] __nla_validate_parse: 5 callbacks suppressed [ 77.620534][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 77.625325][ T6533] syz.4.772: attempt to access beyond end of device [ 77.625325][ T6533] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 77.628045][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.628484][ T6533] FAT-fs (loop4): Filesystem has been set read-only [ 77.630232][ T6533] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 77.635967][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.639526][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.657924][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 77.663739][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.667895][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.674596][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.166388][ T6560] loop0: detected capacity change from 0 to 8192 [ 78.222719][ T6562] loop0: detected capacity change from 0 to 1764 [ 78.262968][ T4312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.354944][ T6570] loop0: detected capacity change from 0 to 512 [ 78.367184][ T6570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.786: error while reading EA inode 32 err=-116 [ 78.369945][ T6570] EXT4-fs (loop0): Remounting filesystem read-only [ 78.371362][ T6570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.786: error while reading EA inode 32 err=-116 [ 78.373672][ T6570] EXT4-fs (loop0): Remounting filesystem read-only [ 78.375291][ T6570] EXT4-fs (loop0): 1 orphan inode deleted [ 78.376397][ T6570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.391140][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 78.437371][ T6576] loop0: detected capacity change from 0 to 1024 [ 78.454664][ T6576] EXT4-fs: Ignoring removed nobh option [ 78.455671][ T6576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.474085][ T6576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.493310][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 78.601132][ T6589] loop4: detected capacity change from 0 to 128 [ 78.627123][ T6589] FAT-fs (loop4): Directory bread(block 32) failed [ 78.632303][ T6589] FAT-fs (loop4): Directory bread(block 33) failed [ 78.634930][ T6589] FAT-fs (loop4): Directory bread(block 34) failed [ 78.636069][ T6589] FAT-fs (loop4): Directory bread(block 35) failed [ 78.637285][ T6589] FAT-fs (loop4): Directory bread(block 36) failed [ 78.638230][ T6589] FAT-fs (loop4): Directory bread(block 37) failed [ 78.639297][ T6589] FAT-fs (loop4): Directory bread(block 38) failed [ 78.640243][ T6589] FAT-fs (loop4): Directory bread(block 39) failed [ 78.649931][ T6589] FAT-fs (loop4): Directory bread(block 40) failed [ 78.651008][ T6589] FAT-fs (loop4): Directory bread(block 41) failed [ 78.703496][ T6599] loop0: detected capacity change from 0 to 512 [ 78.720131][ T6589] syz.4.792: attempt to access beyond end of device [ 78.720131][ T6589] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 78.726258][ T6589] FAT-fs (loop4): Filesystem has been set read-only [ 78.726839][ T6599] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.797: error while reading EA inode 32 err=-116 [ 78.727305][ T6589] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 78.730668][ T6599] EXT4-fs (loop0): Remounting filesystem read-only [ 78.733348][ T6599] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.797: error while reading EA inode 32 err=-116 [ 78.736655][ T6599] EXT4-fs (loop0): Remounting filesystem read-only [ 78.738981][ T6599] EXT4-fs (loop0): 1 orphan inode deleted [ 78.740081][ T6599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.759582][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 79.711115][ T6638] loop0: detected capacity change from 0 to 512 [ 79.768719][ T6638] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.810: error while reading EA inode 32 err=-116 [ 79.775449][ T6638] EXT4-fs (loop0): Remounting filesystem read-only [ 79.776913][ T6638] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.810: error while reading EA inode 32 err=-116 [ 79.779282][ T6638] EXT4-fs (loop0): Remounting filesystem read-only [ 79.780696][ T6638] EXT4-fs (loop0): 1 orphan inode deleted [ 79.785123][ T6638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.804296][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 90.330898][ T6667] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 90.410940][ T6672] loop1: detected capacity change from 0 to 512 [ 90.432300][ T6672] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.822: error while reading EA inode 32 err=-116 [ 90.438680][ T6672] EXT4-fs (loop1): Remounting filesystem read-only [ 90.439888][ T6672] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.822: error while reading EA inode 32 err=-116 [ 90.460400][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.462304][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.464164][ T6672] EXT4-fs (loop1): Remounting filesystem read-only [ 90.465557][ T6672] EXT4-fs (loop1): 1 orphan inode deleted [ 90.466440][ T6672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.478380][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 90.530468][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 90.545611][ T6687] loop1: detected capacity change from 0 to 512 [ 90.549248][ T6687] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.827: iget: bad i_size value: 38620345925642 [ 90.557825][ T6687] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.827: couldn't read orphan inode 15 (err -117) [ 90.564345][ T6687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.610412][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 90.641029][ T6695] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 90.647880][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.649793][ T6695] device bridge_slave_1 left promiscuous mode [ 90.650966][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.684778][ T6695] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 90.954089][ T6707] loop3: detected capacity change from 0 to 512 [ 90.967005][ T6707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.835: error while reading EA inode 32 err=-116 [ 90.969226][ T6707] EXT4-fs (loop3): Remounting filesystem read-only [ 90.970519][ T6707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.835: error while reading EA inode 32 err=-116 [ 90.973404][ T6707] EXT4-fs (loop3): Remounting filesystem read-only [ 90.974987][ T6707] EXT4-fs (loop3): 1 orphan inode deleted [ 90.976017][ T6707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.988641][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 91.215172][ T6728] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 91.365988][ T6754] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 91.402929][ T6754] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.406240][ T6754] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 91.533373][ T6754] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 91.542633][ T6768] netlink: 'syz.3.858': attribute type 39 has an invalid length. [ 91.553540][ T6770] netlink: 68 bytes leftover after parsing attributes in process `syz.0.859'. [ 91.553864][ T6754] device macvlan2 entered promiscuous mode [ 91.556700][ T6754] device bond1 entered promiscuous mode [ 91.558134][ T6754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.602429][ T6754] device bond1 left promiscuous mode [ 91.734337][ T6775] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 91.752671][ T6780] loop0: detected capacity change from 0 to 512 [ 91.759789][ T6780] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.863: iget: bad i_size value: 38620345925642 [ 91.763164][ T6780] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.863: couldn't read orphan inode 15 (err -117) [ 91.765265][ T6780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.792954][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 91.844953][ T6785] loop0: detected capacity change from 0 to 512 [ 91.855364][ T6785] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.864: error while reading EA inode 32 err=-116 [ 91.858629][ T6785] EXT4-fs (loop0): Remounting filesystem read-only [ 91.860864][ T6785] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.864: error while reading EA inode 32 err=-116 [ 91.867840][ T6785] EXT4-fs (loop0): Remounting filesystem read-only [ 91.870234][ T6785] EXT4-fs (loop0): 1 orphan inode deleted [ 91.872241][ T6785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.892028][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 91.959931][ T6797] netlink: 'syz.2.870': attribute type 39 has an invalid length. [ 91.995792][ T6802] loop0: detected capacity change from 0 to 512 [ 92.003159][ T6802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.046293][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 92.107998][ T6809] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 92.150781][ T6812] loop2: detected capacity change from 0 to 512 [ 92.189885][ T6812] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.876: iget: bad i_size value: 38620345925642 [ 92.198846][ T6812] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.876: couldn't read orphan inode 15 (err -117) [ 92.205810][ T6817] loop3: detected capacity change from 0 to 512 [ 92.212013][ T6812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.215502][ T6817] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.878: error while reading EA inode 32 err=-116 [ 92.225114][ T6817] EXT4-fs (loop3): Remounting filesystem read-only [ 92.227392][ T6817] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.878: error while reading EA inode 32 err=-116 [ 92.233345][ T6817] EXT4-fs (loop3): Remounting filesystem read-only [ 92.234689][ T6817] EXT4-fs (loop3): 1 orphan inode deleted [ 92.236438][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 92.237557][ T6817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.307226][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 92.328435][ T6824] netlink: 'syz.4.883': attribute type 39 has an invalid length. [ 92.500111][ T6841] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 92.530220][ T6847] loop3: detected capacity change from 0 to 512 [ 92.539488][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.577135][ T6847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.891: error while reading EA inode 32 err=-116 [ 92.579536][ T6847] EXT4-fs (loop3): Remounting filesystem read-only [ 92.580790][ T6847] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.891: error while reading EA inode 32 err=-116 [ 92.586135][ T6847] EXT4-fs (loop3): Remounting filesystem read-only [ 92.587552][ T6847] EXT4-fs (loop3): 1 orphan inode deleted [ 92.588602][ T6847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.603606][ T6841] device bridge_slave_1 left promiscuous mode [ 92.607073][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.619243][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 92.619910][ T6852] loop2: detected capacity change from 0 to 512 [ 92.638291][ T6852] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.892: iget: bad i_size value: 38620345925642 [ 92.640463][ T6852] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.892: couldn't read orphan inode 15 (err -117) [ 92.645974][ T6841] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.649512][ T6852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.685203][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 92.795914][ T6870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.809985][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.921679][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 93.038861][ T6888] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.906: iget: bad i_size value: 38620345925642 [ 93.045449][ T6888] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.906: couldn't read orphan inode 15 (err -117) [ 93.050790][ T6888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.071641][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 93.421129][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.433605][ T6924] device bridge_slave_1 left promiscuous mode [ 93.437174][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.495460][ T6924] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 93.535599][ T6937] device gtp0 entered promiscuous mode [ 93.688341][ T6949] device syzkaller0 entered promiscuous mode [ 94.157280][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.159721][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.261768][ T6997] binder: BINDER_SET_CONTEXT_MGR already set [ 94.262964][ T6997] binder: 6984:6997 ioctl 4018620d 20000180 returned -16 [ 95.010268][ T7024] tmpfs: Bad value for 'size' [ 95.083796][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 95.387546][ T7042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.390236][ T7042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.344311][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.345829][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.145292][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.146794][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.895259][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 97.895272][ T27] audit: type=1326 audit(97.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.899759][ T27] audit: type=1326 audit(97.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.907630][ T27] audit: type=1326 audit(97.880:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.910977][ T27] audit: type=1326 audit(97.880:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.915737][ T27] audit: type=1326 audit(97.880:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.919103][ T27] audit: type=1326 audit(97.880:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.920830][ T7172] device ipip0 entered promiscuous mode [ 97.925110][ T27] audit: type=1326 audit(97.880:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.928695][ T27] audit: type=1326 audit(97.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.933074][ T27] audit: type=1326 audit(97.880:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 97.936608][ T27] audit: type=1326 audit(97.880:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=83 compat=0 ip=0xffffbb575928 code=0x7ffc0000 [ 98.302310][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.304272][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.510297][ T7205] device syzkaller0 entered promiscuous mode [ 99.214492][ T7230] set_capacity_and_notify: 2 callbacks suppressed [ 99.214502][ T7230] loop7: detected capacity change from 0 to 16384 [ 99.335984][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.337960][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.393382][ C0] vcan0: j1939_tp_rxtimer: 0x0000000079d86ae0: rx timeout, send abort [ 99.895259][ C0] vcan0: j1939_tp_rxtimer: 0x0000000079d86ae0: abort rx timeout. Force session deactivation [ 99.963712][ T7267] loop1: detected capacity change from 0 to 512 [ 99.983143][ T7267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.028782][ T7267] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 100.030844][ T7267] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1060: invalid indirect mapped block 2683928664 (level 1) [ 100.034507][ T7267] EXT4-fs (loop1): Remounting filesystem read-only [ 100.036211][ T7267] EXT4-fs (loop1): 1 truncate cleaned up [ 100.037075][ T7267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.054847][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 100.130395][ T7275] binder: BINDER_SET_CONTEXT_MGR already set [ 100.131629][ T7275] binder: 7268:7275 ioctl 4018620d 20000180 returned -16 [ 100.788721][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 100.790375][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 100.958000][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.960668][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.962453][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.986504][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.988466][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.989609][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.057366][ T7326] device syzkaller0 entered promiscuous mode [ 101.460578][ T7343] binder: BINDER_SET_CONTEXT_MGR already set [ 101.461731][ T7343] binder: 7338:7343 ioctl 4018620d 20000180 returned -16 [ 101.912472][ T7369] device syzkaller0 entered promiscuous mode [ 102.123174][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 102.204232][ T7383] loop4: detected capacity change from 0 to 512 [ 102.205786][ T7383] EXT4-fs: Ignoring removed nobh option [ 102.216561][ T7383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.223145][ T7383] capability: warning: `syz.4.1104' uses 32-bit capabilities (legacy support in use) [ 102.239318][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 103.071246][ T7408] binder: BINDER_SET_CONTEXT_MGR already set [ 103.072344][ T7408] binder: 7405:7408 ioctl 4018620d 20000180 returned -16 [ 103.380470][ T7416] device syzkaller0 entered promiscuous mode [ 103.985644][ T7459] loop1: detected capacity change from 0 to 128 [ 104.054675][ T7463] loop1: detected capacity change from 0 to 512 [ 104.612037][ T7479] binder: BINDER_SET_CONTEXT_MGR already set [ 104.613014][ T7479] binder: 7471:7479 ioctl 4018620d 20000180 returned -16 [ 105.133352][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 105.133364][ T27] audit: type=1326 audit(105.120:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.137989][ T27] audit: type=1326 audit(105.120:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.145908][ T27] audit: type=1326 audit(105.120:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.155396][ T27] audit: type=1326 audit(105.120:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.164334][ T27] audit: type=1326 audit(105.120:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.170390][ T27] audit: type=1326 audit(105.120:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.174679][ T27] audit: type=1326 audit(105.120:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2175928 code=0x7ffc0000 [ 105.426539][ T7519] device syzkaller0 entered promiscuous mode [ 106.033418][ T7536] device ipip0 entered promiscuous mode [ 106.309990][ T7545] binder: BINDER_SET_CONTEXT_MGR already set [ 106.311039][ T7545] binder: 7537:7545 ioctl 4018620d 20000180 returned -16 [ 106.729132][ T7550] device syzkaller0 entered promiscuous mode [ 107.223008][ T7579] validate_nla: 5 callbacks suppressed [ 107.223019][ T7579] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 107.243629][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.247314][ T7579] team0: Port device bond0 added [ 107.260516][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 107.385493][ T7579] team0 (unregistering): Port device team_slave_0 removed [ 107.394138][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 107.409949][ T7579] team0 (unregistering): Port device bond0 removed [ 107.554671][ T7586] device syzkaller0 entered promiscuous mode [ 107.855624][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 107.896993][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.918519][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.922220][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.949226][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 107.958068][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.963542][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.964688][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.002378][ T7597] netlink: 'syz.2.1180': attribute type 10 has an invalid length. [ 108.097027][ T7603] loop1: detected capacity change from 0 to 2048 [ 108.249311][ T7603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.349914][ T27] audit: type=1326 audit(108.330:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac775928 code=0x7ffc0000 [ 108.363548][ T27] audit: type=1326 audit(108.350:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac775928 code=0x7ffc0000 [ 108.370360][ T27] audit: type=1326 audit(108.350:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac775928 code=0x7ffc0000 [ 108.377538][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1192'. [ 108.440379][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1190'. [ 108.665099][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 108.743943][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 108.747301][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.749544][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.750980][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.764314][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 108.767422][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.769615][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.777177][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.026659][ T7658] device syzkaller0 entered promiscuous mode [ 109.174873][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1207'. [ 109.876954][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 109.884599][ T7689] device syzkaller0 entered promiscuous mode [ 109.978040][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 109.981060][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.982926][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.984152][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.993179][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.994782][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.996030][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.294724][ T7714] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 110.612455][ T14] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 110.616393][ T14] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 110.619014][ T14] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 110.638159][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.640534][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.642150][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.655608][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.657643][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.658999][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.792782][ T7726] team0 (unregistering): Port device team_slave_0 removed [ 110.802914][ T7726] team0 (unregistering): Port device team_slave_1 removed [ 111.817767][ T7791] device syzkaller0 entered promiscuous mode [ 111.820511][ T7791] ------------[ cut here ]------------ [ 111.821496][ T7791] WARNING: CPU: 1 PID: 7791 at include/linux/skbuff.h:2844 em_nbyte_match+0x294/0x350 [ 111.822981][ T7791] Modules linked in: [ 111.823590][ T7791] CPU: 1 PID: 7791 Comm: syz.2.1260 Not tainted syzkaller #0 [ 111.824800][ T7791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 111.826422][ T7791] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 111.827694][ T7791] pc : em_nbyte_match+0x294/0x350 [ 111.828546][ T7791] lr : em_nbyte_match+0x294/0x350 [ 111.829369][ T7791] sp : ffff8000218c7000 [ 111.830064][ T7791] x29: ffff8000218c7000 x28: 0000000000000001 x27: 000000000000ffff [ 111.831338][ T7791] x26: 1fffe00019b922de x25: 1fffe0001ebc7ac0 x24: dfff800000000000 [ 111.832564][ T7791] x23: 000000000000ffff x22: ffff0000cdc916f6 x21: ffff0000f5e3d602 [ 111.833816][ T7791] x20: ffff0000cdc91640 x19: ffff0000f5e3d600 x18: 0000000000000000 [ 111.835100][ T7791] x17: ffff800018338000 x16: ffff8000082eeb30 x15: 0000000000000002 [ 111.836449][ T7791] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000080000 [ 111.837762][ T7791] x11: 0000000000000743 x10: ffff8000288b9000 x9 : ffff8000100b87a0 [ 111.839008][ T7791] x8 : 0000000000000744 x7 : 0000000000000000 x6 : 000000000000003f [ 111.840275][ T7791] x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000020 [ 111.841516][ T7791] x2 : 0000000000000000 x1 : 000000000000ffff x0 : 000000000000ffff [ 111.842813][ T7791] Call trace: [ 111.843327][ T7791] em_nbyte_match+0x294/0x350 [ 111.844119][ T7791] __tcf_em_tree_match+0x180/0x5e4 [ 111.844970][ T7791] basic_classify+0x138/0x30c [ 111.845684][ T7791] tcf_classify+0x1b8/0x9c4 [ 111.846416][ T7791] multiq_enqueue+0x104/0x418 [ 111.847157][ T7791] dev_qdisc_enqueue+0x5c/0x388 [ 111.847905][ T7791] __dev_queue_xmit+0xaf8/0x3134 [ 111.848712][ T7791] dev_queue_xmit+0x24/0x34 [ 111.849434][ T7791] packet_sendmsg+0x2f9c/0x3fd0 [ 111.850196][ T7791] ____sys_sendmsg+0x5c8/0x938 [ 111.850968][ T7791] __sys_sendmsg+0x288/0x374 [ 111.851695][ T7791] __arm64_sys_sendmsg+0x80/0x94 [ 111.852495][ T7791] invoke_syscall+0x98/0x2b4 [ 111.853273][ T7791] el0_svc_common+0x138/0x258 [ 111.854017][ T7791] do_el0_svc+0x58/0x130 [ 111.854726][ T7791] el0_svc+0x58/0x128 [ 111.855373][ T7791] el0t_64_sync_handler+0x84/0xf0 [ 111.856165][ T7791] el0t_64_sync+0x18c/0x190 [ 111.856825][ T7791] irq event stamp: 3949 [ 111.857446][ T7791] hardirqs last enabled at (3947): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 111.859001][ T7791] hardirqs last disabled at (3949): [] el1_dbg+0x24/0x80 [ 111.860373][ T7791] softirqs last enabled at (3938): [] local_bh_enable+0x10/0x34 [ 111.861794][ T7791] softirqs last disabled at (3948): [] local_bh_disable+0x10/0x34 [ 111.863273][ T7791] ---[ end trace 0000000000000000 ]--- [ 111.864219][ C1] vkms_vblank_simulate: vblank timer overrun