last executing test programs: 12m27.135549219s ago: executing program 2 (id=834): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x1ff, 0x1000d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12m27.001822332s ago: executing program 2 (id=836): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) 12m26.903311995s ago: executing program 2 (id=838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 12m26.745816609s ago: executing program 2 (id=841): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m25.331206213s ago: executing program 2 (id=846): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x28f4f8, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 12m25.222716796s ago: executing program 2 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x10000000, 0x400, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) 12m9.772851779s ago: executing program 32 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x10000000, 0x400, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) 2m22.547218984s ago: executing program 3 (id=3486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x55de}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m19.248502664s ago: executing program 3 (id=3493): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000380)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105eb, &(0x7f000000cf00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x138}, &(0x7f0000000100), 0x0, &(0x7f0000000380)) r3 = syz_io_uring_complete(0x0, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r3, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000480)={0x70}}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) 2m15.057787046s ago: executing program 3 (id=3498): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xed00}, 0x10}, 0x94) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x100000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000001000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063727970745f64657600"/315) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) read(r6, &(0x7f0000000040)=""/58, 0x3a) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202000200039f0207"], 0x0) chdir(&(0x7f0000000100)='./dev\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) 2m8.177651832s ago: executing program 3 (id=3507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a0104000000000000000001001e0008000a40000000000900020073797a32000000000900010073797a3009000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208"], 0x140}}, 0x0) 2m7.764194412s ago: executing program 3 (id=3509): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xed00}, 0x10}, 0x94) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x100000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000001000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063727970745f64657600"/315) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) read(r6, &(0x7f0000000040)=""/58, 0x3a) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202000200039f0207"], 0x0) chdir(&(0x7f0000000100)='./dev\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) 2m2.538052788s ago: executing program 3 (id=3516): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000900)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@flush}, {@uni_xlateno}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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") r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/4096) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) 1m47.114649541s ago: executing program 33 (id=3516): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000900)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@flush}, {@uni_xlateno}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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") r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/4096) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) 21.472928291s ago: executing program 5 (id=4016): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) 21.363880704s ago: executing program 5 (id=4019): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 21.320374445s ago: executing program 5 (id=4022): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, 0x0, 0x50) 21.281672286s ago: executing program 5 (id=4024): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/73, 0x49}, {&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3}, 0x3fffff}], 0x1, 0x2, 0x0) 21.224917767s ago: executing program 5 (id=4029): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 21.144244659s ago: executing program 5 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0xf8, 0x0, 0x2, 0x4, 0xe8, 0x6, 0x7, 0x9, 0x506, 0x15, 0x20, 0x7, 0x9, 0x6, 0xe}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 10.655920633s ago: executing program 4 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.146350609s ago: executing program 0 (id=4069): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.145951759s ago: executing program 1 (id=4070): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 9.135018639s ago: executing program 6 (id=4071): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f00000005c0)) personality(0x8) uname(&(0x7f0000000180)=""/224) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x289e0cb5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func_proto, @fwd={0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001480)=""/132, 0x34, 0x84, 0x1}, 0x28) 9.130667019s ago: executing program 4 (id=4072): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 7.521765968s ago: executing program 0 (id=4073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 7.513885058s ago: executing program 1 (id=4074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 7.513420738s ago: executing program 6 (id=4075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x0, 0x4, 0x0, 0x131c, 0x0, 0x400000004, 0x1000008}, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.46490769s ago: executing program 4 (id=4076): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 5.7978206s ago: executing program 0 (id=4077): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) 5.78756973s ago: executing program 1 (id=4078): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) 5.78036578s ago: executing program 6 (id=4079): prlimit64(0x0, 0xe, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffe00, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ec}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 3.977770254s ago: executing program 4 (id=4080): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@can_newroute={0x134, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7a, 0x65, 0x1b, 0x1, 0xe, "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", 0x0, "23f1514edfab8c08cc2e153a589a27aa04cc2973"}}]}, 0x134}}, 0x240448c8) 3.976912284s ago: executing program 0 (id=4081): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x7, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0xd, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0xc, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.976768764s ago: executing program 1 (id=4082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.969588374s ago: executing program 6 (id=4083): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.038293441s ago: executing program 0 (id=4084): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 2.024652731s ago: executing program 1 (id=4085): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 2.024018761s ago: executing program 6 (id=4086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 2.023619081s ago: executing program 4 (id=4087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 16.36599ms ago: executing program 0 (id=4088): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 16.131499ms ago: executing program 1 (id=4089): socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7.49858ms ago: executing program 6 (id=4090): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)}], 0x1}, 0x0) 0s ago: executing program 4 (id=4091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) kernel console output (not intermixed with test programs): AT-fs (loop5): Directory bread(block 73) failed [ 808.330909][T16633] syz.5.3272: attempt to access beyond end of device [ 808.330909][T16633] loop5: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 808.834552][T16639] binder: 16637:16639 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 808.884374][T16639] binder: 16637:16639 got transaction to invalid handle, 3 [ 808.885654][T16639] binder: 16639:16637 cannot find target node [ 808.886712][T16639] binder: 16637:16639 transaction call to 0:0 failed 168/29201/-22, size 0-0 line 3062 [ 808.937237][T16645] loop5: detected capacity change from 0 to 256 [ 808.945196][T16645] FAT-fs (loop5): Directory bread(block 64) failed [ 808.948761][T16645] FAT-fs (loop5): Directory bread(block 65) failed [ 808.949945][T16645] FAT-fs (loop5): Directory bread(block 66) failed [ 808.951271][ T4647] binder: undelivered TRANSACTION_ERROR: 29201 [ 808.952675][T16645] FAT-fs (loop5): Directory bread(block 67) failed [ 808.953760][T16645] FAT-fs (loop5): Directory bread(block 68) failed [ 808.954835][T16645] FAT-fs (loop5): Directory bread(block 69) failed [ 808.955916][T16645] FAT-fs (loop5): Directory bread(block 70) failed [ 808.957116][T16645] FAT-fs (loop5): Directory bread(block 71) failed [ 808.958142][T16645] FAT-fs (loop5): Directory bread(block 72) failed [ 808.959154][T16645] FAT-fs (loop5): Directory bread(block 73) failed [ 811.263772][T16660] loop0: detected capacity change from 0 to 256 [ 811.352324][T16660] FAT-fs (loop0): Directory bread(block 64) failed [ 811.353527][T16660] FAT-fs (loop0): Directory bread(block 65) failed [ 811.354608][T16660] FAT-fs (loop0): Directory bread(block 66) failed [ 811.355714][T16660] FAT-fs (loop0): Directory bread(block 67) failed [ 811.380241][T16660] FAT-fs (loop0): Directory bread(block 68) failed [ 811.581921][T16669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.583955][T16669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.756313][T16660] FAT-fs (loop0): Directory bread(block 69) failed [ 811.766322][T16660] FAT-fs (loop0): Directory bread(block 70) failed [ 811.767547][T16660] FAT-fs (loop0): Directory bread(block 71) failed [ 811.768741][T16660] FAT-fs (loop0): Directory bread(block 72) failed [ 811.769811][T16660] FAT-fs (loop0): Directory bread(block 73) failed [ 811.918737][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 814.139057][ T27] audit: type=1107 audit(813.330:74): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 814.191327][T16697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.192906][T16697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.216954][T16700] loop5: detected capacity change from 0 to 256 [ 814.224123][T16700] FAT-fs (loop5): Directory bread(block 64) failed [ 814.225326][T16700] FAT-fs (loop5): Directory bread(block 65) failed [ 814.232975][T16700] FAT-fs (loop5): Directory bread(block 66) failed [ 814.234285][T16700] FAT-fs (loop5): Directory bread(block 67) failed [ 814.235543][T16700] FAT-fs (loop5): Directory bread(block 68) failed [ 814.303452][T16700] FAT-fs (loop5): Directory bread(block 69) failed [ 814.305174][T16700] FAT-fs (loop5): Directory bread(block 70) failed [ 814.306728][T16700] FAT-fs (loop5): Directory bread(block 71) failed [ 814.308030][T16700] FAT-fs (loop5): Directory bread(block 72) failed [ 814.309287][T16700] FAT-fs (loop5): Directory bread(block 73) failed [ 814.597093][T16712] xt_hashlimit: size too large, truncated to 1048576 [ 816.866270][T16698] syz.5.3284: attempt to access beyond end of device [ 816.866270][T16698] loop5: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 817.232332][T16731] loop1: detected capacity change from 0 to 256 [ 817.288983][T16731] FAT-fs (loop1): Directory bread(block 64) failed [ 817.290215][T16731] FAT-fs (loop1): Directory bread(block 65) failed [ 817.291367][T16731] FAT-fs (loop1): Directory bread(block 66) failed [ 817.299051][T16731] FAT-fs (loop1): Directory bread(block 67) failed [ 817.300289][T16731] FAT-fs (loop1): Directory bread(block 68) failed [ 817.301382][T16731] FAT-fs (loop1): Directory bread(block 69) failed [ 817.302465][T16731] FAT-fs (loop1): Directory bread(block 70) failed [ 817.318472][T16731] FAT-fs (loop1): Directory bread(block 71) failed [ 817.319715][T16731] FAT-fs (loop1): Directory bread(block 72) failed [ 817.320805][T16731] FAT-fs (loop1): Directory bread(block 73) failed [ 817.628557][T16743] syz.1.3289: attempt to access beyond end of device [ 817.628557][T16743] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 818.832653][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3290'. [ 818.834231][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3290'. [ 819.167747][T16748] device xfrm0 entered promiscuous mode [ 819.170277][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3290'. [ 819.224460][T16754] loop1: detected capacity change from 0 to 256 [ 819.293821][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3293'. [ 819.342478][T16754] FAT-fs (loop1): Directory bread(block 64) failed [ 819.343714][T16754] FAT-fs (loop1): Directory bread(block 65) failed [ 819.344751][T16754] FAT-fs (loop1): Directory bread(block 66) failed [ 819.345802][T16754] FAT-fs (loop1): Directory bread(block 67) failed [ 819.347763][T16754] FAT-fs (loop1): Directory bread(block 68) failed [ 819.348891][T16754] FAT-fs (loop1): Directory bread(block 69) failed [ 819.355145][T16754] FAT-fs (loop1): Directory bread(block 70) failed [ 819.367717][T16754] FAT-fs (loop1): Directory bread(block 71) failed [ 819.368106][T16754] FAT-fs (loop1): Directory bread(block 72) failed [ 819.368123][T16754] FAT-fs (loop1): Directory bread(block 73) failed [ 819.650837][ T27] audit: type=1107 audit(819.640:75): pid=16760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 819.871682][T16769] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 819.873101][T16769] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 820.870831][T16773] loop5: detected capacity change from 0 to 256 [ 821.230729][T16771] netlink: 'syz.0.3298': attribute type 39 has an invalid length. [ 821.234310][T16773] FAT-fs (loop5): Directory bread(block 64) failed [ 821.235453][T16773] FAT-fs (loop5): Directory bread(block 65) failed [ 821.236953][T16773] FAT-fs (loop5): Directory bread(block 66) failed [ 821.327199][T16773] FAT-fs (loop5): Directory bread(block 67) failed [ 821.332781][T16773] FAT-fs (loop5): Directory bread(block 68) failed [ 821.334784][T16773] FAT-fs (loop5): Directory bread(block 69) failed [ 821.455718][T16773] FAT-fs (loop5): Directory bread(block 70) failed [ 821.464440][T16773] FAT-fs (loop5): Directory bread(block 71) failed [ 821.465569][T16773] FAT-fs (loop5): Directory bread(block 72) failed [ 821.471108][T16773] FAT-fs (loop5): Directory bread(block 73) failed [ 821.513500][T16777] loop3: detected capacity change from 0 to 256 [ 821.531138][T16777] FAT-fs (loop3): Directory bread(block 64) failed [ 821.532345][T16777] FAT-fs (loop3): Directory bread(block 65) failed [ 821.533469][T16777] FAT-fs (loop3): Directory bread(block 66) failed [ 821.534590][T16777] FAT-fs (loop3): Directory bread(block 67) failed [ 821.555438][T16777] FAT-fs (loop3): Directory bread(block 68) failed [ 821.636693][T16777] FAT-fs (loop3): Directory bread(block 69) failed [ 821.637955][T16777] FAT-fs (loop3): Directory bread(block 70) failed [ 821.639069][T16777] FAT-fs (loop3): Directory bread(block 71) failed [ 821.648264][T16777] FAT-fs (loop3): Directory bread(block 72) failed [ 821.649376][T16777] FAT-fs (loop3): Directory bread(block 73) failed [ 822.185988][ T4331] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 822.194774][T13473] Bluetooth: hci1: command 0x1003 tx timeout [ 822.436445][T16772] syz.5.3299: attempt to access beyond end of device [ 822.436445][T16772] loop5: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 823.371426][T16790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 823.373140][T16790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 823.603817][T16790] device xfrm0 entered promiscuous mode [ 823.606373][T16790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 824.230295][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'. [ 824.232017][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'. [ 824.233690][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'. [ 824.638972][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3307'. [ 824.762114][T16785] loop1: detected capacity change from 0 to 131072 [ 824.769159][T16785] F2FS-fs (loop1): Test dummy encryption mode enabled [ 824.821952][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 824.828837][T16785] F2FS-fs (loop1): invalid crc value [ 824.879000][T16785] F2FS-fs (loop1): Found nat_bits in checkpoint [ 824.918403][T16785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 825.288283][T16828] overlayfs: missing 'lowerdir' [ 826.166722][ T27] audit: type=1107 audit(826.150:76): pid=16823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 826.350727][T16834] netlink: 'syz.5.3309': attribute type 2 has an invalid length. [ 826.352022][T16834] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 826.960586][T16836] loop4: detected capacity change from 0 to 256 [ 827.025313][T16836] FAT-fs (loop4): Directory bread(block 64) failed [ 827.027817][T16836] FAT-fs (loop4): Directory bread(block 65) failed [ 827.028962][T16836] FAT-fs (loop4): Directory bread(block 66) failed [ 827.030204][T16836] FAT-fs (loop4): Directory bread(block 67) failed [ 827.031709][T16836] FAT-fs (loop4): Directory bread(block 68) failed [ 827.032781][T16836] FAT-fs (loop4): Directory bread(block 69) failed [ 827.033803][T16836] FAT-fs (loop4): Directory bread(block 70) failed [ 827.034928][T16836] FAT-fs (loop4): Directory bread(block 71) failed [ 827.037822][T16836] FAT-fs (loop4): Directory bread(block 72) failed [ 827.039061][T16836] FAT-fs (loop4): Directory bread(block 73) failed [ 828.520342][T16835] syz.4.3315: attempt to access beyond end of device [ 828.520342][T16835] loop4: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 828.798231][T16844] overlayfs: missing 'workdir' [ 829.186181][T16854] xt_hashlimit: size too large, truncated to 1048576 [ 829.356102][ T4331] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 829.358522][ T4342] Bluetooth: hci1: command 0x1003 tx timeout [ 829.682873][ T4342] Bluetooth: hci0: command 0x0406 tx timeout [ 831.278778][ T4342] Bluetooth: hci6: command 0x1003 tx timeout [ 831.281570][T13473] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 831.677870][T16874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3323'. [ 831.679458][T16874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3323'. [ 831.680930][T16874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3323'. [ 832.013340][ T27] audit: type=1107 audit(831.990:77): pid=16881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 833.033884][T16891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.035630][T16891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.101758][T16893] overlayfs: missing 'lowerdir' [ 833.135668][T16896] netlink: 'syz.0.3330': attribute type 39 has an invalid length. [ 834.412777][T16912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.414870][T16912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.569594][T16915] loop1: detected capacity change from 0 to 256 [ 834.585412][T16915] FAT-fs (loop1): Directory bread(block 64) failed [ 834.592120][T16915] FAT-fs (loop1): Directory bread(block 65) failed [ 834.593438][T16915] FAT-fs (loop1): Directory bread(block 66) failed [ 834.594508][T16915] FAT-fs (loop1): Directory bread(block 67) failed [ 834.595654][T16915] FAT-fs (loop1): Directory bread(block 68) failed [ 834.601174][T16915] FAT-fs (loop1): Directory bread(block 69) failed [ 834.603774][T16915] FAT-fs (loop1): Directory bread(block 70) failed [ 834.605823][T16915] FAT-fs (loop1): Directory bread(block 71) failed [ 834.608323][T16915] FAT-fs (loop1): Directory bread(block 72) failed [ 834.610966][T16915] FAT-fs (loop1): Directory bread(block 73) failed [ 834.682789][T16920] loop0: detected capacity change from 0 to 256 [ 834.734240][T16920] FAT-fs (loop0): Directory bread(block 64) failed [ 834.738837][T16920] FAT-fs (loop0): Directory bread(block 65) failed [ 834.742174][T16920] FAT-fs (loop0): Directory bread(block 66) failed [ 834.743569][T16920] FAT-fs (loop0): Directory bread(block 67) failed [ 834.749058][T16920] FAT-fs (loop0): Directory bread(block 68) failed [ 834.752182][T16920] FAT-fs (loop0): Directory bread(block 69) failed [ 834.758834][T16920] FAT-fs (loop0): Directory bread(block 70) failed [ 834.763367][T16920] FAT-fs (loop0): Directory bread(block 71) failed [ 834.770390][T16920] FAT-fs (loop0): Directory bread(block 72) failed [ 835.036024][ T4331] Bluetooth: hci3: command 0x0406 tx timeout [ 835.551945][T16914] syz.1.3335: attempt to access beyond end of device [ 835.551945][T16914] loop1: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 835.634346][T16920] FAT-fs (loop0): Directory bread(block 73) failed [ 836.001479][T16931] binder: BINDER_SET_CONTEXT_MGR already set [ 836.002707][T16931] binder: 16930:16931 ioctl 4018620d 20004a80 returned -16 [ 836.004783][T16931] binder: 16930:16931 got transaction to invalid handle, 3 [ 836.006533][T16931] binder: 16931:16930 cannot find target node [ 836.007831][T16931] binder: 16930:16931 transaction call to 0:0 failed 170/29201/-22, size 0-0 line 3062 [ 836.016353][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 836.129183][T16938] loop4: detected capacity change from 0 to 256 [ 836.139249][T16938] FAT-fs (loop4): Directory bread(block 64) failed [ 836.140735][T16938] FAT-fs (loop4): Directory bread(block 65) failed [ 836.142543][T16938] FAT-fs (loop4): Directory bread(block 66) failed [ 837.219784][T16938] FAT-fs (loop4): Directory bread(block 67) failed [ 837.221141][T16938] FAT-fs (loop4): Directory bread(block 68) failed [ 837.222404][T16938] FAT-fs (loop4): Directory bread(block 69) failed [ 837.223330][T16938] FAT-fs (loop4): Directory bread(block 70) failed [ 837.224468][T16938] FAT-fs (loop4): Directory bread(block 71) failed [ 837.225593][T16938] FAT-fs (loop4): Directory bread(block 72) failed [ 837.227425][T16938] FAT-fs (loop4): Directory bread(block 73) failed [ 837.405333][T16934] syz.0.3336: attempt to access beyond end of device [ 837.405333][T16934] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 837.810231][ T27] audit: type=1107 audit(837.800:78): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 837.900941][T16944] netlink: 'syz.3.3343': attribute type 39 has an invalid length. [ 837.922929][T16946] overlayfs: missing 'lowerdir' [ 838.643937][T16937] syz.4.3342: attempt to access beyond end of device [ 838.643937][T16937] loop4: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 839.202057][T16951] loop1: detected capacity change from 0 to 256 [ 839.535167][T16957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.537288][T16957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.717724][T16951] FAT-fs (loop1): Directory bread(block 64) failed [ 839.719448][T16951] FAT-fs (loop1): Directory bread(block 65) failed [ 839.720842][T16951] FAT-fs (loop1): Directory bread(block 66) failed [ 839.722069][T16951] FAT-fs (loop1): Directory bread(block 67) failed [ 839.723260][T16951] FAT-fs (loop1): Directory bread(block 68) failed [ 839.724447][T16951] FAT-fs (loop1): Directory bread(block 69) failed [ 839.725614][T16951] FAT-fs (loop1): Directory bread(block 70) failed [ 839.734670][T16951] FAT-fs (loop1): Directory bread(block 71) failed [ 839.736244][T16951] FAT-fs (loop1): Directory bread(block 72) failed [ 839.737273][T16951] FAT-fs (loop1): Directory bread(block 73) failed [ 841.604758][T16977] binder: BINDER_SET_CONTEXT_MGR already set [ 841.943887][T16977] binder: 16976:16977 ioctl 4018620d 20004a80 returned -16 [ 841.949148][T16977] binder: 16976:16977 got transaction to invalid handle, 3 [ 841.950758][T16977] binder: 16977:16976 cannot find target node [ 841.958086][T16977] binder: 16976:16977 transaction call to 0:0 failed 172/29201/-22, size 0-0 line 3062 [ 841.981240][ T8261] binder: undelivered TRANSACTION_ERROR: 29201 [ 842.027512][T16986] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 842.159436][T16990] netlink: 'syz.5.3355': attribute type 39 has an invalid length. [ 842.165060][T16992] loop4: detected capacity change from 0 to 256 [ 842.206974][T16992] FAT-fs (loop4): Directory bread(block 64) failed [ 842.208097][T16992] FAT-fs (loop4): Directory bread(block 65) failed [ 842.222836][T16992] FAT-fs (loop4): Directory bread(block 66) failed [ 842.224072][T16992] FAT-fs (loop4): Directory bread(block 67) failed [ 842.225204][T16992] FAT-fs (loop4): Directory bread(block 68) failed [ 842.226480][T16992] FAT-fs (loop4): Directory bread(block 69) failed [ 842.227678][T16992] FAT-fs (loop4): Directory bread(block 70) failed [ 842.228905][T16992] FAT-fs (loop4): Directory bread(block 71) failed [ 842.231788][T16992] FAT-fs (loop4): Directory bread(block 72) failed [ 842.232910][T16992] FAT-fs (loop4): Directory bread(block 73) failed [ 842.619305][T17000] loop3: detected capacity change from 0 to 256 [ 842.725394][ T27] audit: type=1107 audit(842.710:79): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 844.096236][T16991] syz.4.3356: attempt to access beyond end of device [ 844.096236][T16991] loop4: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 845.091553][T17000] FAT-fs (loop3): Directory bread(block 64) failed [ 845.092795][T17000] FAT-fs (loop3): Directory bread(block 65) failed [ 845.093937][T17000] FAT-fs (loop3): Directory bread(block 66) failed [ 845.095229][T17000] FAT-fs (loop3): Directory bread(block 67) failed [ 845.133529][T17000] FAT-fs (loop3): Directory bread(block 68) failed [ 845.134724][T17000] FAT-fs (loop3): Directory bread(block 69) failed [ 845.135883][T17000] FAT-fs (loop3): Directory bread(block 70) failed [ 845.169139][T17000] FAT-fs (loop3): Directory bread(block 71) failed [ 845.170459][T17000] FAT-fs (loop3): Directory bread(block 72) failed [ 845.171585][T17000] FAT-fs (loop3): Directory bread(block 73) failed [ 845.855076][T17028] syz.3.3359: attempt to access beyond end of device [ 845.855076][T17028] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 847.012670][T17032] loop1: detected capacity change from 0 to 256 [ 847.053639][T17032] FAT-fs (loop1): Directory bread(block 64) failed [ 847.054909][T17032] FAT-fs (loop1): Directory bread(block 65) failed [ 847.062144][T17032] FAT-fs (loop1): Directory bread(block 66) failed [ 847.063511][T17032] FAT-fs (loop1): Directory bread(block 67) failed [ 847.064628][T17032] FAT-fs (loop1): Directory bread(block 68) failed [ 847.065632][T17032] FAT-fs (loop1): Directory bread(block 69) failed [ 847.076122][T17032] FAT-fs (loop1): Directory bread(block 70) failed [ 847.077573][T17032] FAT-fs (loop1): Directory bread(block 71) failed [ 847.078826][T17032] FAT-fs (loop1): Directory bread(block 72) failed [ 847.079809][T17032] FAT-fs (loop1): Directory bread(block 73) failed [ 847.938844][T17031] syz.1.3363: attempt to access beyond end of device [ 847.938844][T17031] loop1: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 848.249797][T17055] netlink: 'syz.5.3367': attribute type 39 has an invalid length. [ 848.958614][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'. [ 849.234847][T17076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.236955][T17076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.752703][T17084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.754771][T17084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.916170][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 850.104630][T17056] loop0: detected capacity change from 0 to 131072 [ 850.112092][T17056] F2FS-fs (loop0): Test dummy encryption mode enabled [ 850.127739][T17056] F2FS-fs (loop0): invalid crc value [ 850.425509][T17056] F2FS-fs (loop0): Found nat_bits in checkpoint [ 850.442639][T17056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 850.782278][T17100] overlayfs: missing 'lowerdir' [ 851.462662][T17072] loop4: detected capacity change from 0 to 131072 [ 851.464943][T17072] F2FS-fs (loop4): Test dummy encryption mode enabled [ 851.469686][T17072] F2FS-fs (loop4): invalid crc value [ 851.528060][T17072] F2FS-fs (loop4): Found nat_bits in checkpoint [ 851.563504][T17072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 851.901961][T17116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.904024][T17116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.043272][T17118] netlink: 'syz.1.3381': attribute type 39 has an invalid length. [ 852.424339][T17133] loop4: detected capacity change from 0 to 256 [ 852.452148][T17133] FAT-fs (loop4): Directory bread(block 64) failed [ 852.453604][T17133] FAT-fs (loop4): Directory bread(block 65) failed [ 852.456109][T17133] FAT-fs (loop4): Directory bread(block 66) failed [ 852.459596][T17133] FAT-fs (loop4): Directory bread(block 67) failed [ 852.462599][T17133] FAT-fs (loop4): Directory bread(block 68) failed [ 852.463816][T17133] FAT-fs (loop4): Directory bread(block 69) failed [ 852.465189][T17133] FAT-fs (loop4): Directory bread(block 70) failed [ 852.468910][T17133] FAT-fs (loop4): Directory bread(block 71) failed [ 852.470300][T17133] FAT-fs (loop4): Directory bread(block 72) failed [ 852.471958][T17133] FAT-fs (loop4): Directory bread(block 73) failed [ 852.600016][T17140] loop0: detected capacity change from 0 to 256 [ 852.614787][T17140] FAT-fs (loop0): Directory bread(block 64) failed [ 852.618727][T17140] FAT-fs (loop0): Directory bread(block 65) failed [ 852.620308][T17140] FAT-fs (loop0): Directory bread(block 66) failed [ 852.621355][T17140] FAT-fs (loop0): Directory bread(block 67) failed [ 852.622556][T17140] FAT-fs (loop0): Directory bread(block 68) failed [ 852.623729][T17140] FAT-fs (loop0): Directory bread(block 69) failed [ 852.624847][T17140] FAT-fs (loop0): Directory bread(block 70) failed [ 852.628030][T17140] FAT-fs (loop0): Directory bread(block 71) failed [ 852.882195][T17143] syz.4.3382: attempt to access beyond end of device [ 852.882195][T17143] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 854.004998][T17140] FAT-fs (loop0): Directory bread(block 72) failed [ 854.006300][T17140] FAT-fs (loop0): Directory bread(block 73) failed [ 854.120890][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 855.011835][T17152] loop1: detected capacity change from 0 to 256 [ 855.044870][T17152] FAT-fs (loop1): Directory bread(block 64) failed [ 855.053723][T17152] FAT-fs (loop1): Directory bread(block 65) failed [ 855.054929][T17152] FAT-fs (loop1): Directory bread(block 66) failed [ 855.063834][T17152] FAT-fs (loop1): Directory bread(block 67) failed [ 855.065043][T17152] FAT-fs (loop1): Directory bread(block 68) failed [ 855.072236][ T27] audit: type=1107 audit(855.060:80): pid=17153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 855.076340][T17152] FAT-fs (loop1): Directory bread(block 69) failed [ 855.077569][T17152] FAT-fs (loop1): Directory bread(block 70) failed [ 855.078634][T17152] FAT-fs (loop1): Directory bread(block 71) failed [ 855.098029][T17152] FAT-fs (loop1): Directory bread(block 72) failed [ 855.099258][T17152] FAT-fs (loop1): Directory bread(block 73) failed [ 855.973479][T17150] syz.1.3389: attempt to access beyond end of device [ 855.973479][T17150] loop1: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 856.217643][T17162] loop0: detected capacity change from 0 to 256 [ 856.521155][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.523280][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.698853][T17162] FAT-fs (loop0): Directory bread(block 64) failed [ 856.701282][T17162] FAT-fs (loop0): Directory bread(block 65) failed [ 856.704820][T17162] FAT-fs (loop0): Directory bread(block 66) failed [ 856.709331][T17162] FAT-fs (loop0): Directory bread(block 67) failed [ 856.716720][T17162] FAT-fs (loop0): Directory bread(block 68) failed [ 856.719066][T17162] FAT-fs (loop0): Directory bread(block 69) failed [ 856.720552][T17162] FAT-fs (loop0): Directory bread(block 70) failed [ 856.723985][T17162] FAT-fs (loop0): Directory bread(block 71) failed [ 856.729489][T17162] FAT-fs (loop0): Directory bread(block 72) failed [ 856.730070][T17168] netlink: 'syz.1.3394': attribute type 39 has an invalid length. [ 856.731930][T17162] FAT-fs (loop0): Directory bread(block 73) failed [ 857.389458][T17160] syz.0.3391: attempt to access beyond end of device [ 857.389458][T17160] loop0: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 857.556970][T17179] loop3: detected capacity change from 0 to 256 [ 857.595916][T17179] FAT-fs (loop3): Directory bread(block 64) failed [ 857.600925][T17179] FAT-fs (loop3): Directory bread(block 65) failed [ 857.608869][T17179] FAT-fs (loop3): Directory bread(block 66) failed [ 857.610204][T17179] FAT-fs (loop3): Directory bread(block 67) failed [ 857.620824][T17179] FAT-fs (loop3): Directory bread(block 68) failed [ 857.627065][T17179] FAT-fs (loop3): Directory bread(block 69) failed [ 857.632713][T17179] FAT-fs (loop3): Directory bread(block 70) failed [ 857.637738][T17179] FAT-fs (loop3): Directory bread(block 71) failed [ 857.640193][T17179] FAT-fs (loop3): Directory bread(block 72) failed [ 857.647603][T17179] FAT-fs (loop3): Directory bread(block 73) failed [ 858.063872][T17185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.065940][T17185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.224106][T17188] binder: 17187:17188 ioctl c0306201 0 returned -14 [ 858.238690][T17188] binder: 17187:17188 got transaction to invalid handle, 1 [ 858.245716][T17188] binder: 17188:17187 cannot find target node [ 858.249728][T17188] binder: 17187:17188 transaction call to 0:0 failed 176/29201/-22, size 72-24 line 3062 [ 858.258125][T17188] binder: 17187:17188 got transaction to invalid handle, 3 [ 858.259317][T17188] binder: 17188:17187 cannot find target node [ 858.260330][T17188] binder: 17187:17188 transaction call to 0:0 failed 177/29201/-22, size 0-0 line 3062 [ 858.326210][ T8261] binder: undelivered TRANSACTION_ERROR: 29201 [ 858.577026][ T8261] binder: undelivered TRANSACTION_ERROR: 29201 [ 858.783104][T17177] syz.3.3397: attempt to access beyond end of device [ 858.783104][T17177] loop3: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 859.381300][T17199] loop3: detected capacity change from 0 to 256 [ 859.441949][T17199] FAT-fs (loop3): Directory bread(block 64) failed [ 859.447677][T17199] FAT-fs (loop3): Directory bread(block 65) failed [ 859.452209][T17199] FAT-fs (loop3): Directory bread(block 66) failed [ 859.454653][T17199] FAT-fs (loop3): Directory bread(block 67) failed [ 859.459105][T17199] FAT-fs (loop3): Directory bread(block 68) failed [ 859.465326][T17199] FAT-fs (loop3): Directory bread(block 69) failed [ 859.472219][T17199] FAT-fs (loop3): Directory bread(block 70) failed [ 859.475738][T17199] FAT-fs (loop3): Directory bread(block 71) failed [ 859.480338][T17199] FAT-fs (loop3): Directory bread(block 72) failed [ 859.483765][T17199] FAT-fs (loop3): Directory bread(block 73) failed [ 860.661906][T17213] loop4: detected capacity change from 0 to 256 [ 860.711987][T17213] FAT-fs (loop4): Directory bread(block 64) failed [ 860.713190][T17213] FAT-fs (loop4): Directory bread(block 65) failed [ 860.714428][T17213] FAT-fs (loop4): Directory bread(block 66) failed [ 860.749199][T17213] FAT-fs (loop4): Directory bread(block 67) failed [ 860.750216][T17213] FAT-fs (loop4): Directory bread(block 68) failed [ 860.757340][T17191] loop0: detected capacity change from 0 to 131072 [ 860.763092][T17191] F2FS-fs (loop0): Test dummy encryption mode enabled [ 860.770311][T17191] F2FS-fs (loop0): invalid crc value [ 860.771317][T17213] FAT-fs (loop4): Directory bread(block 69) failed [ 860.780095][T17213] FAT-fs (loop4): Directory bread(block 70) failed [ 860.781511][T17213] FAT-fs (loop4): Directory bread(block 71) failed [ 860.782663][T17213] FAT-fs (loop4): Directory bread(block 72) failed [ 860.783698][T17213] FAT-fs (loop4): Directory bread(block 73) failed [ 860.790783][ T27] audit: type=1107 audit(860.780:81): pid=17209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 860.800540][T17224] netlink: 'syz.3.3406': attribute type 39 has an invalid length. [ 860.802786][T17191] F2FS-fs (loop0): Found nat_bits in checkpoint [ 860.818379][T17191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 861.028281][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'. [ 861.442338][T17238] overlayfs: missing 'lowerdir' [ 861.580656][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'. [ 862.624162][T17212] syz.4.3405: attempt to access beyond end of device [ 862.624162][T17212] loop4: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 862.698545][T17254] loop5: detected capacity change from 0 to 256 [ 862.718958][T17254] FAT-fs (loop5): Directory bread(block 64) failed [ 862.721557][T17254] FAT-fs (loop5): Directory bread(block 65) failed [ 862.724500][T17254] FAT-fs (loop5): Directory bread(block 66) failed [ 862.730373][T17254] FAT-fs (loop5): Directory bread(block 67) failed [ 862.733169][T17254] FAT-fs (loop5): Directory bread(block 68) failed [ 862.736249][T17254] FAT-fs (loop5): Directory bread(block 69) failed [ 862.739003][T17254] FAT-fs (loop5): Directory bread(block 70) failed [ 862.741790][T17254] FAT-fs (loop5): Directory bread(block 71) failed [ 862.744359][T17254] FAT-fs (loop5): Directory bread(block 72) failed [ 862.750590][T17254] FAT-fs (loop5): Directory bread(block 73) failed [ 862.822543][T17243] loop1: detected capacity change from 0 to 131072 [ 862.843759][T17243] F2FS-fs (loop1): Test dummy encryption mode enabled [ 862.850059][T17243] F2FS-fs (loop1): invalid crc value [ 862.909215][T17243] F2FS-fs (loop1): Found nat_bits in checkpoint [ 863.192530][T17261] syz.5.3413: attempt to access beyond end of device [ 863.192530][T17261] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 864.097850][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.105235][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.522533][T17268] device-mapper: ioctl: name not supplied when creating device [ 864.620649][T17273] netlink: 'syz.5.3419': attribute type 39 has an invalid length. [ 865.799252][T17286] loop1: detected capacity change from 0 to 256 [ 865.811524][ T27] audit: type=1107 audit(865.800:82): pid=17279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 865.869464][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3423'. [ 866.128653][T17286] FAT-fs (loop1): Directory bread(block 64) failed [ 866.130096][T17286] FAT-fs (loop1): Directory bread(block 65) failed [ 866.131379][T17286] FAT-fs (loop1): Directory bread(block 66) failed [ 866.133582][T17286] FAT-fs (loop1): Directory bread(block 67) failed [ 866.134723][T17286] FAT-fs (loop1): Directory bread(block 68) failed [ 866.136984][T17286] FAT-fs (loop1): Directory bread(block 69) failed [ 866.139289][T17286] FAT-fs (loop1): Directory bread(block 70) failed [ 866.141525][T17286] FAT-fs (loop1): Directory bread(block 71) failed [ 866.143702][T17286] FAT-fs (loop1): Directory bread(block 72) failed [ 866.146257][T17286] FAT-fs (loop1): Directory bread(block 73) failed [ 866.581652][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.583669][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.894342][T17302] loop0: detected capacity change from 0 to 256 [ 866.932677][T17302] FAT-fs (loop0): Directory bread(block 64) failed [ 866.933967][T17302] FAT-fs (loop0): Directory bread(block 65) failed [ 866.935183][T17302] FAT-fs (loop0): Directory bread(block 66) failed [ 866.936675][T17302] FAT-fs (loop0): Directory bread(block 67) failed [ 866.939086][T17302] FAT-fs (loop0): Directory bread(block 68) failed [ 866.940382][T17302] FAT-fs (loop0): Directory bread(block 69) failed [ 866.941619][T17302] FAT-fs (loop0): Directory bread(block 70) failed [ 866.944050][T17302] FAT-fs (loop0): Directory bread(block 71) failed [ 867.000042][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3438'. [ 867.215682][T17302] FAT-fs (loop0): Directory bread(block 72) failed [ 867.217044][T17302] FAT-fs (loop0): Directory bread(block 73) failed [ 867.528054][T17306] syz.0.3427: attempt to access beyond end of device [ 867.528054][T17306] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 868.947043][T17315] device-mapper: ioctl: name not supplied when creating device [ 869.081279][T17318] netlink: 'syz.5.3440': attribute type 2 has an invalid length. [ 869.082922][T17318] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 869.876568][T17312] loop3: detected capacity change from 0 to 131072 [ 869.895386][T17312] F2FS-fs (loop3): Test dummy encryption mode enabled [ 869.909170][T17312] F2FS-fs (loop3): invalid crc value [ 869.949860][T17312] F2FS-fs (loop3): Found nat_bits in checkpoint [ 869.977996][T17343] loop0: detected capacity change from 0 to 256 [ 869.978137][T17312] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 870.005048][T17343] FAT-fs (loop0): Directory bread(block 64) failed [ 870.017675][T17343] FAT-fs (loop0): Directory bread(block 65) failed [ 870.018986][T17343] FAT-fs (loop0): Directory bread(block 66) failed [ 870.020112][T17343] FAT-fs (loop0): Directory bread(block 67) failed [ 870.038756][T17343] FAT-fs (loop0): Directory bread(block 68) failed [ 870.040091][T17343] FAT-fs (loop0): Directory bread(block 69) failed [ 870.041172][T17343] FAT-fs (loop0): Directory bread(block 70) failed [ 870.054522][T17343] FAT-fs (loop0): Directory bread(block 71) failed [ 870.055848][T17343] FAT-fs (loop0): Directory bread(block 72) failed [ 870.068846][T17343] FAT-fs (loop0): Directory bread(block 73) failed [ 870.134434][T17354] loop4: detected capacity change from 0 to 256 [ 870.291861][T17357] overlayfs: missing 'lowerdir' [ 870.369556][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 870.371227][T17358] device bridge_slave_1 left promiscuous mode [ 870.372734][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.892979][T17354] FAT-fs (loop4): Directory bread(block 64) failed [ 870.894272][T17354] FAT-fs (loop4): Directory bread(block 65) failed [ 870.895408][T17354] FAT-fs (loop4): Directory bread(block 66) failed [ 870.902046][T17354] FAT-fs (loop4): Directory bread(block 67) failed [ 870.903877][T17354] FAT-fs (loop4): Directory bread(block 68) failed [ 870.905037][T17354] FAT-fs (loop4): Directory bread(block 69) failed [ 870.922713][T17354] FAT-fs (loop4): Directory bread(block 70) failed [ 870.948810][T17354] FAT-fs (loop4): Directory bread(block 71) failed [ 870.950130][T17354] FAT-fs (loop4): Directory bread(block 72) failed [ 870.951192][T17354] FAT-fs (loop4): Directory bread(block 73) failed [ 871.039841][T17358] device bridge_slave_0 left promiscuous mode [ 871.041075][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.508956][ T27] audit: type=1107 audit(871.500:83): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 871.725814][T17378] syz.4.3439: attempt to access beyond end of device [ 871.725814][T17378] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 873.056293][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3442'. [ 873.964191][T17384] loop4: detected capacity change from 0 to 40427 [ 874.014990][T17384] F2FS-fs (loop4): invalid crc value [ 874.227784][T17387] device-mapper: ioctl: name not supplied when creating device [ 874.441743][T17384] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 874.456083][T17384] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 874.756548][T17403] netlink: 'syz.4.3448': attribute type 39 has an invalid length. [ 875.648359][T17413] loop3: detected capacity change from 0 to 131072 [ 875.661831][T17413] F2FS-fs (loop3): Test dummy encryption mode enabled [ 875.669164][T17413] F2FS-fs (loop3): invalid crc value [ 875.683446][T17413] F2FS-fs (loop3): Found nat_bits in checkpoint [ 875.685123][ T27] audit: type=1107 audit(875.670:84): pid=17417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 875.704943][T17413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 876.121184][T17441] binder: 17439:17441 got transaction to invalid handle, 1 [ 876.122523][T17441] binder: 17441:17439 cannot find target node [ 876.123547][T17441] binder: 17439:17441 transaction call to 0:0 failed 181/29201/-22, size 72-24 line 3062 [ 876.137234][T17441] binder: 17439:17441 got transaction to invalid handle, 3 [ 876.138622][T17441] binder: 17441:17439 cannot find target node [ 876.139649][T17441] binder: 17439:17441 transaction call to 0:0 failed 182/29201/-22, size 0-0 line 3062 [ 876.246154][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 876.309137][T17445] overlayfs: missing 'lowerdir' [ 876.401044][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3446'. [ 876.420121][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 876.930162][T17452] device-mapper: ioctl: name not supplied when creating device [ 877.387962][T17464] loop1: detected capacity change from 0 to 256 [ 877.429568][T17464] FAT-fs (loop1): Directory bread(block 64) failed [ 877.430808][T17464] FAT-fs (loop1): Directory bread(block 65) failed [ 877.431994][T17464] FAT-fs (loop1): Directory bread(block 66) failed [ 877.435132][T17443] loop5: detected capacity change from 0 to 131072 [ 877.446989][T17464] FAT-fs (loop1): Directory bread(block 67) failed [ 877.448189][T17464] FAT-fs (loop1): Directory bread(block 68) failed [ 877.453516][T17464] FAT-fs (loop1): Directory bread(block 69) failed [ 877.454640][T17464] FAT-fs (loop1): Directory bread(block 70) failed [ 877.455756][T17464] FAT-fs (loop1): Directory bread(block 71) failed [ 877.459756][T17443] F2FS-fs (loop5): Test dummy encryption mode enabled [ 877.467060][T17464] FAT-fs (loop1): Directory bread(block 72) failed [ 877.468322][T17464] FAT-fs (loop1): Directory bread(block 73) failed [ 877.472359][T17443] F2FS-fs (loop5): invalid crc value [ 877.503690][T17443] F2FS-fs (loop5): Found nat_bits in checkpoint [ 877.636064][T17443] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 877.925986][T17486] overlayfs: missing 'lowerdir' [ 878.069339][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3456'. [ 879.603989][T17462] syz.1.3460: attempt to access beyond end of device [ 879.603989][T17462] loop1: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 880.134776][T17501] loop1: detected capacity change from 0 to 256 [ 881.108687][T17506] netlink: 'syz.3.3458': attribute type 2 has an invalid length. [ 881.110155][T17506] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 881.129782][T17501] FAT-fs (loop1): Directory bread(block 64) failed [ 881.131052][T17501] FAT-fs (loop1): Directory bread(block 65) failed [ 881.132195][T17501] FAT-fs (loop1): Directory bread(block 66) failed [ 881.143652][T17501] FAT-fs (loop1): Directory bread(block 67) failed [ 881.144832][T17501] FAT-fs (loop1): Directory bread(block 68) failed [ 881.163846][T17501] FAT-fs (loop1): Directory bread(block 69) failed [ 881.165081][T17501] FAT-fs (loop1): Directory bread(block 70) failed [ 881.173609][T17501] FAT-fs (loop1): Directory bread(block 71) failed [ 881.173674][T17501] FAT-fs (loop1): Directory bread(block 72) failed [ 881.173690][T17501] FAT-fs (loop1): Directory bread(block 73) failed [ 881.883256][T17521] binder: 17517:17521 got transaction to invalid handle, 1 [ 881.889099][T17523] netlink: 'syz.4.3466': attribute type 2 has an invalid length. [ 881.890531][T17523] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 881.898582][T17521] binder: 17521:17517 cannot find target node [ 881.899686][T17521] binder: 17517:17521 transaction call to 0:0 failed 186/29201/-22, size 72-24 line 3062 [ 882.236835][T17521] binder: 17517:17521 got transaction to invalid handle, 3 [ 882.870229][T17521] binder: 17521:17517 cannot find target node [ 882.871367][T17521] binder: 17517:17521 transaction call to 0:0 failed 187/29201/-22, size 0-0 line 3062 [ 883.056508][T17531] device-mapper: ioctl: name not supplied when creating device [ 883.898594][T17537] device syzkaller0 entered promiscuous mode [ 883.988845][ T27] audit: type=1107 audit(883.980:85): pid=17534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 884.159703][ T8254] binder: undelivered TRANSACTION_ERROR: 29201 [ 884.206503][ T8254] binder: undelivered TRANSACTION_ERROR: 29201 [ 884.315516][T17549] loop0: detected capacity change from 0 to 256 [ 884.348578][T17549] FAT-fs (loop0): Directory bread(block 64) failed [ 884.349874][T17549] FAT-fs (loop0): Directory bread(block 65) failed [ 884.350950][T17549] FAT-fs (loop0): Directory bread(block 66) failed [ 884.352107][T17549] FAT-fs (loop0): Directory bread(block 67) failed [ 884.353200][T17549] FAT-fs (loop0): Directory bread(block 68) failed [ 884.354274][T17549] FAT-fs (loop0): Directory bread(block 69) failed [ 884.355395][T17549] FAT-fs (loop0): Directory bread(block 70) failed [ 884.386028][T17549] FAT-fs (loop0): Directory bread(block 71) failed [ 884.387269][T17549] FAT-fs (loop0): Directory bread(block 72) failed [ 884.388482][T17549] FAT-fs (loop0): Directory bread(block 73) failed [ 884.908243][T17560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.909869][T17560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.149734][T17561] syz.0.3474: attempt to access beyond end of device [ 885.149734][T17561] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 886.788404][T17541] loop1: detected capacity change from 0 to 131072 [ 886.811234][T17541] F2FS-fs (loop1): Test dummy encryption mode enabled [ 886.813062][T17541] F2FS-fs (loop1): invalid crc value [ 886.832668][T17541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 886.858654][T17541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 887.145334][T17602] overlayfs: missing 'lowerdir' [ 887.225055][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 887.226930][T17603] device bridge_slave_1 left promiscuous mode [ 887.228535][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.300150][T17603] device bridge_slave_0 left promiscuous mode [ 888.301380][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.320917][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.322582][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.755450][T17616] loop5: detected capacity change from 0 to 256 [ 888.773226][T17616] FAT-fs (loop5): Directory bread(block 64) failed [ 888.774373][T17616] FAT-fs (loop5): Directory bread(block 65) failed [ 888.775439][T17616] FAT-fs (loop5): Directory bread(block 66) failed [ 888.817808][T17616] FAT-fs (loop5): Directory bread(block 67) failed [ 888.819194][T17616] FAT-fs (loop5): Directory bread(block 68) failed [ 888.820517][T17616] FAT-fs (loop5): Directory bread(block 69) failed [ 888.827656][T17616] FAT-fs (loop5): Directory bread(block 70) failed [ 888.831038][T17616] FAT-fs (loop5): Directory bread(block 71) failed [ 888.839100][T17616] FAT-fs (loop5): Directory bread(block 72) failed [ 888.840550][T17616] FAT-fs (loop5): Directory bread(block 73) failed [ 889.828470][T17620] loop4: detected capacity change from 0 to 256 [ 889.851061][T17620] FAT-fs (loop4): Directory bread(block 64) failed [ 889.855661][T17620] FAT-fs (loop4): Directory bread(block 65) failed [ 889.864587][T17620] FAT-fs (loop4): Directory bread(block 66) failed [ 889.868495][T17620] FAT-fs (loop4): Directory bread(block 67) failed [ 889.869673][T17620] FAT-fs (loop4): Directory bread(block 68) failed [ 889.878811][T17620] FAT-fs (loop4): Directory bread(block 69) failed [ 889.880065][T17620] FAT-fs (loop4): Directory bread(block 70) failed [ 889.888273][T17620] FAT-fs (loop4): Directory bread(block 71) failed [ 889.892057][T17620] FAT-fs (loop4): Directory bread(block 72) failed [ 889.893391][T17620] FAT-fs (loop4): Directory bread(block 73) failed [ 890.033490][T17622] device syzkaller0 entered promiscuous mode [ 891.235658][T17631] device-mapper: ioctl: name not supplied when creating device [ 892.134051][T17634] loop0: detected capacity change from 0 to 256 [ 892.172255][T17634] FAT-fs (loop0): Directory bread(block 64) failed [ 892.173432][T17634] FAT-fs (loop0): Directory bread(block 65) failed [ 892.174592][T17634] FAT-fs (loop0): Directory bread(block 66) failed [ 892.175695][T17634] FAT-fs (loop0): Directory bread(block 67) failed [ 892.212590][T17634] FAT-fs (loop0): Directory bread(block 68) failed [ 892.213728][T17634] FAT-fs (loop0): Directory bread(block 69) failed [ 892.214784][T17634] FAT-fs (loop0): Directory bread(block 70) failed [ 892.215842][T17634] FAT-fs (loop0): Directory bread(block 71) failed [ 892.229101][T17634] FAT-fs (loop0): Directory bread(block 72) failed [ 892.232072][T17634] FAT-fs (loop0): Directory bread(block 73) failed [ 892.352773][ T27] audit: type=1107 audit(892.340:86): pid=17639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 892.498615][T17646] syz.0.3489: attempt to access beyond end of device [ 892.498615][T17646] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 894.160683][T17661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.163285][T17661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.490016][T17636] loop4: detected capacity change from 0 to 131072 [ 894.495100][T17636] F2FS-fs (loop4): Test dummy encryption mode enabled [ 894.499460][T17636] F2FS-fs (loop4): invalid crc value [ 894.528960][T17636] F2FS-fs (loop4): Found nat_bits in checkpoint [ 894.549656][T17636] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 894.582642][T17645] loop1: detected capacity change from 0 to 131072 [ 894.599392][T17645] F2FS-fs (loop1): Test dummy encryption mode enabled [ 894.600979][T17645] F2FS-fs (loop1): invalid crc value [ 894.653990][T17645] F2FS-fs (loop1): Found nat_bits in checkpoint [ 894.655016][T17648] loop3: detected capacity change from 0 to 131072 [ 894.661706][T17648] F2FS-fs (loop3): Test dummy encryption mode enabled [ 894.665244][T17648] F2FS-fs (loop3): invalid crc value [ 894.673871][T17645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 894.681377][T17648] F2FS-fs (loop3): Found nat_bits in checkpoint [ 894.874781][T17674] overlayfs: missing 'lowerdir' [ 894.902914][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 894.904593][T17674] device bridge_slave_1 left promiscuous mode [ 894.906097][T17674] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.114326][T17674] device bridge_slave_0 left promiscuous mode [ 895.115937][T17674] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.518542][T17648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 895.865158][T17678] overlayfs: missing 'lowerdir' [ 896.522334][T17685] loop0: detected capacity change from 0 to 256 [ 896.549039][T17685] FAT-fs (loop0): Directory bread(block 64) failed [ 896.552486][T17685] FAT-fs (loop0): Directory bread(block 65) failed [ 896.554944][T17685] FAT-fs (loop0): Directory bread(block 66) failed [ 896.558033][T17685] FAT-fs (loop0): Directory bread(block 67) failed [ 896.561623][T17685] FAT-fs (loop0): Directory bread(block 68) failed [ 896.562916][T17685] FAT-fs (loop0): Directory bread(block 69) failed [ 896.564200][T17685] FAT-fs (loop0): Directory bread(block 70) failed [ 896.565445][T17685] FAT-fs (loop0): Directory bread(block 71) failed [ 896.571041][T17685] FAT-fs (loop0): Directory bread(block 72) failed [ 896.572314][T17685] FAT-fs (loop0): Directory bread(block 73) failed [ 897.239385][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3493'. [ 897.641136][T17689] loop1: detected capacity change from 0 to 256 [ 897.682407][T17689] FAT-fs (loop1): Directory bread(block 64) failed [ 897.683667][T17689] FAT-fs (loop1): Directory bread(block 65) failed [ 897.684865][T17689] FAT-fs (loop1): Directory bread(block 66) failed [ 897.685870][T17689] FAT-fs (loop1): Directory bread(block 67) failed [ 897.720853][T17689] FAT-fs (loop1): Directory bread(block 68) failed [ 897.722014][T17689] FAT-fs (loop1): Directory bread(block 69) failed [ 897.723101][T17689] FAT-fs (loop1): Directory bread(block 70) failed [ 897.732666][T17689] FAT-fs (loop1): Directory bread(block 71) failed [ 897.733931][T17689] FAT-fs (loop1): Directory bread(block 72) failed [ 897.735232][T17689] FAT-fs (loop1): Directory bread(block 73) failed [ 897.952383][T17695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.954286][T17695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.212276][T17698] device-mapper: ioctl: name not supplied when creating device [ 899.122500][T17703] loop4: detected capacity change from 0 to 256 [ 899.148563][T17703] FAT-fs (loop4): Directory bread(block 64) failed [ 899.150906][T17703] FAT-fs (loop4): Directory bread(block 65) failed [ 899.153193][T17703] FAT-fs (loop4): Directory bread(block 66) failed [ 899.154555][T17703] FAT-fs (loop4): Directory bread(block 67) failed [ 899.159828][T17703] FAT-fs (loop4): Directory bread(block 68) failed [ 899.161130][T17703] FAT-fs (loop4): Directory bread(block 69) failed [ 899.162367][T17703] FAT-fs (loop4): Directory bread(block 70) failed [ 899.163400][T17703] FAT-fs (loop4): Directory bread(block 71) failed [ 899.164491][T17703] FAT-fs (loop4): Directory bread(block 72) failed [ 899.165743][T17703] FAT-fs (loop4): Directory bread(block 73) failed [ 899.464601][T17708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.466247][T17708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.302556][T17727] device syzkaller0 entered promiscuous mode [ 904.122073][T17733] xt_hashlimit: size too large, truncated to 1048576 [ 904.615200][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'. [ 904.618704][T17739] loop4: detected capacity change from 0 to 256 [ 904.628168][T17739] FAT-fs (loop4): Directory bread(block 64) failed [ 904.629296][T17739] FAT-fs (loop4): Directory bread(block 65) failed [ 904.630616][T17739] FAT-fs (loop4): Directory bread(block 66) failed [ 904.631772][T17739] FAT-fs (loop4): Directory bread(block 67) failed [ 904.632953][T17739] FAT-fs (loop4): Directory bread(block 68) failed [ 904.634020][T17739] FAT-fs (loop4): Directory bread(block 69) failed [ 904.635034][T17739] FAT-fs (loop4): Directory bread(block 70) failed [ 904.753278][T17739] FAT-fs (loop4): Directory bread(block 71) failed [ 904.754661][T17739] FAT-fs (loop4): Directory bread(block 72) failed [ 904.755732][T17739] FAT-fs (loop4): Directory bread(block 73) failed [ 904.798410][T17743] device syzkaller0 entered promiscuous mode [ 907.307736][T17761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.309655][T17761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.365083][T17762] netlink: 'syz.1.3523': attribute type 2 has an invalid length. [ 908.366622][T17762] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 908.496598][T17765] loop0: detected capacity change from 0 to 256 [ 908.533095][T17765] FAT-fs (loop0): Directory bread(block 64) failed [ 908.540765][T17765] FAT-fs (loop0): Directory bread(block 65) failed [ 908.544783][T17765] FAT-fs (loop0): Directory bread(block 66) failed [ 908.548394][T17765] FAT-fs (loop0): Directory bread(block 67) failed [ 908.559092][T17765] FAT-fs (loop0): Directory bread(block 68) failed [ 908.563103][T17765] FAT-fs (loop0): Directory bread(block 69) failed [ 908.569754][T17765] FAT-fs (loop0): Directory bread(block 70) failed [ 908.571073][T17765] FAT-fs (loop0): Directory bread(block 71) failed [ 908.577551][T17765] FAT-fs (loop0): Directory bread(block 72) failed [ 908.582015][T17765] FAT-fs (loop0): Directory bread(block 73) failed [ 908.938796][T17772] netlink: 'syz.1.3514': attribute type 2 has an invalid length. [ 908.940150][T17772] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 910.062535][T17776] loop3: detected capacity change from 0 to 256 [ 910.068552][T17775] loop5: detected capacity change from 0 to 256 [ 910.090555][T17775] FAT-fs (loop5): Directory bread(block 64) failed [ 910.090581][T17775] FAT-fs (loop5): Directory bread(block 65) failed [ 910.090612][T17775] FAT-fs (loop5): Directory bread(block 66) failed [ 910.090627][T17775] FAT-fs (loop5): Directory bread(block 67) failed [ 910.090656][T17775] FAT-fs (loop5): Directory bread(block 68) failed [ 910.090670][T17775] FAT-fs (loop5): Directory bread(block 69) failed [ 910.090698][T17775] FAT-fs (loop5): Directory bread(block 70) failed [ 910.090712][T17775] FAT-fs (loop5): Directory bread(block 71) failed [ 910.090765][T17775] FAT-fs (loop5): Directory bread(block 72) failed [ 910.090779][T17775] FAT-fs (loop5): Directory bread(block 73) failed [ 910.108972][T17776] FAT-fs (loop3): Directory bread(block 64) failed [ 910.108996][T17776] FAT-fs (loop3): Directory bread(block 65) failed [ 910.109053][T17776] FAT-fs (loop3): Directory bread(block 66) failed [ 910.109068][T17776] FAT-fs (loop3): Directory bread(block 67) failed [ 910.109101][T17776] FAT-fs (loop3): Directory bread(block 68) failed [ 910.109115][T17776] FAT-fs (loop3): Directory bread(block 69) failed [ 910.109159][T17776] FAT-fs (loop3): Directory bread(block 70) failed [ 910.109173][T17776] FAT-fs (loop3): Directory bread(block 71) failed [ 910.109202][T17776] FAT-fs (loop3): Directory bread(block 72) failed [ 910.109216][T17776] FAT-fs (loop3): Directory bread(block 73) failed [ 911.110722][T17768] syz.5.3515: attempt to access beyond end of device [ 911.110722][T17768] loop5: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 911.292192][T17786] loop1: detected capacity change from 0 to 256 [ 911.329385][T17786] FAT-fs (loop1): Directory bread(block 64) failed [ 911.330705][T17786] FAT-fs (loop1): Directory bread(block 65) failed [ 911.331820][T17786] FAT-fs (loop1): Directory bread(block 66) failed [ 911.332906][T17786] FAT-fs (loop1): Directory bread(block 67) failed [ 911.421547][T17786] FAT-fs (loop1): Directory bread(block 68) failed [ 911.422779][T17786] FAT-fs (loop1): Directory bread(block 69) failed [ 911.424068][T17786] FAT-fs (loop1): Directory bread(block 70) failed [ 911.425185][T17786] FAT-fs (loop1): Directory bread(block 71) failed [ 911.438774][T17786] FAT-fs (loop1): Directory bread(block 72) failed [ 911.439878][T17786] FAT-fs (loop1): Directory bread(block 73) failed [ 911.831035][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 911.851455][T17786] syz.1.3520: attempt to access beyond end of device [ 911.851455][T17786] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 911.995175][T17795] loop4: detected capacity change from 0 to 256 [ 912.028435][T17795] FAT-fs (loop4): Directory bread(block 64) failed [ 912.031979][T17795] FAT-fs (loop4): Directory bread(block 65) failed [ 912.035453][T17795] FAT-fs (loop4): Directory bread(block 66) failed [ 912.116272][T17795] FAT-fs (loop4): Directory bread(block 67) failed [ 912.117372][T17795] FAT-fs (loop4): Directory bread(block 68) failed [ 912.118446][T17795] FAT-fs (loop4): Directory bread(block 69) failed [ 912.119551][T17795] FAT-fs (loop4): Directory bread(block 70) failed [ 912.120595][T17795] FAT-fs (loop4): Directory bread(block 71) failed [ 912.121664][T17795] FAT-fs (loop4): Directory bread(block 72) failed [ 912.122590][T17795] FAT-fs (loop4): Directory bread(block 73) failed [ 913.255022][T17807] netlink: 'syz.5.3527': attribute type 2 has an invalid length. [ 913.256503][T17807] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 914.387713][T17809] syz.4.3525: attempt to access beyond end of device [ 914.387713][T17809] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 914.395748][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'. [ 915.674473][T17823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.676525][T17823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.792140][T17818] binder: 17817:17818 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 915.812816][T17818] binder: 17817:17818 ioctl 4018620d 0 returned -22 [ 915.814231][T17818] binder: 17817:17818 Acquire 1 refcount change on invalid ref 0 ret -22 [ 915.824817][T17818] binder: 17817:17818 got transaction to invalid handle, 1 [ 915.826673][T17818] binder: 17818:17817 cannot find target node [ 915.827624][T17818] binder: 17817:17818 transaction call to 0:0 failed 188/29201/-22, size 72-24 line 3062 [ 915.835734][T17818] binder: 17817:17818 got transaction to invalid handle, 3 [ 915.837428][T17818] binder: 17818:17817 cannot find target node [ 915.838428][T17818] binder: 17817:17818 transaction call to 0:0 failed 189/29201/-22, size 0-0 line 3062 [ 915.959346][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 916.255253][T17833] loop0: detected capacity change from 0 to 256 [ 916.302066][T17835] loop4: detected capacity change from 0 to 256 [ 917.216041][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 918.220189][T17837] loop1: detected capacity change from 0 to 256 [ 919.371546][T17837] FAT-fs (loop1): Directory bread(block 64) failed [ 919.372770][T17837] FAT-fs (loop1): Directory bread(block 65) failed [ 919.373845][T17837] FAT-fs (loop1): Directory bread(block 66) failed [ 919.375097][T17837] FAT-fs (loop1): Directory bread(block 67) failed [ 919.388690][T17839] loop5: detected capacity change from 0 to 256 [ 919.398949][T17837] FAT-fs (loop1): Directory bread(block 68) failed [ 919.402274][T17839] FAT-fs (loop5): Directory bread(block 64) failed [ 919.404742][T17837] FAT-fs (loop1): Directory bread(block 69) failed [ 919.405940][T17839] FAT-fs (loop5): Directory bread(block 65) failed [ 919.410369][T17837] FAT-fs (loop1): Directory bread(block 70) failed [ 919.412759][T17839] FAT-fs (loop5): Directory bread(block 66) failed [ 919.413934][T17837] FAT-fs (loop1): Directory bread(block 71) failed [ 919.417238][T17839] FAT-fs (loop5): Directory bread(block 67) failed [ 919.419506][T17837] FAT-fs (loop1): Directory bread(block 72) failed [ 919.420782][T17837] FAT-fs (loop1): Directory bread(block 73) failed [ 919.422131][T17839] FAT-fs (loop5): Directory bread(block 68) failed [ 919.425539][T17839] FAT-fs (loop5): Directory bread(block 69) failed [ 919.431892][T17839] FAT-fs (loop5): Directory bread(block 70) failed [ 919.433148][T17839] FAT-fs (loop5): Directory bread(block 71) failed [ 919.459760][T17839] FAT-fs (loop5): Directory bread(block 72) failed [ 919.461016][T17839] FAT-fs (loop5): Directory bread(block 73) failed [ 919.573832][T15784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 919.911126][T17845] loop0: detected capacity change from 0 to 256 [ 919.940363][T17845] FAT-fs (loop0): Directory bread(block 64) failed [ 919.941648][T17845] FAT-fs (loop0): Directory bread(block 65) failed [ 919.942958][T17845] FAT-fs (loop0): Directory bread(block 66) failed [ 919.944123][T17845] FAT-fs (loop0): Directory bread(block 67) failed [ 919.945348][T17845] FAT-fs (loop0): Directory bread(block 68) failed [ 919.949844][T17845] FAT-fs (loop0): Directory bread(block 69) failed [ 919.951119][T17845] FAT-fs (loop0): Directory bread(block 70) failed [ 919.954404][T17845] FAT-fs (loop0): Directory bread(block 71) failed [ 919.955617][T17845] FAT-fs (loop0): Directory bread(block 72) failed [ 919.958145][T17845] FAT-fs (loop0): Directory bread(block 73) failed [ 919.961474][T17848] netlink: 'syz.5.3538': attribute type 39 has an invalid length. [ 920.321189][T17836] syz.1.3534: attempt to access beyond end of device [ 920.321189][T17836] loop1: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 920.868944][T17856] xt_hashlimit: size too large, truncated to 1048576 [ 922.923470][T17859] syz.0.3536: attempt to access beyond end of device [ 922.923470][T17859] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 923.342015][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 924.114719][T17868] loop5: detected capacity change from 0 to 256 [ 924.655163][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.657133][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.537773][T17873] binder: 17872:17873 ioctl 4018620d 0 returned -22 [ 925.542166][T17873] binder: tried to use weak ref as strong ref [ 925.543253][T17873] binder: 17872:17873 Acquire 1 refcount change on invalid ref 0 ret -22 [ 925.558452][T17875] netlink: 4716 bytes leftover after parsing attributes in process `syz.4.3545'. [ 925.560424][T17873] binder: 17872:17873 got transaction to invalid handle, 1 [ 925.561616][T17873] binder: 17873:17872 cannot find target node [ 925.562605][T17873] binder: 17872:17873 transaction call to 0:0 failed 192/29201/-22, size 72-24 line 3062 [ 925.585009][T17873] binder: 17872:17873 got transaction to invalid handle, 3 [ 925.594303][T17873] binder: 17873:17872 cannot find target node [ 925.595562][T17873] binder: 17872:17873 transaction call to 0:0 failed 193/29201/-22, size 0-0 line 3062 [ 925.689766][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 925.712957][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.734884][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.738195][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 925.749701][T17878] loop0: detected capacity change from 0 to 256 [ 925.751738][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.753834][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.756462][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 925.757722][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.790063][T17884] loop1: detected capacity change from 0 to 256 [ 925.795361][T17878] FAT-fs (loop0): Directory bread(block 64) failed [ 925.796818][T17878] FAT-fs (loop0): Directory bread(block 65) failed [ 925.811050][T17882] device syzkaller0 entered promiscuous mode [ 925.817621][T17878] FAT-fs (loop0): Directory bread(block 66) failed [ 925.818841][T17878] FAT-fs (loop0): Directory bread(block 67) failed [ 925.819968][T17878] FAT-fs (loop0): Directory bread(block 68) failed [ 925.821014][T17878] FAT-fs (loop0): Directory bread(block 69) failed [ 925.835927][T17884] FAT-fs (loop1): Directory bread(block 64) failed [ 925.839773][T17884] FAT-fs (loop1): Directory bread(block 65) failed [ 925.841025][T17884] FAT-fs (loop1): Directory bread(block 66) failed [ 925.842152][T17884] FAT-fs (loop1): Directory bread(block 67) failed [ 925.843384][T17884] FAT-fs (loop1): Directory bread(block 68) failed [ 925.844517][T17884] FAT-fs (loop1): Directory bread(block 69) failed [ 925.845838][T17884] FAT-fs (loop1): Directory bread(block 70) failed [ 925.854471][T17878] FAT-fs (loop0): Directory bread(block 70) failed [ 925.855728][T17878] FAT-fs (loop0): Directory bread(block 71) failed [ 925.865625][T17884] FAT-fs (loop1): Directory bread(block 71) failed [ 925.867334][T17884] FAT-fs (loop1): Directory bread(block 72) failed [ 925.868468][T17884] FAT-fs (loop1): Directory bread(block 73) failed [ 925.870147][T17878] FAT-fs (loop0): Directory bread(block 72) failed [ 925.871232][T17878] FAT-fs (loop0): Directory bread(block 73) failed [ 926.067559][T17892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.069650][T17892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.229124][T17883] syz.1.3548: attempt to access beyond end of device [ 926.229124][T17883] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 926.623350][T17897] syz.0.3546: attempt to access beyond end of device [ 926.623350][T17897] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 927.845639][T17876] chnl_net:caif_netlink_parms(): no params data found [ 927.855829][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 928.212469][T17908] loop4: detected capacity change from 0 to 256 [ 928.244611][T17908] FAT-fs (loop4): Directory bread(block 64) failed [ 928.249084][T17908] FAT-fs (loop4): Directory bread(block 65) failed [ 928.250641][T17908] FAT-fs (loop4): Directory bread(block 66) failed [ 928.251913][T17908] FAT-fs (loop4): Directory bread(block 67) failed [ 928.253130][T17908] FAT-fs (loop4): Directory bread(block 68) failed [ 928.254496][T17908] FAT-fs (loop4): Directory bread(block 69) failed [ 928.255665][T17908] FAT-fs (loop4): Directory bread(block 70) failed [ 928.257459][T17908] FAT-fs (loop4): Directory bread(block 71) failed [ 928.258826][T17908] FAT-fs (loop4): Directory bread(block 72) failed [ 928.260067][T17908] FAT-fs (loop4): Directory bread(block 73) failed [ 928.405728][T17911] xt_hashlimit: size too large, truncated to 1048576 [ 928.864420][T17913] syz.4.3561: attempt to access beyond end of device [ 928.864420][T17913] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 930.186827][T13473] Bluetooth: hci1: command 0x041b tx timeout [ 930.659531][ T4389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.797572][T17920] loop1: detected capacity change from 0 to 256 [ 930.903075][T17920] FAT-fs (loop1): Directory bread(block 64) failed [ 930.904298][T17920] FAT-fs (loop1): Directory bread(block 65) failed [ 930.905315][T17920] FAT-fs (loop1): Directory bread(block 66) failed [ 930.916129][T17920] FAT-fs (loop1): Directory bread(block 67) failed [ 930.917505][T17920] FAT-fs (loop1): Directory bread(block 68) failed [ 930.918698][T17920] FAT-fs (loop1): Directory bread(block 69) failed [ 930.919854][T17920] FAT-fs (loop1): Directory bread(block 70) failed [ 930.920933][T17920] FAT-fs (loop1): Directory bread(block 71) failed [ 930.950861][T17876] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.956269][T17876] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.983539][T17876] device bridge_slave_0 entered promiscuous mode [ 930.985559][T17920] FAT-fs (loop1): Directory bread(block 72) failed [ 931.002002][T17920] FAT-fs (loop1): Directory bread(block 73) failed [ 931.017603][T17924] binder: 17923:17924 ioctl 4018620d 0 returned -22 [ 931.018997][T17924] binder: tried to use weak ref as strong ref [ 931.020002][T17924] binder: 17923:17924 Acquire 1 refcount change on invalid ref 0 ret -22 [ 931.046260][T17924] binder: 17923:17924 got transaction to invalid handle, 1 [ 931.047659][T17924] binder: 17924:17923 cannot find target node [ 931.048709][T17924] binder: 17923:17924 transaction call to 0:0 failed 196/29201/-22, size 72-24 line 3062 [ 931.057093][T17924] binder: 17923:17924 got transaction to invalid handle, 3 [ 931.058259][T17924] binder: 17924:17923 cannot find target node [ 931.059262][T17924] binder: 17923:17924 transaction call to 0:0 failed 197/29201/-22, size 0-0 line 3062 [ 931.131115][ T4389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.134184][T17876] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.135452][T17876] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.137322][T17876] device bridge_slave_1 entered promiscuous mode [ 931.146276][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 931.155417][T17876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.158607][T17876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.256979][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3555'. [ 931.399799][T17928] syz.1.3554: attempt to access beyond end of device [ 931.399799][T17928] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 931.709583][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 932.117418][ T4389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.152067][T17876] team0: Port device team_slave_0 added [ 932.154374][T17876] team0: Port device team_slave_1 added [ 932.201613][T17876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.202874][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.220331][T17876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.230056][T17916] loop0: detected capacity change from 0 to 131072 [ 932.233061][T17916] F2FS-fs (loop0): Test dummy encryption mode enabled [ 932.234633][T17916] F2FS-fs (loop0): invalid crc value [ 932.236082][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 932.299559][ T4389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.312793][T17876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.313917][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.322974][T17876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.333549][T17916] F2FS-fs (loop0): Found nat_bits in checkpoint [ 932.357300][T17916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 932.420241][T17876] device hsr_slave_0 entered promiscuous mode [ 932.508631][T17876] device hsr_slave_1 entered promiscuous mode [ 933.718726][T17950] loop5: detected capacity change from 0 to 256 [ 934.111732][T17876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.113294][T17876] Cannot create hsr debugfs directory [ 934.125503][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 934.316058][T13473] Bluetooth: hci1: command 0x0419 tx timeout [ 934.382917][T17876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 934.557220][T17876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 934.614150][T17876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 934.718913][T17876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 935.253341][T17959] loop1: detected capacity change from 0 to 131072 [ 935.262150][T17984] device syzkaller0 entered promiscuous mode [ 935.263409][T17959] F2FS-fs (loop1): Test dummy encryption mode enabled [ 935.265880][T17959] F2FS-fs (loop1): invalid crc value [ 935.270067][T17959] F2FS-fs (loop1): Found nat_bits in checkpoint [ 935.292014][T17959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 936.236249][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3562'. [ 936.267699][T17876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.309696][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.311403][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.924675][T18024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.926758][T18024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.209454][T17876] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.210859][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 937.258794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 937.260784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 937.262785][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.263983][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.269863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 937.273740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 937.277623][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.278900][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.281358][T18029] loop5: detected capacity change from 0 to 1024 [ 937.282750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 937.285158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 937.289440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 937.291516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 937.299078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 937.304684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 937.308907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 937.312759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 937.315482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 937.318053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 937.319669][T18029] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.3569: lblock 2 mapped to illegal pblock 2 (length 1) [ 937.319776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.323944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 937.346107][T18029] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 937.347622][T18029] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.3569: lblock 0 mapped to illegal pblock 48 (length 1) [ 937.350208][T18029] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 937.352767][T18029] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3569: Failed to acquire dquot type 0 [ 937.360777][T18029] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 937.371385][T18029] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.3569: mark_inode_dirty error [ 937.378809][T18029] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 937.380540][T18029] EXT4-fs (loop5): 1 orphan inode deleted [ 937.381425][T18029] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 937.406478][T17947] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 937.412519][T17947] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 937.413972][T17947] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 937.453221][ T7687] EXT4-fs (loop5): unmounting filesystem. [ 937.454537][ T7687] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 937.476361][T18039] netlink: 4716 bytes leftover after parsing attributes in process `syz.1.3568'. [ 937.518319][ T7687] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 937.527605][ T7687] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 937.626201][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3579'. [ 937.876262][T18052] loop5: detected capacity change from 0 to 256 [ 937.900400][T18052] FAT-fs (loop5): Directory bread(block 64) failed [ 937.908050][T18052] FAT-fs (loop5): Directory bread(block 65) failed [ 937.914634][T18052] FAT-fs (loop5): Directory bread(block 66) failed [ 937.925261][T18052] FAT-fs (loop5): Directory bread(block 67) failed [ 937.930667][T18052] FAT-fs (loop5): Directory bread(block 68) failed [ 937.934013][T18052] FAT-fs (loop5): Directory bread(block 69) failed [ 937.937371][T18052] FAT-fs (loop5): Directory bread(block 70) failed [ 937.940735][T18052] FAT-fs (loop5): Directory bread(block 71) failed [ 937.943168][T18052] FAT-fs (loop5): Directory bread(block 72) failed [ 937.949922][T18052] FAT-fs (loop5): Directory bread(block 73) failed [ 937.974536][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 937.976335][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.980703][T17876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.290126][T18067] syz.5.3570: attempt to access beyond end of device [ 938.290126][T18067] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 940.166646][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 940.168606][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 940.230232][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 940.231979][T17012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 940.237403][T18055] loop1: detected capacity change from 0 to 131072 [ 940.243341][T17876] device veth0_vlan entered promiscuous mode [ 940.245658][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 940.251676][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 940.266075][T18055] F2FS-fs (loop1): Test dummy encryption mode enabled [ 940.275175][T18055] F2FS-fs (loop1): invalid crc value [ 940.275700][T18111] loop4: detected capacity change from 0 to 256 [ 940.289118][T18055] F2FS-fs (loop1): Found nat_bits in checkpoint [ 940.293955][T18111] FAT-fs (loop4): Directory bread(block 64) failed [ 940.299615][T18111] FAT-fs (loop4): Directory bread(block 65) failed [ 940.302955][T18055] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 940.308669][T18111] FAT-fs (loop4): Directory bread(block 66) failed [ 940.309931][T18111] FAT-fs (loop4): Directory bread(block 67) failed [ 940.315929][T18111] FAT-fs (loop4): Directory bread(block 68) failed [ 940.322265][T18111] FAT-fs (loop4): Directory bread(block 69) failed [ 940.323490][T18111] FAT-fs (loop4): Directory bread(block 70) failed [ 940.324662][T18111] FAT-fs (loop4): Directory bread(block 71) failed [ 940.326228][T18111] FAT-fs (loop4): Directory bread(block 72) failed [ 940.327495][T18111] FAT-fs (loop4): Directory bread(block 73) failed [ 942.940938][ T27] audit: type=1107 audit(942.830:87): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 943.019237][T18141] loop5: detected capacity change from 0 to 256 [ 943.955117][T18152] loop0: detected capacity change from 0 to 256 [ 944.226666][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 944.784839][T17876] device veth1_vlan entered promiscuous mode [ 944.799069][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 944.800869][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 944.803681][T17876] device veth0_macvtap entered promiscuous mode [ 944.809873][T17876] device veth1_macvtap entered promiscuous mode [ 944.816901][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.818667][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.820322][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.821931][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.823455][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.825134][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.830116][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.831749][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.833873][T17876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.835326][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 944.836881][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 944.838400][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 944.840164][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 945.016543][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.075423][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.079501][T18164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.082939][T18164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.211249][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.216022][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.217644][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.219198][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.220711][T17876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.222325][T17876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.238625][T17876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.285817][ T4389] device hsr_slave_0 left promiscuous mode [ 945.319439][ T4389] device hsr_slave_1 left promiscuous mode [ 945.358926][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.360338][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.362155][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.363392][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.493213][ T4389] device veth1_macvtap left promiscuous mode [ 945.555787][ T4389] device veth0_macvtap left promiscuous mode [ 945.557186][ T4389] device veth1_vlan left promiscuous mode [ 945.563402][T18182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.565545][T18182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.219558][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 948.423930][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 948.867630][T18192] loop1: detected capacity change from 0 to 256 [ 949.413217][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.434990][T18194] loop4: detected capacity change from 0 to 256 [ 949.455865][T18194] FAT-fs (loop4): Directory bread(block 64) failed [ 949.461173][T18194] FAT-fs (loop4): Directory bread(block 65) failed [ 949.462508][T18194] FAT-fs (loop4): Directory bread(block 66) failed [ 949.463552][T18194] FAT-fs (loop4): Directory bread(block 67) failed [ 949.464539][T18194] FAT-fs (loop4): Directory bread(block 68) failed [ 949.465577][T18194] FAT-fs (loop4): Directory bread(block 69) failed [ 949.475677][T18194] FAT-fs (loop4): Directory bread(block 70) failed [ 949.477377][T18194] FAT-fs (loop4): Directory bread(block 71) failed [ 949.478533][T18194] FAT-fs (loop4): Directory bread(block 72) failed [ 949.479667][T18194] FAT-fs (loop4): Directory bread(block 73) failed [ 949.849699][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.147026][ T4389] bond0 (unregistering): Released all slaves [ 952.277807][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 952.279615][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 952.282674][T17876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.284016][T17876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.285386][T17876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.287659][T17876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.298754][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3583'. [ 952.388340][T18203] loop5: detected capacity change from 0 to 256 [ 952.490717][ T4892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.492258][ T4892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.493650][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 952.497923][T18203] FAT-fs (loop5): Directory bread(block 64) failed [ 952.499159][T18203] FAT-fs (loop5): Directory bread(block 65) failed [ 952.500366][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.501663][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.503007][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 952.510381][T18203] FAT-fs (loop5): Directory bread(block 66) failed [ 952.511423][T18203] FAT-fs (loop5): Directory bread(block 67) failed [ 952.512509][T18203] FAT-fs (loop5): Directory bread(block 68) failed [ 952.513537][T18203] FAT-fs (loop5): Directory bread(block 69) failed [ 953.722282][T18203] FAT-fs (loop5): Directory bread(block 70) failed [ 953.723492][T18203] FAT-fs (loop5): Directory bread(block 71) failed [ 953.724621][T18203] FAT-fs (loop5): Directory bread(block 72) failed [ 953.725681][T18203] FAT-fs (loop5): Directory bread(block 73) failed [ 954.202265][T18230] syz.5.3593: attempt to access beyond end of device [ 954.202265][T18230] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 955.837442][T18240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.839573][T18240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.045243][T18241] loop6: detected capacity change from 0 to 256 [ 956.092635][T18241] FAT-fs (loop6): Directory bread(block 64) failed [ 956.093895][T18241] FAT-fs (loop6): Directory bread(block 65) failed [ 956.094981][T18241] FAT-fs (loop6): Directory bread(block 66) failed [ 956.098406][T18241] FAT-fs (loop6): Directory bread(block 67) failed [ 956.099812][T18241] FAT-fs (loop6): Directory bread(block 68) failed [ 956.104234][T18241] FAT-fs (loop6): Directory bread(block 69) failed [ 956.106731][T18241] FAT-fs (loop6): Directory bread(block 70) failed [ 956.177760][T18241] FAT-fs (loop6): Directory bread(block 71) failed [ 956.180134][T18241] FAT-fs (loop6): Directory bread(block 72) failed [ 956.197575][T18241] FAT-fs (loop6): Directory bread(block 73) failed [ 956.602237][T18251] loop0: detected capacity change from 0 to 256 [ 957.447726][T18257] syz.6.3542: attempt to access beyond end of device [ 957.447726][T18257] loop6: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 959.729971][T18270] X25: received unknown 00 with LCI 000 [ 959.901498][T18277] loop1: detected capacity change from 0 to 256 [ 959.929582][T18277] FAT-fs (loop1): Directory bread(block 64) failed [ 959.930834][T18277] FAT-fs (loop1): Directory bread(block 65) failed [ 960.206292][T18277] FAT-fs (loop1): Directory bread(block 66) failed [ 960.207513][T18277] FAT-fs (loop1): Directory bread(block 67) failed [ 960.208728][T18277] FAT-fs (loop1): Directory bread(block 68) failed [ 960.209774][T18277] FAT-fs (loop1): Directory bread(block 69) failed [ 960.210835][T18277] FAT-fs (loop1): Directory bread(block 70) failed [ 960.211875][T18277] FAT-fs (loop1): Directory bread(block 71) failed [ 960.213022][T18277] FAT-fs (loop1): Directory bread(block 72) failed [ 960.214081][T18277] FAT-fs (loop1): Directory bread(block 73) failed [ 960.756889][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3602'. [ 961.175421][T18275] syz.1.3607: attempt to access beyond end of device [ 961.175421][T18275] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 963.405664][T18319] device-mapper: table: 248:2: thin-p: unknown target type [ 963.407023][T18319] device-mapper: ioctl: error adding target to table [ 964.015832][T18345] loop1: detected capacity change from 0 to 256 [ 964.991769][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3625'. [ 965.422823][T18316] loop4: detected capacity change from 0 to 131072 [ 965.443253][T18316] F2FS-fs (loop4): Test dummy encryption mode enabled [ 965.450384][T18316] F2FS-fs (loop4): invalid crc value [ 965.471572][T18316] F2FS-fs (loop4): Found nat_bits in checkpoint [ 965.489997][T18316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 965.791577][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 966.269831][T18391] loop1: detected capacity change from 0 to 256 [ 966.318090][T18391] FAT-fs (loop1): Directory bread(block 64) failed [ 966.319312][T18391] FAT-fs (loop1): Directory bread(block 65) failed [ 966.320425][T18391] FAT-fs (loop1): Directory bread(block 66) failed [ 966.321520][T18391] FAT-fs (loop1): Directory bread(block 67) failed [ 966.322619][T18391] FAT-fs (loop1): Directory bread(block 68) failed [ 966.323705][T18391] FAT-fs (loop1): Directory bread(block 69) failed [ 966.364160][T18342] loop5: detected capacity change from 0 to 131072 [ 966.392207][T18391] FAT-fs (loop1): Directory bread(block 70) failed [ 966.393451][T18391] FAT-fs (loop1): Directory bread(block 71) failed [ 966.394514][T18391] FAT-fs (loop1): Directory bread(block 72) failed [ 966.395470][T18391] FAT-fs (loop1): Directory bread(block 73) failed [ 966.400981][T18394] loop0: detected capacity change from 0 to 256 [ 966.410858][T18342] F2FS-fs (loop5): Test dummy encryption mode enabled [ 966.413300][T18342] F2FS-fs (loop5): invalid crc value [ 966.455527][T18394] FAT-fs (loop0): Directory bread(block 64) failed [ 966.456796][T18394] FAT-fs (loop0): Directory bread(block 65) failed [ 966.459797][T18342] F2FS-fs (loop5): Found nat_bits in checkpoint [ 966.470650][T18394] FAT-fs (loop0): Directory bread(block 66) failed [ 966.471877][T18394] FAT-fs (loop0): Directory bread(block 67) failed [ 966.473053][T18394] FAT-fs (loop0): Directory bread(block 68) failed [ 966.474080][T18394] FAT-fs (loop0): Directory bread(block 69) failed [ 966.475208][T18394] FAT-fs (loop0): Directory bread(block 70) failed [ 966.510515][T18342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 966.522244][T18394] FAT-fs (loop0): Directory bread(block 71) failed [ 966.523450][T18394] FAT-fs (loop0): Directory bread(block 72) failed [ 966.524549][T18394] FAT-fs (loop0): Directory bread(block 73) failed [ 966.895844][T18401] syz.1.3618: attempt to access beyond end of device [ 966.895844][T18401] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 968.447558][T18405] syz.0.3619: attempt to access beyond end of device [ 968.447558][T18405] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 969.683966][T18413] loop1: detected capacity change from 0 to 256 [ 969.688789][T18407] X25: received unknown 00 with LCI 000 [ 969.711922][T18413] FAT-fs (loop1): Directory bread(block 64) failed [ 969.713131][T18413] FAT-fs (loop1): Directory bread(block 65) failed [ 969.714208][T18413] FAT-fs (loop1): Directory bread(block 66) failed [ 969.715437][T18413] FAT-fs (loop1): Directory bread(block 67) failed [ 969.748276][T18413] FAT-fs (loop1): Directory bread(block 68) failed [ 969.749345][T18413] FAT-fs (loop1): Directory bread(block 69) failed [ 969.750408][T18413] FAT-fs (loop1): Directory bread(block 70) failed [ 969.751450][T18413] FAT-fs (loop1): Directory bread(block 71) failed [ 969.752505][T18413] FAT-fs (loop1): Directory bread(block 72) failed [ 969.753518][T18413] FAT-fs (loop1): Directory bread(block 73) failed [ 970.536819][T18410] syz.1.3622: attempt to access beyond end of device [ 970.536819][T18410] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 971.548573][T18434] device-mapper: table: 248:2: thin-p: unknown target type [ 971.549856][T18434] device-mapper: ioctl: error adding target to table [ 971.809580][T18455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.811620][T18455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.246840][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 972.355534][T18473] null_blk: disk nullb1 created [ 972.367080][T18473] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(9) [ 972.694329][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 972.881755][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 972.923571][T18506] device-mapper: space map common: metadata block out of bounds [ 972.924993][T18506] device-mapper: space map common: dm_tm_shadow_block() failed [ 972.951474][T18506] device-mapper: space map metadata: dm_sm_metadata_create: apply_bops failed [ 972.954399][T18506] device-mapper: transaction manager: couldn't create metadata space map [ 972.966989][T18506] device-mapper: thin metadata: tm_create_with_sm failed [ 973.021390][T18506] device-mapper: table: 248:3: thin-pool: Error creating metadata object (-EINVAL) [ 973.024173][T18506] device-mapper: ioctl: error adding target to table [ 973.178431][T18532] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL) [ 973.184427][T18532] device-mapper: ioctl: error adding target to table [ 973.203208][T18534] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(9) [ 973.279179][T18542] loop0: detected capacity change from 0 to 128 [ 973.294178][T18542] md: loop0 does not have a valid v1.2 superblock, not importing! [ 973.298120][T18545] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1533: comm kworker/u4:15: reading directory lblock 0 [ 973.302292][T18540] md: loop1 has zero or unknown size, marking faulty! [ 973.353331][T18549] loop0: detected capacity change from 0 to 256 [ 973.354872][T18549] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 973.407266][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 973.658871][T18576] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(9) [ 974.002109][T18599] device-mapper: ioctl: Invalid ioctl structure: name m, dev f802 [ 974.110878][T18603] loop6: detected capacity change from 0 to 256 [ 974.139732][T18603] process 'syz.6.3695' launched './file2' with NULL argv: empty string added [ 974.154951][T18604] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1533: comm kworker/u4:15: reading directory lblock 0 [ 974.247769][T18608] loop6: detected capacity change from 0 to 128 [ 974.279422][T18608] FAT-fs (loop6): Directory bread(block 32) failed [ 974.280853][T18608] FAT-fs (loop6): Directory bread(block 33) failed [ 974.283280][T18608] FAT-fs (loop6): Directory bread(block 34) failed [ 974.289848][T18608] FAT-fs (loop6): Directory bread(block 35) failed [ 974.296520][T18608] FAT-fs (loop6): Directory bread(block 36) failed [ 974.303120][T18608] FAT-fs (loop6): Directory bread(block 37) failed [ 974.308554][T18608] FAT-fs (loop6): Directory bread(block 38) failed [ 974.314126][T18608] FAT-fs (loop6): Directory bread(block 39) failed [ 974.320625][T18608] FAT-fs (loop6): Directory bread(block 40) failed [ 974.327217][T18608] FAT-fs (loop6): Directory bread(block 41) failed [ 974.454767][T18619] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 974.465038][T18619] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 974.477101][T18619] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 974.541931][T18619] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 974.543661][T18619] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 974.554481][T18619] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 974.571864][T15784] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 974.575110][T15784] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 974.586652][T15784] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 974.642205][T15784] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 974.645072][T15784] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 974.699586][T18629] md: loop1 has zero or unknown size, marking faulty! [ 974.894373][T18643] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 974.918728][T18643] device-mapper: table: 248:3: thin-pool: Error creating metadata object (-EIO) [ 974.920408][T18643] device-mapper: ioctl: error adding target to table [ 974.963748][T18648] loop0: detected capacity change from 0 to 128 [ 974.972536][T18648] md: loop0 does not have a valid v1.2 superblock, not importing! [ 975.152536][T18652] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 975.417256][T18671] device syzkaller1 entered promiscuous mode [ 975.503982][T18677] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 975.591534][T18684] device syzkaller0 entered promiscuous mode [ 975.611218][T18688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3729'. [ 975.671684][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'. [ 975.837285][T18698] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 975.845185][T18698] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 975.864377][T18698] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 975.908736][T18698] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 975.910365][T18698] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 975.915908][T18698] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 975.966822][T18703] netlink: 'syz.1.3735': attribute type 2 has an invalid length. [ 975.969393][T18703] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 976.166805][T18731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3747'. [ 976.440338][T18746] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 976.463233][T18746] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 976.479388][T18746] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 976.531848][T18746] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 976.534481][T18746] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 976.551207][T18746] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 976.672820][T18765] team0: Device gtp0 is of different type [ 977.090512][T18803] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 977.101036][T18803] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 977.109623][T18803] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 977.160981][T18803] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 977.162475][T18803] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 977.168267][T18803] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 978.397162][ T3904] Aborting journal on device nvme0n1p2-8. [ 978.398550][ T3904] Buffer I/O error on dev nvme0n1p2, logical block 131072, lost sync page write [ 978.400158][ T3904] JBD2: I/O error when updating journal superblock for nvme0n1p2-8. [ 978.803814][T18819] EXT4-fs error: 33 callbacks suppressed [ 978.803824][T18819] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 979.651027][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 979.653320][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.820479][T18782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.823814][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 979.839390][T18820] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.3780: Detected aborted journal [ 979.841598][T18820] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.846318][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 979.860822][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 979.862932][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 979.864984][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 979.873024][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 979.877572][T18822] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.3783: Detected aborted journal [ 979.879700][T18822] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.887587][T18822] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.892408][T18824] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.901661][T18826] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.908511][T18828] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.936846][T18830] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 979.957259][T18833] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 980.033614][T18839] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 980.079812][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'. [ 980.354186][T18870] device syzkaller0 entered promiscuous mode [ 980.666894][T18896] device syzkaller0 entered promiscuous mode [ 980.856470][T18914] ip_tables: iptables: counters copy to user failed while replacing table [ 980.943220][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3822'. [ 980.963919][T18920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.968598][T18920] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.086802][T18920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.805853][T18956] device syzkaller0 entered promiscuous mode [ 981.871722][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3832'. [ 985.004009][ T3939] EXT4-fs error: 140 callbacks suppressed [ 985.004024][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 985.007424][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 985.009631][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 985.011761][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 985.013714][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 985.015717][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 986.087433][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.088742][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.621970][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 992.624453][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 992.627425][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 992.629575][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 992.631672][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 992.632220][T18989] tipc: Enabling of bearer rejected, failed to enable media [ 992.633740][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 992.640952][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 992.642781][ T4316] EXT4-fs: 99 callbacks suppressed [ 992.642794][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.647647][T19004] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 992.655809][T19005] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 992.662582][T19006] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 992.678491][T19003] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.683056][T19012] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.687727][T19003] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.690823][T19012] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.694035][T19013] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 992.731266][T19020] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.734685][T19019] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.740764][T19019] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.745037][T19023] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.750888][T19023] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 992.762938][T19021] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3844'. [ 992.851970][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3849'. [ 992.894721][ T3939] udevd[3939]: worker [19010] terminated by signal 7 (Bus error) [ 992.898330][ T3939] udevd[3939]: worker [19010] failed while handling '/devices/virtual/bluetooth/hci1/hci1:200/input5/event2' [ 995.760083][T19027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.850079][T19061] device syzkaller0 entered promiscuous mode [ 996.285901][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 996.330416][T19092] device syzkaller0 entered promiscuous mode [ 996.574632][T19104] device syzkaller0 entered promiscuous mode [ 996.769965][T19116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3885'. [ 997.578595][ C1] vcan0: j1939_tp_rxtimer: 0x00000000129ae77e: rx timeout, send abort [ 997.581706][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000129ae77e: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. Jan 1 00:16:37 syzkaller kern.alert kernel: [ 997.578595][ C1] vcan0: j1939_tp_rxtimer: 0x00000000129ae77e: rx timeout, send abort [ 997.628360][T19162] EXT4-fs error: 137 callbacks suppressed [ 997.628371][T19162] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.3901: Detected aborted journal [ 997.662373][T19164] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.5.3902: Detected aborted journal [ 997.664770][T19164] EXT4-fs: 110 callbacks suppressed [ 997.664781][T19164] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.669680][T19164] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.5.3902: Detected aborted journal [ 997.671758][T19164] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.693708][T19152] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.3897: Detected aborted journal [ 997.696267][T19152] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.697593][T19152] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.3897: Detected aborted journal [ 997.699491][T19152] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.739099][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 997.740006][T19167] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.3904: Detected aborted journal [ 997.740977][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.742982][T19167] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.757652][T19170] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.3903: Detected aborted journal [ 997.761848][T19169] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.3905: Detected aborted journal [ 997.763705][T19169] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.765251][T19167] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.3904: Detected aborted journal [ 997.769875][T19170] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.772583][T19171] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 997.775882][T19169] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 998.392499][T19187] bond2: (slave vlan0): making interface the new active one [ 998.394403][T19187] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 998.479269][T19196] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3914'. [ 998.572723][T19209] device syzkaller0 entered promiscuous mode [ 1002.677151][ T4316] EXT4-fs error: 66 callbacks suppressed [ 1002.677164][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1002.680108][ T4316] EXT4-fs: 45 callbacks suppressed [ 1002.680120][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1003.678778][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1003.680661][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.499977][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 1009.502265][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1009.504800][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1009.507620][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1009.509843][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 1009.512083][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 1009.515569][T19248] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.3932: Detected aborted journal [ 1009.519600][T19247] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.3931: Detected aborted journal [ 1009.521423][T19247] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.523152][T19248] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.525866][T19248] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.3932: Detected aborted journal [ 1009.529648][T19247] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.3931: Detected aborted journal [ 1009.531447][T19247] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.532806][T19248] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.547820][T19247] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.550541][T19253] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.557984][T19255] device syzkaller0 entered promiscuous mode [ 1009.581957][T19257] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.587471][T19257] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.598441][T19259] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.617485][T19257] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1009.734312][T19274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1009.878495][T19293] device syzkaller0 entered promiscuous mode [ 1009.992186][T19304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3956'. [ 1010.052541][T19316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3962'. [ 1010.211440][T19336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1010.269925][T19339] tc action pedit offset must be on 32 bit boundaries [ 1010.285228][T19345] device syzkaller0 entered promiscuous mode [ 1010.338909][T19349] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3977'. [ 1010.454519][T19349] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3977'. [ 1010.535562][T19365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1010.614468][T19373] netlink: 'syz.5.3988': attribute type 39 has an invalid length. [ 1010.714846][T19385] device syzkaller0 entered promiscuous mode [ 1010.857748][T19391] infiniband syz2: set active [ 1010.858950][T19391] infiniband syz2: added bond0 [ 1010.935849][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4007'. [ 1010.969763][T19391] RDS/IB: syz2: added [ 1010.970789][T19391] smc: adding ib device syz2 with port count 1 [ 1010.971932][T19391] smc: ib device syz2 port 1 has pnetid [ 1011.142935][T19428] device syzkaller0 entered promiscuous mode [ 1012.593221][ T4498] tipc: Left network mode [ 1013.953228][T19522] binder: 19519:19522 got transaction to invalid handle, 1 [ 1013.954800][T19522] binder: 19522:19519 cannot find target node [ 1013.956122][T19522] binder: 19519:19522 transaction call to 0:0 failed 201/29201/-22, size 72-24 line 3062 [ 1013.958869][T19522] binder: 19519:19522 got transaction to invalid handle, 3 [ 1013.960141][T19522] binder: 19522:19519 cannot find target node [ 1013.961252][T19522] binder: 19519:19522 transaction call to 0:0 failed 202/29201/-22, size 0-0 line 3062 [ 1013.996338][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 1014.018222][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 1014.364749][ T4498] device hsr_slave_0 left promiscuous mode [ 1014.396328][ T4498] device hsr_slave_1 left promiscuous mode [ 1014.478351][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.480386][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.539112][ T4498] bond2 (unregistering): (slave vlan0): Releasing active interface [ 1014.556136][T19482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.583439][ T4498] bond2 (unregistering): Released all slaves [ 1014.756361][T19524] EXT4-fs error: 248 callbacks suppressed [ 1014.756372][T19524] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.4049: Detected aborted journal [ 1014.759214][T19524] EXT4-fs: 209 callbacks suppressed [ 1014.759225][T19524] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.760950][T19525] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.4050: Detected aborted journal [ 1014.762915][T19525] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.770639][T19523] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1531: comm syz-executor: reading directory lblock 0 [ 1014.771019][T19528] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.4051: Detected aborted journal [ 1014.774616][T19528] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.776773][T19525] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.4050: Detected aborted journal [ 1014.778653][T19525] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.782111][T19528] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.4051: Detected aborted journal [ 1014.784063][T19528] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.785227][T19530] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.4052: Detected aborted journal [ 1014.793196][T19530] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.798870][T19530] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.4052: Detected aborted journal [ 1014.800853][T19530] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1014.843508][T19534] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1533: comm kworker/u4:16: reading directory lblock 0 [ 1014.858803][T19535] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1533: comm kworker/u4:16: reading directory lblock 0 [ 1014.898932][ T27] audit: type=1107 audit(1014.890:88): pid=19524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1014.900902][T19524] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1015.282699][ T4498] bond1 (unregistering): Released all slaves [ 1015.601198][T19525] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1015.707922][T19550] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1016.769758][ T4498] team0 (unregistering): Port device team_slave_1 removed [ 1016.939876][ T4498] team0 (unregistering): Port device team_slave_0 removed [ 1017.116813][ T4498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.329475][ T4498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.767392][ T4498] bond0 (unregistering): Released all slaves [ 1018.814978][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1019.096564][T19599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4058'. [ 1019.162655][T19606] binder: 19605:19606 got transaction to invalid handle, 1 [ 1019.163920][T19606] binder: 19606:19605 cannot find target node [ 1019.164876][T19606] binder: 19605:19606 transaction call to 0:0 failed 206/29201/-22, size 72-24 line 3062 [ 1019.171465][T19606] binder: 19605:19606 got transaction to invalid handle, 3 [ 1019.172559][T19606] binder: 19606:19605 cannot find target node [ 1019.173547][T19606] binder: 19605:19606 transaction call to 0:0 failed 207/29201/-22, size 0-0 line 3062 [ 1019.326469][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 1019.427615][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 1020.060918][ T3994] EXT4-fs error: 83 callbacks suppressed [ 1020.060933][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 1020.218576][ T4068] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #98: comm crond: reading directory lblock 0 [ 1020.220812][ T4068] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #96: comm crond: reading directory lblock 0 [ 1020.328787][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 1020.445905][T19612] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1531: comm syz-executor: reading directory lblock 0 [ 1020.446491][T19613] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.4062: Detected aborted journal [ 1020.450046][T19613] EXT4-fs: 13 callbacks suppressed [ 1020.450055][T19613] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.454078][T19614] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.4061: Detected aborted journal [ 1020.456048][T19614] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.456491][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 1020.461285][T19614] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.4061: Detected aborted journal [ 1020.462766][T19617] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.4063: Detected aborted journal [ 1020.463447][T19614] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.465086][T19617] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.467967][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.473865][T19613] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.475714][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1020.478091][T19617] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.479310][T19620] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.487096][T19620] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.517396][T19613] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1020.521815][T19616] device-mapper: table: 248:2: thin-p: unknown target type [ 1020.523113][T19616] device-mapper: ioctl: error adding target to table [ 1021.907733][T19640] device syzkaller0 entered promiscuous mode [ 1022.001723][ T27] audit: type=1107 audit(1021.990:89): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1022.096278][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4066'. [ 1025.041480][T19670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4074'. [ 1025.049285][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 1025.050323][T19671] binder: BINDER_SET_CONTEXT_MGR already set [ 1025.052235][T19671] binder: 19669:19671 ioctl 4018620d 20004a80 returned -16 [ 1025.054123][T19671] binder: tried to use weak ref as strong ref [ 1025.055138][T19671] binder: 19669:19671 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1025.059532][T19671] binder: 19669:19671 ioctl c0306201 0 returned -14 [ 1025.061428][T19671] binder: 19669:19671 got transaction to invalid handle, 3 [ 1025.062659][T19671] binder: 19671:19669 cannot find target node [ 1025.063678][T19671] binder: 19669:19671 transaction call to 0:0 failed 210/29201/-22, size 0-0 line 3062 [ 1025.087261][ T3939] EXT4-fs error: 47 callbacks suppressed [ 1025.087275][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 1025.090567][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1025.092944][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1025.099501][T19668] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.4074: Detected aborted journal [ 1025.102100][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1025.104827][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 1025.107235][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 1025.127022][T19672] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.4076: Detected aborted journal [ 1025.458240][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 1026.754897][T19682] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.4077: Detected aborted journal [ 1026.754932][T19681] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1531: comm syz-executor: reading directory lblock 0 [ 1026.763486][T19683] EXT4-fs: 23 callbacks suppressed [ 1026.763496][T19683] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1026.766922][T19682] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1026.770023][T19682] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1026.771822][T19683] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1026.778572][T19686] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1026.805233][T19683] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1026.914530][ T27] audit: type=1107 audit(1026.900:90): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1026.916756][T19686] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1028.575366][T19694] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1028.580124][T19696] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1028.583241][T19695] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1028.602158][T19701] device syzkaller0 entered promiscuous mode [ 1028.770952][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'. [ 1030.514030][T19709] EXT4-fs error: 33 callbacks suppressed [ 1030.514041][T19709] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1531: comm syz-executor: reading directory lblock 0 [ 1030.514741][T19710] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.4084: Detected aborted journal [ 1030.519968][T19711] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 1030.531700][T19712] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.4087: Detected aborted journal [ 1030.537275][T19715] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.4086: Detected aborted journal [ 1030.539972][T19716] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.4085: Detected aborted journal [ 1030.540556][T19714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4087'. [ 1030.543252][T19710] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.4084: Detected aborted journal [ 1030.546931][T19715] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.6.4086: Detected aborted journal [ 1030.554870][T19719] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1533: comm kworker/u4:27: reading directory lblock 0 [ 1030.568354][T19720] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 1032.536496][T19733] EXT4-fs: 15 callbacks suppressed [ 1032.536508][T19733] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.542110][T19735] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.545272][T19736] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.548806][T19736] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.552508][T19739] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.554447][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1032.555220][T19733] EXT4-fs (nvme0n1p2): Remounting filesystem read-only SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=4034 state=1 status=67 (errno 9: Bad file descriptor) [ 1032.559154][T19739] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.578603][T19739] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.584237][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1032.586940][T19735] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 1033.128880][ T4498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.207659][ T4498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.298862][ T4498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.379419][ T4498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.657694][ T3939] EXT4-fs error: 169 callbacks suppressed [ 1035.657708][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 1035.660641][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1035.663554][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1035.665454][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1035.667826][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 1035.670016][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 1035.722183][ T4498] device hsr_slave_0 left promiscuous mode [ 1035.756768][ T4498] device hsr_slave_1 left promiscuous mode [ 1035.836016][ T4498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.837275][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.838715][ T4498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.839877][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.926118][ T4498] device veth1_macvtap left promiscuous mode [ 1035.927281][ T4498] device veth0_macvtap left promiscuous mode [ 1037.540658][ T4498] team0 (unregistering): Port device team_slave_1 removed [ 1037.737853][ T4498] team0 (unregistering): Port device team_slave_0 removed [ 1037.916754][ T4498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.138782][ T4498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.711141][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 1038.713280][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1038.715445][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1038.717836][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1039.667110][ T4498] bond0 (unregistering): Released all slaves [ 1041.989131][ T4498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.067251][ T4498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.159544][ T4498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.237349][ T4498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.392161][ T3939] EXT4-fs error: 2 callbacks suppressed [ 1042.392176][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #215: comm udevd: reading directory lblock 0 [ 1042.395580][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1042.398269][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1042.400925][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #219: comm udevd: reading directory lblock 0 [ 1042.402735][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1741: comm udevd: reading directory lblock 0 [ 1042.405166][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #1599: comm udevd: reading directory lblock 0 [ 1042.449430][ T4498] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.458136][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #96: comm dhcpcd: reading directory lblock 0 [ 1042.462571][T19810] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 1042.466821][T19811] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #220: comm dhcpcd: reading directory lblock 0 [ 1042.471915][ T3994] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1685: inode #96: comm dhcpcd: reading directory lblock 0 [ 1042.518417][ T4498] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0