last executing test programs: 4m18.10423325s ago: executing program 4 (id=1795): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000440)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) 4m17.172608452s ago: executing program 4 (id=1807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xfffffffffffffeed) ioctl$KDGKBTYPE(r0, 0x4b52, &(0x7f0000000000)) 4m16.268704363s ago: executing program 4 (id=1816): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000103dd0a000000000000730179000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m16.190579065s ago: executing program 4 (id=1817): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m16.090318828s ago: executing program 4 (id=1819): syz_open_dev$vim2m(0x0, 0xa, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$tipc(r0, 0x0, &(0x7f00000000c0)=0xfffffffffffffffd) 4m15.439115763s ago: executing program 4 (id=1826): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xfffffffffffffeed) ioctl$KDGKBTYPE(r0, 0x4b52, &(0x7f0000000000)) 4m15.378808875s ago: executing program 32 (id=1826): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xfffffffffffffeed) ioctl$KDGKBTYPE(r0, 0x4b52, &(0x7f0000000000)) 1m48.164196698s ago: executing program 5 (id=2827): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) write(r2, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r3, &(0x7f0000000c00)="002000011a2b3c4d0008000000020001", 0x10) 1m48.05444628s ago: executing program 5 (id=2830): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b80)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m47.547646032s ago: executing program 5 (id=2834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x5, 0x5}, @empty, @private=0xa010101, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x20) 1m46.922068667s ago: executing program 5 (id=2841): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) splice(r0, 0x0, r2, 0x0, 0x807, 0x0) 1m46.37305132s ago: executing program 5 (id=2847): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fcc6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2816a172511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34f57bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4490}], 0x1, 0x0, 0x0, 0x0) 1m45.06424785s ago: executing program 5 (id=2861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59}) 1m44.955350153s ago: executing program 33 (id=2861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59}) 1m40.962349547s ago: executing program 1 (id=2894): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44, 0x1, 0x9, 0x8016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000040)) 1m39.97689136s ago: executing program 1 (id=2901): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r0, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) 1m38.912248415s ago: executing program 1 (id=2910): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44, 0x1, 0x9, 0x8016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) timer_gettime(r0, &(0x7f0000000040)) 1m37.938583708s ago: executing program 1 (id=2914): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x807, 0x0) 1m37.87286514s ago: executing program 1 (id=2917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000540)=ANY=[], 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001080)={@random="652c1d569d1e", @remote, @val={@val={0x88a8, 0x6, 0x1, 0x204}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x5, 0xd6b, 0x66, 0x0, 0xfe, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101}, "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"}}}}, 0x0) 1m27.697753028s ago: executing program 1 (id=2929): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x807, 0x0) 1m27.614018591s ago: executing program 34 (id=2929): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x807, 0x0) 10.082775473s ago: executing program 0 (id=3249): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.346297184s ago: executing program 0 (id=3252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x2) write(r1, &(0x7f0000000280)="01000000070538abb5ce00", 0x12) 8.196674207s ago: executing program 0 (id=3255): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)="306663353a313232373a620afaf6379a248d1d6534518f10951005a34b1c65378b8461", 0x23) 8.010538141s ago: executing program 0 (id=3259): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 6.688882803s ago: executing program 0 (id=3260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) 6.613574064s ago: executing program 0 (id=3261): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r4, 0x0, 0x2, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) listen(r0, 0x5) 1.7039134s ago: executing program 6 (id=3314): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1.538393913s ago: executing program 2 (id=3317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.526719934s ago: executing program 6 (id=3318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 1.339296628s ago: executing program 2 (id=3320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.26648082s ago: executing program 6 (id=3323): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1.216120341s ago: executing program 7 (id=3324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x20) 1.215483101s ago: executing program 2 (id=3325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)="306663353a313232373a620afaf6379a248d1d6534518f10951005a34b1c65378b8461", 0x23) 1.106552844s ago: executing program 2 (id=3326): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000002a40)=[{&(0x7f0000001640)="6793e1b722ed30eff7fcc00d24c4c658bb93e6d3181fbf09dcc8be6d6d2ae413c2fdc49ee5ec857066f66d3101d8ba306401d0c58ca196fa4aed53e010b08786670771b30fef8d38c71a6ed67e2f5938d02b4755e0dec7bf6a8bf54454e2d1a3fa2e1ef7964ed82b36217283481be8757556da35a4262caf52173c1d52f2710179ae9ae4f7c6416494b1b5bab6d7acc7b91be13e448c726369f279ca0f1665e2294d2e0a18b6eea72157532a789ccbefe8147fb8509728997a23df517222b7ae711fa73bed2a22cf2a13a98d73f17e8682194579ed726ee63a74ca5cf1560197b13123840381713779ece97540b68ad48a5705fec148f5d99ae628d7666b4f201915c11964fb6f2dbcb90e330c11b850d1986cdcd02217f78889cc4457185570e2e598351b57b2e60576b8693fdae765521ef3a7a1cdab7b00dae25400bc7fa938cbbd740a55f4b3c9707c300249cb586e3b2c09405e592c222e7d794eded63b76c208e3e844b2cd9d003386e42e89f4302d3a2f9c46de6e32facb2fdefdc22c810883d21ca2ecf01eed5000d437eed410f85409e3bf3e97ff34372118dafa88881076268f9b0a06391fc2146dbbe2c98b1e60557d242644e99366584811883c85677716d865f8eda8678e3a156407a98e4780f1500d8e9d2cb30d9132919a64b910c58eb46f51b1edc42fcea561c4f24b0ecfc173923398eb3e5a58fc75c5d685f2c2608656bb47d240723021999752d3eba21c74c65fb48822fce632efde3102f93c0ef79382537b8399faa04a292c27890bd2c5865487264ada854f596e36bbc9f6772c9fd1b80c45f6630609c67071aa37c352389d121c7af3e6fa7ea332eb4ff24ff6714d5128e33ba23d153792ce5d962103a84d8f955b6da0b1c9424bf2f5cc201c22b744659f2bcc08982e272d52cd0f73b39c37dd72cd61b15cbd55dc82ab63f870f706b26e0ab5517212cbb3cf655604575a74922f6317f63f5fddf7a916f7a3554f5c655c17af733187fd93609c1b3d05154a04e584e02c87668058292b78b89271234fe16dc468de59547f9a4f091a26d3bba3668e3fe50b44ed407a18e877623a54f03f69d2f5c764aeeb04aa12f7aeef366bb291e552d94708717b268f46969589c731b070d8b176614a487229806579bdc745df8a51a1e1da5d4a0e0e5337bece730fbf1a3cd92ef88dc0c8b8c022796c9e351c5dcf552ae08532c39bbec26559cc2bae00f7b2cf75cb572cc3720e69d5daf42893ba938619776693b279b58e53054dc5ad7a982e9469e59c6dedc89eb71e48f32c89884266f2ebc7d865676765a75aa2cfaa7cb42b90088becc2529d19342fe7599427ae898dbcb24e9ab724f874c5b647458033900b32d9b23e82c48257308cf6ac365d09061732b9bd29f5333855e558181b5b7679ad320e37f72a71", 0x3f8}, {0x0}], 0x2) 1.106408374s ago: executing program 2 (id=3327): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 981.119887ms ago: executing program 2 (id=3328): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101402, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) 937.154998ms ago: executing program 7 (id=3329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 810.403501ms ago: executing program 7 (id=3330): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) close_range(r5, 0xffffffffffffffff, 0x0) 414.39652ms ago: executing program 3 (id=3332): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x24000814) 385.715941ms ago: executing program 3 (id=3333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005f00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 310.598492ms ago: executing program 3 (id=3334): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) r3 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r3, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r4 = openat(r1, 0x0, 0x0, 0x0) r5 = openat(r4, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r1, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) r6 = openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='dummy_udc.0\n', 0xc) 304.792433ms ago: executing program 3 (id=3335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)="306663353a313232373a620afaf6379a248d1d6534518f10951005a34b1c65378b8461", 0x23) 304.508802ms ago: executing program 6 (id=3336): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000100)) 234.689544ms ago: executing program 3 (id=3337): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xcb}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default trusted:'], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 170.540125ms ago: executing program 7 (id=3338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x20) 170.370716ms ago: executing program 6 (id=3339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 119.987777ms ago: executing program 3 (id=3340): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20040) ppoll(&(0x7f0000000180)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 53.941748ms ago: executing program 7 (id=3341): syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = dup(r0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80006) 1.19499ms ago: executing program 7 (id=3342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000400), &(0x7f0000000440)=0x8) 0s ago: executing program 6 (id=3343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) kernel console output (not intermixed with test programs): 1 as /devices/virtual/input/input43 [ 398.684095][ T27] audit: type=1326 audit(385.999:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.1.2445" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9677a168 code=0x0 [ 399.376382][T12508] netlink: 'syz.5.2448': attribute type 10 has an invalid length. [ 399.495816][T12514] device syzkaller0 entered promiscuous mode [ 399.522164][T12517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.881005][T12535] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 399.899302][T12535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.903664][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2457'. [ 399.910637][T12535] device bond8 entered promiscuous mode [ 399.917866][T12535] device macvlan2 entered promiscuous mode [ 399.919608][T12535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 400.031010][T12536] device syzkaller0 entered promiscuous mode [ 400.058378][T12539] device syzkaller0 entered promiscuous mode [ 400.282429][T12552] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 400.583929][T12512] block nbd5: shutting down sockets [ 400.639817][T12559] device syzkaller0 entered promiscuous mode [ 400.760527][ T27] audit: type=1326 audit(388.048:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12558 comm="syz.3.2463" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed7a168 code=0x0 [ 400.880794][T12568] input: syz1 as /devices/virtual/input/input44 [ 401.014348][T12571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.092541][T12577] netlink: 'syz.5.2470': attribute type 1 has an invalid length. [ 401.111977][T12577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.129685][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2470'. [ 401.136363][T12577] device bond4 entered promiscuous mode [ 401.143694][T12577] device macvlan2 entered promiscuous mode [ 401.145769][T12577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.863437][T12600] device syzkaller0 entered promiscuous mode [ 401.962736][T12608] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 402.006980][T12612] device syzkaller0 entered promiscuous mode [ 402.154074][T12624] loop3: detected capacity change from 0 to 512 [ 402.186201][T12624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 402.644427][T12634] netlink: 'syz.0.2483': attribute type 1 has an invalid length. [ 402.703863][T12634] 8021q: adding VLAN 0 to HW filter on device bond12 [ 402.705995][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2483'. [ 402.719219][T12638] device bond12 entered promiscuous mode [ 402.735711][T12634] device macvlan2 entered promiscuous mode [ 402.740570][T12634] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.745828][ T27] audit: type=1326 audit(390.049:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.5.2482" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac17a168 code=0x0 [ 402.901871][T12618] block nbd2: shutting down sockets [ 402.955574][T12643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.010990][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 403.047254][T12649] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 403.135299][T12658] input: syz1 as /devices/virtual/input/input45 [ 403.147789][T12656] device syzkaller0 entered promiscuous mode [ 403.325405][T12660] device syzkaller0 entered promiscuous mode [ 403.439579][T12668] device syzkaller0 entered promiscuous mode [ 404.070234][T12690] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 404.082023][T12690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.086738][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2496'. [ 404.090921][T12690] device bond4 entered promiscuous mode [ 404.097654][T12690] device macvlan3 entered promiscuous mode [ 404.099437][T12690] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 404.254946][T12693] netlink: 'syz.0.2497': attribute type 10 has an invalid length. [ 404.398008][T12700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.789468][T12709] device syzkaller0 entered promiscuous mode [ 404.794504][T12712] device syzkaller0 entered promiscuous mode [ 405.055749][T12723] device syzkaller0 entered promiscuous mode [ 405.124092][T12696] block nbd1: shutting down sockets [ 405.158852][ T27] audit: type=1326 audit(392.545:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.2.2504" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e57a168 code=0x0 [ 405.255562][T12733] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 405.289323][T12737] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 405.342409][T12739] input: syz1 as /devices/virtual/input/input46 [ 405.518289][T12737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.526280][T12740] device macvlan0 entered promiscuous mode [ 405.528427][T12740] device bond4 entered promiscuous mode [ 405.533190][T12740] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 405.558523][T12740] device bond4 left promiscuous mode [ 406.187580][T12754] device syzkaller0 entered promiscuous mode [ 406.424551][T12766] loop1: detected capacity change from 0 to 512 [ 406.436185][T12766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.442480][T12764] device syzkaller0 entered promiscuous mode [ 406.854078][T12773] device syzkaller0 entered promiscuous mode [ 406.934367][T12775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.014249][T12783] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 407.108114][T12788] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 407.122184][T12788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.134939][T12788] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 407.139249][T12788] device macvlan0 entered promiscuous mode [ 407.140880][T12788] device bond5 entered promiscuous mode [ 407.142572][T12788] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 407.144410][T12788] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 407.156069][T12788] device bond5 left promiscuous mode [ 407.249965][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 407.287601][T12800] device syzkaller0 entered promiscuous mode [ 407.345312][ T27] audit: type=1326 audit(394.810:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.5.2524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac17a168 code=0x0 [ 407.572898][T12807] device syzkaller0 entered promiscuous mode [ 407.643637][T12811] input: syz1 as /devices/virtual/input/input47 [ 407.808603][T12780] block nbd2: shutting down sockets [ 407.955076][T12815] device syzkaller0 entered promiscuous mode [ 409.161526][T12838] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 409.173764][T12838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.175834][T12840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.207818][T12838] bond5: (slave veth0_to_bond): making interface the new active one [ 409.216299][T12838] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 409.220326][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 409.235842][T12838] device macvlan3 entered promiscuous mode [ 409.239250][T12838] device bond5 entered promiscuous mode [ 409.241377][T12838] device veth0_to_bond entered promiscuous mode [ 409.243910][T12838] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 409.247675][T12838] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 409.256193][T12838] device bond5 left promiscuous mode [ 409.257360][T12838] device veth0_to_bond left promiscuous mode [ 409.628967][T12854] device syzkaller0 entered promiscuous mode [ 409.635166][T12856] device syzkaller0 entered promiscuous mode [ 409.639306][T12860] device syzkaller0 entered promiscuous mode [ 409.931166][ T27] audit: type=1326 audit(397.428:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.0.2544" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e77a168 code=0x0 [ 410.380608][T12878] input: syz1 as /devices/virtual/input/input48 [ 410.390835][T12858] block nbd3: shutting down sockets [ 410.952330][T12889] netlink: 'syz.0.2551': attribute type 1 has an invalid length. [ 410.971372][T12889] 8021q: adding VLAN 0 to HW filter on device bond13 [ 410.980060][T12890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.995378][T12889] bond2: (slave veth0_to_bond): Releasing backup interface [ 411.047839][T12889] device veth0_to_bond left promiscuous mode [ 411.051677][T12889] bond13: (slave veth0_to_bond): making interface the new active one [ 411.060716][T12889] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 411.064229][T12899] device macvlan2 entered promiscuous mode [ 411.065839][T12899] device bond13 entered promiscuous mode [ 411.071263][T12899] device veth0_to_bond entered promiscuous mode [ 411.074541][T12899] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 411.077608][T12899] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 411.080841][T12899] device bond13 left promiscuous mode [ 411.081828][T12899] device veth0_to_bond left promiscuous mode [ 411.167359][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 411.228578][T12908] device syzkaller0 entered promiscuous mode [ 411.423721][T12912] device syzkaller0 entered promiscuous mode [ 411.444982][T12918] device syzkaller0 entered promiscuous mode [ 412.247136][T12919] block nbd3: shutting down sockets [ 412.597117][ T27] audit: type=1326 audit(400.180:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.2563" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed7a168 code=0x0 [ 412.683517][T12953] netlink: 'syz.2.2567': attribute type 1 has an invalid length. [ 412.697961][T12953] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.829219][T12953] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 412.834001][T12955] device macvlan2 entered promiscuous mode [ 412.838720][T12955] device bond9 entered promiscuous mode [ 412.843361][T12955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.848737][T12955] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 412.869374][T12955] device bond9 left promiscuous mode [ 413.008570][T12964] input: syz1 as /devices/virtual/input/input49 [ 413.037009][T12957] device syzkaller0 entered promiscuous mode [ 413.195586][T12969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.319426][T12975] device syzkaller0 entered promiscuous mode [ 413.333053][T12981] device syzkaller0 entered promiscuous mode [ 414.292917][T12983] block nbd0: shutting down sockets [ 414.567464][T13011] netlink: 'syz.5.2581': attribute type 1 has an invalid length. [ 414.596728][T13011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.676153][T13011] bond5: (slave veth0_to_bond): making interface the new active one [ 414.684721][T13011] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 414.690751][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 414.705127][T13015] device syzkaller0 entered promiscuous mode [ 414.721195][T13011] device macvlan2 entered promiscuous mode [ 414.722712][T13011] device bond5 entered promiscuous mode [ 414.723691][T13011] device veth0_to_bond entered promiscuous mode [ 414.733284][T13011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.738564][T13011] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 414.746197][T13011] device bond5 left promiscuous mode [ 414.747157][T13011] device veth0_to_bond left promiscuous mode [ 414.928705][T13019] device syzkaller0 entered promiscuous mode [ 414.939647][T13028] device syzkaller0 entered promiscuous mode [ 415.223889][T13037] input: syz1 as /devices/virtual/input/input50 [ 426.115790][T13035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.243458][T13070] netlink: 'syz.5.2596': attribute type 1 has an invalid length. [ 426.263551][T13070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.296092][T13070] bond5: (slave veth0_to_bond): Releasing active interface [ 426.344497][T13070] bond6: (slave veth0_to_bond): making interface the new active one [ 426.346652][T13070] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 426.348241][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 426.355907][T13077] device macvlan2 entered promiscuous mode [ 426.357375][T13077] device bond6 entered promiscuous mode [ 426.358311][T13077] device veth0_to_bond entered promiscuous mode [ 426.364372][T13077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.366241][T13077] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 426.372925][T13077] device bond6 left promiscuous mode [ 426.373886][T13077] device veth0_to_bond left promiscuous mode [ 426.610889][T13075] device syzkaller0 entered promiscuous mode [ 427.038254][T13063] block nbd0: shutting down sockets [ 427.186954][T13099] input: syz1 as /devices/virtual/input/input51 [ 427.564838][T13108] device syzkaller0 entered promiscuous mode [ 427.777429][T13111] device syzkaller0 entered promiscuous mode [ 427.898532][T13113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.955168][T13119] netlink: 'syz.3.2609': attribute type 1 has an invalid length. [ 427.971607][T13119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 427.982637][T13119] bond5: (slave veth0_to_bond): Releasing active interface [ 428.034983][T13119] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 428.058945][T13124] device syzkaller0 entered promiscuous mode [ 428.140561][T13119] device macvlan0 entered promiscuous mode [ 428.142058][T13119] device bond6 entered promiscuous mode [ 428.143489][T13119] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 428.145323][T13119] bond6: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 428.151770][T13119] device bond6 left promiscuous mode [ 428.604536][T13151] device syzkaller0 entered promiscuous mode [ 429.038707][T13159] device syzkaller0 entered promiscuous mode [ 429.241894][T13142] block nbd3: shutting down sockets [ 429.313165][T13165] loop5: detected capacity change from 0 to 256 [ 429.412542][T13168] device syzkaller0 entered promiscuous mode [ 429.449597][T13169] input: syz1 as /devices/virtual/input/input52 [ 429.705451][T13173] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 429.730167][T13173] 8021q: adding VLAN 0 to HW filter on device bond14 [ 429.756337][T13173] bond13: (slave veth0_to_bond): Releasing active interface [ 429.790411][T13173] bond14: (slave veth0_to_bond): making interface the new active one [ 429.793825][T13173] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.795819][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 429.799705][T13179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.825530][T13182] device syzkaller0 entered promiscuous mode [ 429.828984][T13173] device macvlan2 entered promiscuous mode [ 429.830614][T13173] device bond14 entered promiscuous mode [ 429.831731][T13173] device veth0_to_bond entered promiscuous mode [ 429.833098][T13173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 429.835697][T13173] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 429.838822][T13173] device bond14 left promiscuous mode [ 429.841306][T13173] device veth0_to_bond left promiscuous mode [ 430.081882][T13198] device syzkaller0 entered promiscuous mode [ 430.127377][T13204] loop3: detected capacity change from 0 to 256 [ 430.274386][T13206] device syzkaller0 entered promiscuous mode [ 430.666201][T13230] netlink: 'syz.5.2640': attribute type 1 has an invalid length. [ 430.680327][T13222] block nbd1: shutting down sockets [ 430.688793][T13230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 430.697887][T13230] bond6: (slave veth0_to_bond): Releasing active interface [ 430.754586][T13230] bond7: (slave veth0_to_bond): making interface the new active one [ 430.762492][T13230] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 430.764335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 430.769755][T13234] device bond7 entered promiscuous mode [ 430.770856][T13234] device veth0_to_bond entered promiscuous mode [ 430.786551][T13230] device macvlan2 entered promiscuous mode [ 430.788409][T13230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.790324][T13230] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 431.071863][T13236] device syzkaller0 entered promiscuous mode [ 431.125601][T13238] input: syz1 as /devices/virtual/input/input53 [ 431.359172][T13247] loop3: detected capacity change from 0 to 256 [ 431.362346][T13245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.405256][T13250] device syzkaller0 entered promiscuous mode [ 431.441359][T13254] device syzkaller0 entered promiscuous mode [ 431.748737][T13267] block nbd2: shutting down sockets [ 431.805802][T13274] loop2: detected capacity change from 0 to 256 [ 431.823202][T13274] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.890653][T13285] loop5: detected capacity change from 0 to 256 [ 432.009262][T13290] device syzkaller0 entered promiscuous mode [ 432.017423][T13294] overlayfs: failed to resolve './bus': -2 [ 432.046520][T13288] device syzkaller0 entered promiscuous mode [ 432.457630][T13305] block nbd2: shutting down sockets [ 444.027101][T13325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.258921][T13358] input: syz1 as /devices/virtual/input/input54 [ 444.536805][T13369] device syzkaller0 entered promiscuous mode [ 445.081533][T13355] block nbd0: shutting down sockets [ 445.261840][T13381] device syzkaller0 entered promiscuous mode [ 445.545774][T13387] device syzkaller0 entered promiscuous mode [ 445.714390][T13397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.801067][T13409] overlayfs: failed to resolve './bus': -2 [ 446.076684][T13427] device syzkaller0 entered promiscuous mode [ 446.652559][T13401] block nbd1: shutting down sockets [ 446.791139][T13443] loop1: detected capacity change from 0 to 512 [ 446.813659][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.832338][T13443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 446.838803][T13443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2700: bg 0: block 63: padding at end of block bitmap is not set [ 446.856932][T13443] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.2700: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 446.950405][T13443] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.2700: ea_inode dec ref err=-117 [ 446.966938][T13443] EXT4-fs (loop1): 1 orphan inode deleted [ 446.971493][T13443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 447.127315][T13457] loop3: detected capacity change from 0 to 512 [ 447.948495][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 447.996816][T13462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2703'. [ 448.115007][T13469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.535744][T13497] loop5: detected capacity change from 0 to 512 [ 448.639105][T13497] EXT4-fs (loop5): orphan cleanup on readonly fs [ 448.643869][T13497] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2713: bg 0: block 63: padding at end of block bitmap is not set [ 448.646978][T13497] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.2713: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 448.660184][T13497] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.5.2713: ea_inode dec ref err=-117 [ 448.675719][T13497] EXT4-fs (loop5): 1 orphan inode deleted [ 448.677951][T13497] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 448.688503][T13509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2716'. [ 448.730381][T13513] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 448.737951][T10168] EXT4-fs (loop5): unmounting filesystem. [ 448.749046][T13513] 8021q: adding VLAN 0 to HW filter on device bond6 [ 448.768106][T13513] bond5: (slave veth0_to_bond): Releasing active interface [ 448.833375][T13513] bond6: (slave veth0_to_bond): making interface the new active one [ 448.837102][T13513] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 448.838890][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 448.846567][T13518] device bond6 entered promiscuous mode [ 448.847611][T13518] device veth0_to_bond entered promiscuous mode [ 448.860269][T13513] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 448.881219][T13521] loop3: detected capacity change from 0 to 1024 [ 448.974460][T13521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 449.182272][T13532] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.2720: lblock 0 mapped to illegal pblock 0 (length 6) [ 449.281559][T13486] block nbd0: shutting down sockets [ 449.380654][T13532] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 449.382921][T13532] EXT4-fs (loop3): This should not happen!! Data will be lost [ 449.382921][T13532] [ 449.474440][T13538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.809993][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 449.815270][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 449.824503][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 449.824503][ T39] [ 449.830948][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 449.832131][ T39] EXT4-fs (loop3): Free/Dirty block details [ 449.833127][ T39] EXT4-fs (loop3): free_blocks=0 [ 449.833967][ T39] EXT4-fs (loop3): dirty_blocks=48 [ 449.834839][ T39] EXT4-fs (loop3): Block reservation details [ 450.510421][T13581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.057618][T13603] loop3: detected capacity change from 0 to 1024 [ 451.073937][ T4344] Bluetooth: min 0 < 6 [ 451.093675][T13603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 451.181893][T13567] block nbd2: shutting down sockets [ 451.286876][T13611] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.2741: lblock 0 mapped to illegal pblock 0 (length 6) [ 451.468692][T13611] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 451.471201][T13611] EXT4-fs (loop3): This should not happen!! Data will be lost [ 451.471201][T13611] [ 451.690840][T13626] input: syz1 as /devices/virtual/input/input55 [ 451.981120][ T4652] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set [ 451.985494][ T4652] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 451.988194][ T4652] EXT4-fs (loop3): This should not happen!! Data will be lost [ 451.988194][ T4652] [ 451.994234][ T4652] EXT4-fs (loop3): Total free blocks count 0 [ 451.995389][ T4652] EXT4-fs (loop3): Free/Dirty block details [ 451.997622][ T4652] EXT4-fs (loop3): free_blocks=0 [ 451.998508][ T4652] EXT4-fs (loop3): dirty_blocks=48 [ 452.006784][ T4652] EXT4-fs (loop3): Block reservation details [ 452.346452][T13646] loop5: detected capacity change from 0 to 1024 [ 452.413620][T13646] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 453.240074][T13666] loop2: detected capacity change from 0 to 512 [ 453.273221][T10168] EXT4-fs (loop5): unmounting filesystem. [ 453.301968][T13666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 453.306082][T13666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2761: bg 0: block 63: padding at end of block bitmap is not set [ 453.313132][ T4344] Bluetooth: hci0: command 0x2021 tx timeout [ 453.326295][T13666] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.2761: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 453.334895][ T4341] Bluetooth: min 6 > max 0 [ 453.342517][T13666] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.2761: ea_inode dec ref err=-117 [ 453.344731][T13666] EXT4-fs (loop2): 1 orphan inode deleted [ 453.350690][T13666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 453.350937][T13674] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2765'. [ 453.388757][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 453.750915][T13688] input: syz1 as /devices/virtual/input/input56 [ 454.018594][ T27] audit: type=1326 audit(439.762:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13693 comm="syz.1.2771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9677a168 code=0x0 [ 454.511625][T13715] device syzkaller0 entered promiscuous mode [ 454.515611][T13715] tipc: Enabling of bearer rejected, failed to enable media [ 454.558983][ T4344] Bluetooth: min 6 > max 0 [ 454.606554][ T4341] Bluetooth: hci2: command 0x0406 tx timeout [ 454.722117][T13728] overlayfs: missing 'lowerdir' [ 454.956709][T13743] loop3: detected capacity change from 0 to 512 [ 454.978846][T13743] EXT4-fs (loop3): orphan cleanup on readonly fs [ 454.983057][T13743] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2790: bg 0: block 63: padding at end of block bitmap is not set [ 454.988865][T13743] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:984: inode #11: comm syz.3.2790: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 454.991643][T13743] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.3.2790: ea_inode dec ref err=-117 [ 454.994220][T13743] EXT4-fs (loop3): 1 orphan inode deleted [ 454.997868][T13743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 455.012235][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 455.108756][ T4344] Bluetooth: min 6 > max 0 [ 455.215001][T13756] overlayfs: missing 'lowerdir' [ 455.299273][T13761] device syzkaller0 entered promiscuous mode [ 455.313744][T13761] tipc: Enabling of bearer rejected, failed to enable media [ 455.406327][ T27] audit: type=1326 audit(441.045:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13758 comm="syz.1.2797" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9677a168 code=0x0 [ 455.667943][T13729] block nbd5: shutting down sockets [ 455.724799][ T4341] Bluetooth: min 6 > max 0 [ 455.778457][T13786] loop2: detected capacity change from 0 to 1024 [ 455.897581][T13786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 456.077248][T13799] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.2807: lblock 0 mapped to illegal pblock 0 (length 6) [ 456.223634][T13799] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 456.223788][T13799] EXT4-fs (loop2): This should not happen!! Data will be lost [ 456.223788][T13799] [ 456.393270][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 456.395229][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'. [ 456.397010][T13803] netlink: 'syz.1.2811': attribute type 5 has an invalid length. [ 456.420168][T13805] loop1: detected capacity change from 0 to 256 [ 456.423902][T13805] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.434815][T13805] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 456.443329][T13805] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 456.905202][ T4341] Bluetooth: hci0: command 0x2021 tx timeout [ 456.905226][ T4344] Bluetooth: hci2: command 0x2021 tx timeout [ 456.909102][ T4707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:12: bg 0: block 112: padding at end of block bitmap is not set [ 456.915950][ T4707] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 456.917804][ T4707] EXT4-fs (loop2): This should not happen!! Data will be lost [ 456.917804][ T4707] [ 456.919274][ T4707] EXT4-fs (loop2): Total free blocks count 0 [ 456.920247][ T4707] EXT4-fs (loop2): Free/Dirty block details [ 456.921225][ T4707] EXT4-fs (loop2): free_blocks=0 [ 456.921964][ T4707] EXT4-fs (loop2): dirty_blocks=48 [ 456.922756][ T4707] EXT4-fs (loop2): Block reservation details [ 456.965311][ T4344] Bluetooth: min 6 > max 0 [ 456.983368][T13816] device syzkaller0 entered promiscuous mode [ 457.276943][ T27] audit: type=1326 audit(442.771:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.1.2822" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9677a168 code=0x0 [ 457.303515][ T4332] Bluetooth: hci3: command 0x2021 tx timeout [ 457.458488][T13837] loop2: detected capacity change from 0 to 4096 [ 457.462469][T13837] EXT4-fs: inline encryption not supported [ 457.484650][T13837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 457.486682][T13837] EXT4-fs (loop2): Test dummy encryption mode enabled [ 457.502990][T13837] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 457.504623][T13837] System zones: 0-5 [ 457.508077][T13837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 457.591513][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 457.622390][ T4344] Bluetooth: min 6 > max 0 [ 457.919348][T13818] block nbd3: shutting down sockets [ 458.057841][T13859] device syzkaller0 entered promiscuous mode [ 458.668901][T13875] loop2: detected capacity change from 0 to 1024 [ 458.682668][T13875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 459.019882][T13880] loop5: detected capacity change from 0 to 1024 [ 459.023752][T13880] EXT4-fs: Ignoring removed bh option [ 459.038550][T13885] ima: policy update failed [ 459.045423][ T27] audit: type=1802 audit(444.406:28): pid=13885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2842" res=0 errno=0 [ 459.062992][T13880] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 459.106626][T13894] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 459.112477][ T4332] Bluetooth: hci2: command 0x2021 tx timeout [ 459.129047][T13894] 8021q: adding VLAN 0 to HW filter on device bond7 [ 459.146349][T13894] bond6: (slave veth0_to_bond): Releasing active interface [ 459.149992][T13894] device veth0_to_bond left promiscuous mode [ 459.191375][T13894] bond7: (slave veth0_to_bond): making interface the new active one [ 459.197136][T13894] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 459.207488][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 459.209844][T10168] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 459.221763][T13900] device bond7 entered promiscuous mode [ 459.223623][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.227903][T13900] device veth0_to_bond entered promiscuous mode [ 459.235513][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.238300][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.245641][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 459.248462][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.249873][T10168] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 459.253978][T13894] device macvlan3 entered promiscuous mode [ 459.259807][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.262331][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.266494][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.272779][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.274102][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.282810][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.284875][T10168] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 459.291454][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.292651][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.295330][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.299938][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.300783][T13903] device syzkaller0 entered promiscuous mode [ 459.301693][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.306095][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.307656][T10168] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 459.311460][T10168] EXT4-fs (loop5): Remounting filesystem read-only [ 459.313108][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.315911][T10168] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.320324][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.324757][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.328044][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.331756][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.334940][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.337997][T10168] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 459.541208][T13908] netlink: del zone limit has 8 unknown bytes [ 459.590363][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 459.703196][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 459.805647][ T4344] Bluetooth: hci1: command 0x2021 tx timeout [ 459.814764][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2852'. [ 460.179343][T13932] netlink: 'syz.3.2859': attribute type 1 has an invalid length. [ 460.185485][T13932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 460.192803][T13932] bond6: (slave veth0_to_bond): Releasing active interface [ 460.510078][T13932] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 460.550257][T13939] device bond7 entered promiscuous mode [ 460.584442][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 460.590321][T13932] device macvlan0 entered promiscuous mode [ 460.642574][T13942] loop2: detected capacity change from 0 to 1024 [ 460.669371][T13942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 460.685106][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.689593][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.691749][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.694464][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.696183][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.697792][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.010411][T13458] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.023314][T13926] block nbd1: shutting down sockets [ 461.145058][T13964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.205691][T13458] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.258781][T13978] overlayfs: missing 'workdir' [ 461.291611][T13458] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.313382][T13947] chnl_net:caif_netlink_parms(): no params data found [ 461.330624][T13947] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.332119][T13947] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.334080][T13947] device bridge_slave_0 entered promiscuous mode [ 461.336776][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.338228][T13947] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.340154][T13947] device bridge_slave_1 entered promiscuous mode [ 461.377577][T13990] binder: 13989:13990 Release 1 refcount change on invalid ref 2 ret -22 [ 461.379268][T13990] binder: 13989:13990 got reply transaction with no transaction stack [ 461.380901][T13990] binder_debug: 5 callbacks suppressed [ 461.380913][T13990] binder: 13989:13990 transaction reply to 0:0 failed 114/29201/-71, size 0-0 line 2963 [ 461.384560][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 461.409714][T13458] bond0: (slave netdevsim0): Releasing backup interface [ 461.486897][T13458] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.491609][T13947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.494465][T13947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.508219][T13947] team0: Port device team_slave_0 added [ 461.510335][T13947] team0: Port device team_slave_1 added [ 461.518809][T13947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.520144][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.524718][T13947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.810874][T13947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.815717][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.821251][T13947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.856435][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 461.952889][T13947] device hsr_slave_0 entered promiscuous mode [ 462.015507][T13947] device hsr_slave_1 entered promiscuous mode [ 462.306023][T13947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.310902][T13947] Cannot create hsr debugfs directory [ 462.316960][T13994] block nbd3: shutting down sockets [ 462.528041][T13947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 462.930006][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 463.266379][T13947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.385607][T13947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.493372][T14049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.495096][T13947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.709013][T14067] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 463.779279][T13947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.805774][T13947] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.807176][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.808955][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.133489][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.135297][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.137319][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.138530][ T4652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.146734][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.264946][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.266744][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.268782][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.270018][ T4652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.274997][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.278233][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.284481][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.287393][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.289071][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.293600][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.295552][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.298140][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.299805][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.309660][T13947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.313204][T13947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.429263][T14094] Soft offlining pfn 0x12eff9 at process virtual address 0x20ff9000 [ 464.514019][T14094] Memory failure: 0x12eff9: unhandlable page. [ 464.556399][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.558278][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.636767][T14070] block nbd2: shutting down sockets [ 464.674938][ T27] audit: type=1326 audit(449.603:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2894" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9677a168 code=0x0 [ 465.023294][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.024960][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.031313][T13947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.189217][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 465.522897][T14142] netlink: 'syz.0.2899': attribute type 1 has an invalid length. [ 465.585785][T14142] 8021q: adding VLAN 0 to HW filter on device bond15 [ 465.642325][T14143] bond14: (slave veth0_to_bond): Releasing active interface [ 465.669064][T14143] bond15: (slave veth0_to_bond): making interface the new active one [ 465.671203][T14143] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 465.674983][T14144] device bond15 entered promiscuous mode [ 465.675980][T14144] device veth0_to_bond entered promiscuous mode [ 465.680821][T14145] device macvlan2 entered promiscuous mode [ 465.715779][T14161] overlayfs: failed to resolve './file0': -2 [ 465.739687][T14149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.756859][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.758651][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.814770][T14170] loop2: detected capacity change from 0 to 4096 [ 465.823718][T14170] EXT4-fs: inline encryption not supported [ 465.831509][T14170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 465.832881][T14170] EXT4-fs (loop2): Test dummy encryption mode enabled [ 465.846151][T14170] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 465.847677][T14170] System zones: 0-5 [ 465.849056][T14170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 465.877432][T14170] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 466.210950][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 466.333323][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.335128][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.340932][T13947] device veth0_vlan entered promiscuous mode [ 466.342336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.344192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.352620][T13947] device veth1_vlan entered promiscuous mode [ 466.362607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 466.364198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 466.365718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.367454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.643648][T13947] device veth0_macvtap entered promiscuous mode [ 466.670242][T13458] device hsr_slave_0 left promiscuous mode [ 466.706297][ T27] audit: type=1326 audit(451.477:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14193 comm="syz.1.2910" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9677a168 code=0x0 [ 466.771661][T13458] device hsr_slave_1 left promiscuous mode [ 466.896687][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.912030][T13458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.001684][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.086077][T13458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.090522][T13458] device bridge_slave_1 left promiscuous mode [ 467.092997][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.141187][T13458] device bridge_slave_0 left promiscuous mode [ 467.142483][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.301205][T13458] device veth1_macvtap left promiscuous mode [ 467.302326][T13458] device veth0_macvtap left promiscuous mode [ 467.303428][T13458] device veth1_vlan left promiscuous mode [ 467.304488][T13458] device veth0_vlan left promiscuous mode [ 467.442100][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 467.622730][T14219] loop1: detected capacity change from 0 to 1024 [ 467.626567][T14219] EXT4-fs: Ignoring removed bh option [ 467.664591][T14219] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 467.707074][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.711229][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.719997][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.726831][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.728143][ T4334] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 467.731909][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.733160][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.742570][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.746802][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.748186][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.752728][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.754014][ T4334] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 467.757520][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.758639][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.761267][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.765084][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.766327][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.773590][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.774882][ T4334] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 467.793921][ T4334] EXT4-fs (loop1): Remounting filesystem read-only [ 467.795173][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.797764][ T4334] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /590/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.810659][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.819139][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.826194][T14230] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 467.826536][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.831259][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.848528][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.851605][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.858863][ T4334] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 468.093082][T13458] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 468.094658][T13458] device veth0_to_bond left promiscuous mode [ 468.146110][T13458] bond7 (unregistering): Released all slaves [ 468.883439][T13458] bond6 (unregistering): Released all slaves [ 469.577613][T13458] bond5 (unregistering): Released all slaves [ 469.684088][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 470.272427][T13458] bond4 (unregistering): Released all slaves [ 471.050378][T13458] bond3 (unregistering): Released all slaves [ 471.840564][T13458] bond2 (unregistering): Released all slaves [ 472.556718][T13458] bond1 (unregistering): Released all slaves [ 474.789670][T13458] team0 (unregistering): Port device team_slave_1 removed [ 474.992357][T13458] team0 (unregistering): Port device team_slave_0 removed [ 475.187524][T13458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.436782][T13458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.888633][T13458] bond0 (unregistering): Released all slaves [ 477.205691][T13947] device veth1_macvtap entered promiscuous mode [ 477.208516][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.210166][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.216278][T14214] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 477.233808][T14215] bond9: (slave veth0_to_bond): Releasing active interface [ 477.726488][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.732272][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.734042][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.735821][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.740861][T13947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.744811][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.746695][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.750198][ T27] audit: type=1326 audit(461.679:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.3.2925" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed7a168 code=0x0 [ 477.773790][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.776715][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.778292][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.779916][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.782180][T13947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.784116][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.787693][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.798908][T13947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.800408][T13947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.801763][T13947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.803092][T13947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.848790][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.850439][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.854839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.861415][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.863416][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.865067][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.867022][ T4334] EXT4-fs: 294 callbacks suppressed [ 477.867030][ T4334] EXT4-fs (loop1): unmounting filesystem. [ 478.083751][ T4344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.087181][ T4344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.089353][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.092848][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.095256][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 478.096622][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.640244][T14288] chnl_net:caif_netlink_parms(): no params data found [ 478.687840][T14324] input: syz1 as /devices/virtual/input/input57 [ 478.740003][T14288] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.743505][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.748883][T14288] device bridge_slave_0 entered promiscuous mode [ 478.774942][T14288] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.785358][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.790661][T14288] device bridge_slave_1 entered promiscuous mode [ 478.815755][T14336] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 478.838933][T14288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.862263][T14288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.023676][ T27] audit: type=1326 audit(462.824:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz.2.2945" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e57a168 code=0x0 [ 479.427618][T13458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.450558][T14288] team0: Port device team_slave_0 added [ 479.455764][T14288] team0: Port device team_slave_1 added [ 479.463586][T14288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.469421][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.477567][T14288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.484135][T14288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.486509][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.497891][T14288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.568331][T14288] device hsr_slave_0 entered promiscuous mode [ 479.606933][T14288] device hsr_slave_1 entered promiscuous mode [ 479.661284][T14288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.665065][T14288] Cannot create hsr debugfs directory [ 479.759114][T13458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.825827][T14375] netlink: 'syz.6.2949': attribute type 1 has an invalid length. [ 479.903576][T13458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.929311][T14386] Mass Storage Function, version: 2009/09/11 [ 479.934363][T14386] LUN: removable file: (no medium) [ 479.935864][T14375] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 479.941105][T14380] device bond0 entered promiscuous mode [ 479.943820][T14386] LUN: removable file: (no medium) [ 479.944864][T14380] device bond_slave_0 entered promiscuous mode [ 479.945882][T14380] device bond_slave_1 entered promiscuous mode [ 479.952429][T14380] device veth0_to_bond entered promiscuous mode [ 479.975919][T14375] device macvlan2 entered promiscuous mode [ 480.030871][T13458] bond0: (slave netdevsim0): Releasing backup interface [ 480.063792][T13458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.077641][T14288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 480.119564][T14288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 480.159902][T14288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 480.201456][T14288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 480.333559][T14422] input: syz1 as /devices/virtual/input/input58 [ 480.342983][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 480.419564][T13458] tipc: Left network mode [ 480.446872][T14288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.462368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.463986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.470690][T14288] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.474049][T14432] Console: switching to colour dummy device 80x25 [ 480.477569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.479342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.480848][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.482066][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.495282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.500873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.503008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.516146][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.517409][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.524108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.525922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.533696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.547946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.564295][T14288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.566088][T14288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.690201][T14451] loop6: detected capacity change from 0 to 1024 [ 480.736603][T14451] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 480.837283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.839159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.841310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.843248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.848905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.855769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.862206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.872593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.900175][T13947] EXT4-fs (loop6): unmounting filesystem. [ 481.394747][T14288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.397554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.399538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.406571][T14479] loop2: detected capacity change from 0 to 256 [ 481.631422][T14501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.695638][T14506] loop6: detected capacity change from 0 to 1024 [ 481.722908][T13459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.723263][T13459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.755172][T14506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 481.798503][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.800303][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.802079][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.803551][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.813085][T14288] device veth0_vlan entered promiscuous mode [ 481.818328][T14288] device veth1_vlan entered promiscuous mode [ 481.826490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 481.830452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 481.832232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.835190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.889123][T14288] device veth0_macvtap entered promiscuous mode [ 481.900104][T14288] device veth1_macvtap entered promiscuous mode [ 481.906702][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.908581][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.910618][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.912268][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.914112][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.915846][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.918098][T14288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.919571][T13459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 481.921442][T13459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.923247][T13459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.931219][T13459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.046144][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.048287][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.050062][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.051682][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.053298][T14288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.055729][T14288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.058250][T14288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.069989][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.073043][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.117215][T14288] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.118795][T14288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.127131][T14288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.128568][T14288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.226061][T14552] loop2: detected capacity change from 0 to 512 [ 482.238460][T14552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 482.240832][T14552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 482.263547][T14552] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2990: invalid indirect mapped block 32768 (level 2) [ 482.275034][T14552] EXT4-fs (loop2): Remounting filesystem read-only [ 482.279044][T14552] EXT4-fs (loop2): 1 orphan inode deleted [ 482.287260][T14552] EXT4-fs (loop2): 1 truncate cleaned up [ 482.289929][T14552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 482.366337][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 482.685900][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 482.729587][T13947] EXT4-fs (loop6): unmounting filesystem. [ 482.805645][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.807067][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.808411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.087147][T14574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.090853][T13459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.092159][T13459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.094148][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.277349][T13458] device hsr_slave_0 left promiscuous mode [ 483.319758][T13458] device hsr_slave_1 left promiscuous mode [ 483.440902][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.442238][T13458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.443939][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.445501][T13458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.447325][T13458] device bridge_slave_1 left promiscuous mode [ 483.448548][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.500362][T13458] device bridge_slave_0 left promiscuous mode [ 483.502140][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.819746][T13458] device veth1_macvtap left promiscuous mode [ 483.820870][T13458] device veth0_macvtap left promiscuous mode [ 483.821930][T13458] device veth1_vlan left promiscuous mode [ 483.822898][T13458] device veth0_vlan left promiscuous mode [ 484.600788][T13458] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 484.602344][T13458] device veth0_to_bond left promiscuous mode [ 484.643523][T13458] bond7 (unregistering): Released all slaves [ 484.935487][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 485.351670][T13458] bond6 (unregistering): Released all slaves [ 486.073706][T13458] bond5 (unregistering): Released all slaves [ 486.777768][T13458] bond4 (unregistering): Released all slaves [ 487.188404][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 487.503941][T13458] bond3 (unregistering): Released all slaves [ 488.210360][T13458] bond2 (unregistering): Released all slaves [ 488.934205][T13458] bond1 (unregistering): Released all slaves [ 491.233946][T13458] team0 (unregistering): Port device team_slave_1 removed [ 491.437248][T13458] team0 (unregistering): Port device team_slave_0 removed [ 491.619856][T13458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.872733][T13458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.321188][T13458] bond0 (unregistering): Released all slaves [ 493.647604][T14619] netlink: 'syz.6.3004': attribute type 1 has an invalid length. [ 493.652876][T14616] bond0: (slave veth0_to_bond): Releasing backup interface [ 493.687879][T14616] device veth0_to_bond left promiscuous mode [ 493.724042][T14626] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3004'. [ 493.882598][T14668] device syzkaller0 entered promiscuous mode [ 493.960581][ T4344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.964206][ T4344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.966055][ T4344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.967667][ T4344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.969481][ T4344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 493.971046][ T4344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.976997][T14672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.978368][T14672] IPv6: NLM_F_CREATE should be set when creating new route [ 494.169991][T14698] input: syz1 as /devices/virtual/input/input60 [ 494.261053][T14709] loop2: detected capacity change from 0 to 512 [ 494.287043][T14709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 494.288842][T14709] System zones: 1-12 [ 494.338435][T14709] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.3017: missing EA_INODE flag [ 494.342524][T14709] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3017: error while reading EA inode 12 err=-117 [ 494.350919][T14709] EXT4-fs (loop2): 1 orphan inode deleted [ 494.352076][T14709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 494.362669][T14675] chnl_net:caif_netlink_parms(): no params data found [ 494.369451][T14709] fscrypt (loop2, inode 15): Reserved bits set in encryption policy [ 494.486246][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 494.493220][T14675] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.503727][T14675] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.803434][T14675] device bridge_slave_0 entered promiscuous mode [ 494.806243][T14675] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.807454][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.808972][T14675] device bridge_slave_1 entered promiscuous mode [ 494.818607][T14675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.825396][T14675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.827564][T14728] netlink: 'syz.2.3019': attribute type 1 has an invalid length. [ 494.850173][T14675] team0: Port device team_slave_0 added [ 494.863032][T14675] team0: Port device team_slave_1 added [ 494.970220][T14675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.973769][T14675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.984852][T14732] infiniband syz1: set active [ 494.985818][T14732] infiniband syz1: added syz_tun [ 494.987582][T14675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.999070][T14675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.000283][T14675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.004556][T14675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.977341][T14732] RDS/IB: syz1: added [ 495.978432][T14732] smc: adding ib device syz1 with port count 1 [ 496.050327][T14732] smc: ib device syz1 port 1 has pnetid [ 496.107642][T14675] device hsr_slave_0 entered promiscuous mode [ 496.211425][ T4344] Bluetooth: hci5: command 0x0409 tx timeout [ 496.222906][T14675] device hsr_slave_1 entered promiscuous mode [ 496.277184][T14675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.278618][T14675] Cannot create hsr debugfs directory [ 496.425271][T14749] loop2: detected capacity change from 0 to 512 [ 496.954530][T14749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.311685][T14748] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.313287][T14748] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.314815][T14748] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.316284][T14748] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.334384][T14748] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 497.498987][T14771] binder: 14770:14771 tried to acquire reference to desc 0, got 1 instead [ 497.507514][T14771] binder: 14770:14771 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 497.509851][T14771] binder: 14771 RLIMIT_NICE not set [ 497.510748][T14771] binder: 14771 RLIMIT_NICE not set [ 497.518220][T14771] binder: 14770:14771 got new transaction with bad transaction stack, transaction 119 has target 14770:14771 [ 497.522217][T14771] binder: 14770:14771 transaction call to 14770:0 failed 120/29201/-71, size 0-0 line 3122 [ 497.528163][ T5325] binder: release 14770:14771 transaction 119 out, still active [ 497.529562][ T5325] binder: undelivered TRANSACTION_COMPLETE [ 497.530501][ T5325] binder: undelivered TRANSACTION_ERROR: 29201 [ 497.544191][ T5471] binder: release 14770:14771 transaction 119 in, still active [ 497.545561][ T5471] binder: send failed reply for transaction 119, target dead [ 497.548277][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 497.689457][ T27] audit: type=1326 audit(480.087:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14785 comm="syz.6.3031" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa77a168 code=0x0 [ 497.734515][ T4475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.130067][ T4475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.282844][ T4344] Bluetooth: hci5: command 0x041b tx timeout [ 499.371484][ T4475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.397138][T14819] netlink: 'syz.6.3036': attribute type 1 has an invalid length. [ 499.424238][T14819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.449540][T14811] bond1: (slave veth0_to_bond): making interface the new active one [ 499.457460][T14811] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 499.575872][ T4475] bond0: (slave netdevsim0): Releasing backup interface [ 499.667778][T14832] loop7: detected capacity change from 0 to 512 [ 500.166071][T14832] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 500.501940][ T4475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.517747][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 500.551920][T14811] device bond1 entered promiscuous mode [ 500.553056][T14811] device veth0_to_bond entered promiscuous mode [ 500.565709][T14831] device syzkaller0 entered promiscuous mode [ 500.567400][T14819] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3036'. [ 500.576956][T14251] syzkaller0: tun_net_xmit 48 [ 500.587781][T14826] syzkaller0: tun_net_xmit 1500 [ 500.640461][ T27] audit: type=1326 audit(482.802:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14846 comm="syz.6.3044" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa77a168 code=0x0 [ 501.063308][T14288] EXT4-fs (loop7): unmounting filesystem. [ 501.497569][ T4332] Bluetooth: hci5: command 0x040f tx timeout [ 503.739545][ T4332] Bluetooth: hci5: command 0x0419 tx timeout [ 504.397617][T14865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.619257][T14896] input: syz1 as /devices/virtual/input/input61 [ 512.701542][T14889] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 512.709610][T14890] bond15: (slave veth0_to_bond): Releasing active interface [ 512.710997][T14890] device veth0_to_bond left promiscuous mode [ 512.796372][T14892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3054'. [ 513.208331][T14926] binder: 14924:14926 tried to acquire reference to desc 0, got 1 instead [ 513.217849][T14926] binder: 14924:14926 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 513.219956][T14926] binder: 14926 RLIMIT_NICE not set [ 513.276837][T14926] binder: 14926 RLIMIT_NICE not set [ 513.277960][T14938] binder: 14924:14938 unknown command 0 [ 513.278935][T14938] binder: 14924:14938 ioctl c0306201 20000480 returned -22 [ 513.280806][T14656] binder: release 14924:14938 transaction 125 out, still active [ 513.282446][T14656] binder: undelivered TRANSACTION_COMPLETE [ 513.288156][ T5471] binder: release 14924:14926 transaction 125 in, still active [ 513.289640][ T5471] binder: send failed reply for transaction 125, target dead [ 513.371264][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.786248][T14949] input: syz1 as /devices/virtual/input/input62 [ 514.000744][T14964] netlink: 'syz.7.3071': attribute type 1 has an invalid length. [ 514.018100][T14964] device veth1_to_team entered promiscuous mode [ 514.034806][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3071'. [ 514.036612][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3071'. [ 514.284699][T14986] fuse: Bad value for 'fd' [ 514.598506][T15005] netlink: 'syz.0.3081': attribute type 1 has an invalid length. [ 514.610450][T15005] 8021q: adding VLAN 0 to HW filter on device bond16 [ 514.617800][T15005] bond16: (slave veth0_to_bond): making interface the new active one [ 514.620077][T15005] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 514.621726][T14754] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 514.641919][T15005] device bond16 entered promiscuous mode [ 514.645057][T15005] device veth0_to_bond entered promiscuous mode [ 514.652863][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3081'. [ 514.654323][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 514.885186][T15039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.918149][T15039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.392805][T15057] netlink: 'syz.7.3095': attribute type 1 has an invalid length. [ 515.399747][T15057] device veth0_virt_wifi entered promiscuous mode [ 515.413433][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3095'. [ 515.415244][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3095'. [ 515.500689][T15060] input: syz1 as /devices/virtual/input/input63 [ 515.622553][ T4475] tipc: Left network mode [ 516.318759][T15102] netlink: 'syz.0.3107': attribute type 1 has an invalid length. [ 516.345543][T15102] 8021q: adding VLAN 0 to HW filter on device bond17 [ 516.385249][T15103] bond16: (slave veth0_to_bond): Releasing active interface [ 516.391608][T15103] device veth0_to_bond left promiscuous mode [ 516.430784][T15103] bond17: (slave veth0_to_bond): making interface the new active one [ 516.432983][T15103] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 516.496788][T15100] device bond17 entered promiscuous mode [ 516.498912][T15100] device veth0_to_bond entered promiscuous mode [ 516.510459][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 517.223089][T15164] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 517.416507][T15175] netlink: 'syz.6.3125': attribute type 1 has an invalid length. [ 517.425695][T15175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.435048][T15173] bond1: (slave veth0_to_bond): Releasing active interface [ 517.436452][T15173] device veth0_to_bond left promiscuous mode [ 517.739063][T15173] bond2: (slave veth0_to_bond): making interface the new active one [ 517.741447][T15173] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 517.743013][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 517.750329][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3125'. [ 517.827830][T15175] device bond2 entered promiscuous mode [ 517.829018][T15175] device veth0_to_bond entered promiscuous mode [ 517.894577][T15188] loop6: detected capacity change from 0 to 512 [ 517.932070][T15188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 517.933649][T15188] System zones: 1-12 [ 517.936123][T15188] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.3132: missing EA_INODE flag [ 517.939960][T15188] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.3132: error while reading EA inode 12 err=-117 [ 517.949448][T15188] EXT4-fs (loop6): 1 orphan inode deleted [ 517.950587][T15188] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 517.955643][T15188] fscrypt (loop6, inode 15): Reserved bits set in encryption policy [ 518.316097][T13947] EXT4-fs (loop6): unmounting filesystem. [ 518.438688][T14675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.569374][T14675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.787631][T14675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.278372][T14675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.328686][T15222] netlink: 'syz.6.3141': attribute type 1 has an invalid length. [ 519.338583][T15222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.397291][T15222] bond2: (slave veth0_to_bond): Releasing active interface [ 519.401250][T15222] device veth0_to_bond left promiscuous mode [ 519.474142][T15222] bond3: (slave veth0_to_bond): making interface the new active one [ 519.476588][T15222] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 519.485391][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 519.993204][T15228] device bond3 entered promiscuous mode [ 519.994154][T15228] device veth0_to_bond entered promiscuous mode [ 519.999514][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3141'. [ 520.066325][T14675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.199248][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.200876][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.715866][ T4475] device hsr_slave_0 left promiscuous mode [ 521.308545][ T4475] device hsr_slave_1 left promiscuous mode [ 521.821699][ T4475] device veth1_macvtap left promiscuous mode [ 521.830341][ T4475] device veth0_macvtap left promiscuous mode [ 521.836634][ T4475] device veth0_vlan left promiscuous mode [ 523.001302][ T4475] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 523.042864][ T4475] bond7 (unregistering): Released all slaves [ 523.770387][ T4475] bond6 (unregistering): Released all slaves [ 524.518397][ T4475] bond5 (unregistering): Released all slaves [ 525.285941][ T4475] bond4 (unregistering): Released all slaves [ 526.021820][ T4475] bond3 (unregistering): Released all slaves [ 526.737202][ T4475] bond2 (unregistering): Released all slaves [ 528.093962][ T4475] bond1 (unregistering): Released all slaves [ 532.456611][ T4475] bond0 (unregistering): Released all slaves [ 532.660254][T15286] netlink: 'syz.0.3154': attribute type 1 has an invalid length. [ 532.698035][T15293] bond17: (slave veth0_to_bond): Releasing active interface [ 532.699490][T15293] device veth0_to_bond left promiscuous mode [ 532.744526][T14675] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.813328][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.815199][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.876929][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.878425][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.886719][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.893877][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.895982][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3160'. [ 532.896142][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.898901][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.910154][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.912019][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.919464][T14675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.921687][T14675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.926544][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.928298][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.930330][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.944245][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.225164][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.239330][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.252438][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.275523][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.278298][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.296706][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.311771][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.448299][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.450071][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.456661][T14675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.467140][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.469334][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.488375][T14675] device veth0_vlan entered promiscuous mode [ 533.492005][T14754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.494023][T14754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.497417][T14754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.499342][T14754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.500084][T15367] nullb0: [POWERTEC] p1 p2 p3 p4 p5 [ 533.502154][T14675] device veth1_vlan entered promiscuous mode [ 533.507051][T15367] nullb0: p1 start 1697608821 is beyond EOD, truncated [ 533.536407][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.538855][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 533.540649][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.542575][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.560777][T14675] device veth0_macvtap entered promiscuous mode [ 533.572533][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3169'. [ 533.581264][T14675] device veth1_macvtap entered promiscuous mode [ 533.608053][T14675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.613456][T14675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.617908][T14675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.620406][T14675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.622227][T14675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.624253][T14675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.627932][T14675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.629748][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 533.631596][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 533.633451][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 533.635268][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 533.641272][T15378] netlink: 'syz.6.3170': attribute type 1 has an invalid length. [ 533.656854][T15378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 533.659802][T14675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.661914][T14675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.663654][T14675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.665724][T14675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.672427][T14675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.676013][T14675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.679786][T14675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.696650][T15378] bond3: (slave veth0_to_bond): Releasing active interface [ 533.698165][T15378] device veth0_to_bond left promiscuous mode [ 533.748011][T15378] bond4: (slave veth0_to_bond): making interface the new active one [ 533.750175][T15378] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 533.751760][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 533.753516][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 533.755714][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 533.795162][T15389] device bond4 entered promiscuous mode [ 533.796333][T15389] device veth0_to_bond entered promiscuous mode [ 533.853684][T14675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.855318][T14675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.856867][T14675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.858394][T14675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.876817][T15378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3170'. [ 533.959281][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.960948][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.965612][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 533.984109][ T4464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.985935][ T4464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.987625][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 534.921164][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.927311][ T4344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.934948][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.941563][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.943346][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 534.945217][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.994173][T15445] fuse: Bad value for 'fd' [ 535.069445][T15448] binder: 15447:15448 tried to acquire reference to desc 0, got 1 instead [ 535.073022][T15448] binder_alloc: 15447: binder_alloc_buf, no vma [ 535.099871][T15448] binder: cannot allocate buffer: vma cleared, target dead or dying [ 535.099913][T15448] binder: 15447:15448 transaction call to 15447:0 failed 130/29189/-3, size 0-0 line 3247 [ 535.166257][T15448] binder: 15447:15448 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 535.168713][T15448] binder: 15448 RLIMIT_NICE not set [ 535.505080][T15466] binder_alloc: 15447: binder_alloc_buf, no vma [ 535.512280][T15466] binder: cannot allocate buffer: vma cleared, target dead or dying [ 535.512323][T15466] binder: 15447:15466 transaction call to 15447:0 failed 131/29189/-3, size 0-0 line 3247 [ 535.685500][T15486] loop3: detected capacity change from 0 to 512 [ 535.690448][T15486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 535.692195][T15486] System zones: 1-12 [ 535.694523][T15486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.3184: missing EA_INODE flag [ 535.696955][T15486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3184: error while reading EA inode 12 err=-117 [ 535.699446][T15486] EXT4-fs (loop3): 1 orphan inode deleted [ 535.700624][T15486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 535.715983][T14675] EXT4-fs (loop3): unmounting filesystem. [ 535.983911][ T3901] binder: undelivered TRANSACTION_ERROR: 29189 [ 535.990685][ T3901] binder: undelivered TRANSACTION_ERROR: 29189 [ 536.075465][ T27] audit: type=1326 audit(515.529:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.3.3188" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb617a168 code=0x0 [ 536.114770][T13458] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.116640][T13458] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.185671][T13458] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.187944][T13458] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.218232][T15441] chnl_net:caif_netlink_parms(): no params data found [ 536.233128][T13458] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.234867][T13458] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.250479][T15441] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.251890][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.253738][T15441] device bridge_slave_0 entered promiscuous mode [ 536.256200][T15441] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.257726][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.259532][T15441] device bridge_slave_1 entered promiscuous mode [ 536.278925][T15441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.282418][T15441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.310196][T15441] team0: Port device team_slave_0 added [ 536.314074][T13458] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.316231][T13458] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.321170][T15441] team0: Port device team_slave_1 added [ 536.331154][T15441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.332584][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.337805][T15441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.341348][T15441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.342726][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.354048][T15441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.399505][T15441] device hsr_slave_0 entered promiscuous mode [ 536.421207][T15441] device hsr_slave_1 entered promiscuous mode [ 536.463315][T15441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.465227][T15441] Cannot create hsr debugfs directory [ 536.608037][T13458] netdevsim netdevsim12 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.610052][T13458] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.916774][T13458] tipc: Left network mode [ 537.189693][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 537.424515][T15556] binder: 15555:15556 tried to acquire reference to desc 0, got 1 instead [ 537.426501][T15556] binder_alloc: 15555: binder_alloc_buf, no vma [ 537.438794][T15556] binder: cannot allocate buffer: vma cleared, target dead or dying [ 537.438837][T15556] binder: 15555:15556 transaction call to 15555:0 failed 136/29189/-3, size 0-0 line 3247 [ 537.442168][T15556] binder: 15555:15556 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 537.444487][T15556] binder: 15556 RLIMIT_NICE not set [ 537.497857][T15560] binder_alloc: 15555: binder_alloc_buf, no vma [ 537.499178][T15560] binder: cannot allocate buffer: vma cleared, target dead or dying [ 537.499212][T15560] binder: 15555:15560 transaction call to 15555:0 failed 137/29189/-3, size 0-0 line 3247 [ 537.944875][T15564] loop3: detected capacity change from 0 to 512 [ 538.162147][T15564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 539.297748][T15590] input: syz1 as /devices/virtual/input/input64 [ 539.340506][T14675] EXT4-fs (loop3): unmounting filesystem. [ 539.528214][ T4344] Bluetooth: hci4: command 0x041b tx timeout [ 539.951335][T15627] loop7: detected capacity change from 0 to 512 [ 540.300511][T15627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 540.697430][T15632] loop3: detected capacity change from 0 to 256 [ 540.921900][T14288] EXT4-fs (loop7): unmounting filesystem. [ 541.781389][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 542.326562][T13458] device hsr_slave_0 left promiscuous mode [ 542.355449][T13458] device hsr_slave_1 left promiscuous mode [ 542.572000][T13458] device veth1_macvtap left promiscuous mode [ 542.573135][T13458] device veth0_macvtap left promiscuous mode [ 542.574271][T13458] device veth1_vlan left promiscuous mode [ 542.575207][T13458] device veth0_vlan left promiscuous mode [ 542.707003][T15721] loop3: detected capacity change from 0 to 512 [ 542.710083][T15721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 542.711578][T15721] System zones: 1-12 [ 542.713143][T15721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.3219: missing EA_INODE flag [ 542.715030][T15721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3219: error while reading EA inode 12 err=-117 [ 542.717153][T15721] EXT4-fs (loop3): 1 orphan inode deleted [ 542.718184][T15721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 542.744237][T14675] EXT4-fs (loop3): unmounting filesystem. [ 543.365520][T13458] bond9 (unregistering): Released all slaves [ 544.030066][T15639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.034281][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 544.103438][T13458] bond8 (unregistering): Released all slaves [ 544.288085][T15743] input: syz1 as /devices/virtual/input/input65 [ 544.935524][T13458] bond7 (unregistering): Released all slaves [ 545.877948][T13458] bond6 (unregistering): Released all slaves [ 546.176078][T15757] netlink: 'syz.0.3232': attribute type 1 has an invalid length. [ 546.201805][T15759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3233'. [ 547.025483][T13458] bond5 (unregistering): Released all slaves [ 547.794812][T13458] bond4 (unregistering): Released all slaves [ 548.510896][T13458] bond3 (unregistering): Released all slaves [ 549.258877][T13458] bond2 (unregistering): Released all slaves [ 550.136406][T13458] bond1 (unregistering): Released all slaves [ 554.316072][T13458] bond0 (unregistering): Released all slaves [ 554.663585][T15441] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.710626][T15441] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 554.759941][T15441] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 554.815247][T15791] netlink: 'syz.6.3243': attribute type 1 has an invalid length. [ 554.825394][T15441] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.163808][T15800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.292194][T15812] input: syz1 as /devices/virtual/input/input66 [ 555.445176][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.449890][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 555.453104][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.461541][T15441] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.467801][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 555.470862][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 555.485132][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.486522][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.500282][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 555.506950][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 555.509167][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.510488][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.512147][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 555.573257][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 555.576810][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 555.596128][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 555.608775][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 555.618424][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 555.905256][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 555.938116][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.941832][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.946087][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.956580][T15441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.969515][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.972000][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.049860][T15839] loop3: detected capacity change from 0 to 256 [ 557.267161][T15847] gadgetfs: bound to dummy_udc driver [ 557.364526][T15441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.368408][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.369708][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.385346][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.387124][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.413862][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.415557][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.417245][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.418640][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.421286][T15441] device veth0_vlan entered promiscuous mode [ 557.425186][T15441] device veth1_vlan entered promiscuous mode [ 557.440503][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 557.442292][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 557.450649][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.478268][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.481273][T15441] device veth0_macvtap entered promiscuous mode [ 557.483673][T15441] device veth1_macvtap entered promiscuous mode [ 557.500064][T15865] loop3: detected capacity change from 0 to 1024 [ 557.512208][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.514114][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.515819][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.517558][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.519092][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.523603][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.525235][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.526943][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.543367][T15441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.545715][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.547363][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.548940][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.550594][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.552105][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.556012][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.557795][T15441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.559655][T15441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.625332][T15877] loop7: detected capacity change from 0 to 1024 [ 558.092184][T15441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.158440][T15865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 558.181815][T15877] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 558.333013][T15877] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.3258: path /50/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 558.496202][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 558.499493][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.503040][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.672680][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.711269][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 558.753734][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.933873][T15441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.935464][T15441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.939036][T15441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.940717][T15441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.097536][T15893] loop6: detected capacity change from 0 to 128 [ 559.120838][T14027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.122321][T14027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.124347][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 559.225201][T14750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.228166][T15893] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 559.228550][T14750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.231964][T14027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 559.237315][T15893] EXT4-fs warning (device loop6): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 559.519817][T13947] EXT4-fs (loop6): unmounting filesystem. [ 559.524889][T14288] EXT4-fs (loop7): unmounting filesystem. [ 559.616666][T15910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3263'. [ 559.690389][T15913] loop2: detected capacity change from 0 to 512 [ 559.711055][T15922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.712528][T15922] IPv6: NLM_F_CREATE should be set when creating new route [ 559.721011][T15913] EXT4-fs (loop2): 1 truncate cleaned up [ 559.722014][T15913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 559.725671][T15913] EXT4-fs (loop2): shut down requested (2) [ 559.836523][T15441] EXT4-fs (loop2): unmounting filesystem. [ 560.333405][ T4344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.336551][ T4344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.338592][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.340559][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.400749][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 560.402385][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.757083][T15962] binder: 15961:15962 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 560.768469][T15962] binder: 15961:15962 got transaction to invalid handle, 1 [ 560.771154][T15962] binder_debug: 2 callbacks suppressed [ 560.771170][T15962] binder: 15962:15961 cannot find target node [ 560.785155][T15962] binder: 15961:15962 transaction call to 0:0 failed 140/29201/-22, size 0-0 line 3062 [ 560.789576][T15962] binder: 15961:15962 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 560.796496][T15962] binder: 15962 RLIMIT_NICE not set [ 560.811153][T14675] EXT4-fs (loop3): unmounting filesystem. [ 560.844802][T15969] binder: 15961:15969 got transaction to invalid handle, 1 [ 560.846434][T15969] binder: 15969:15961 cannot find target node [ 560.847587][T15969] binder: 15961:15969 transaction call to 0:0 failed 141/29201/-22, size 0-0 line 3062 [ 560.909369][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3278'. [ 561.347732][T15952] chnl_net:caif_netlink_parms(): no params data found [ 561.411259][T14750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.413248][T14750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.424397][T16002] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 561.479187][T15952] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.480583][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.482391][T15952] device bridge_slave_0 entered promiscuous mode [ 561.487659][T15952] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.488881][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.490395][T15952] device bridge_slave_1 entered promiscuous mode [ 561.497024][T15952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.499614][T15952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.514140][T15952] team0: Port device team_slave_0 added [ 561.516408][T15952] team0: Port device team_slave_1 added [ 561.596692][T16020] loop2: detected capacity change from 0 to 1024 [ 561.618233][T14750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.619933][T14750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.635309][T15952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.640124][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 561.641247][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 561.650279][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.655393][T15952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.665192][T15952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.667997][T16020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 561.669002][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.674225][T15952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.799825][T14750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.801707][T14750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.930986][T15952] device hsr_slave_0 entered promiscuous mode [ 561.961319][T15952] device hsr_slave_1 entered promiscuous mode [ 562.236823][T15952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.243119][T15952] Cannot create hsr debugfs directory [ 562.318208][T14750] bond0: (slave netdevsim0): Releasing backup interface [ 562.376448][T14750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.378687][T14750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.579246][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 562.652575][T15441] EXT4-fs (loop2): unmounting filesystem. [ 562.734351][T16079] loop3: detected capacity change from 0 to 2048 [ 562.738228][T16079] EXT4-fs: Ignoring removed i_version option [ 562.738648][T16081] binder: 16077:16081 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 562.747814][T16081] binder: 16077:16081 got transaction to invalid handle, 1 [ 562.749045][T16081] binder: 16081:16077 cannot find target node [ 562.750100][T16081] binder: 16077:16081 transaction call to 0:0 failed 144/29201/-22, size 0-0 line 3062 [ 562.771823][T16081] binder: 16077:16081 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 562.778985][T16081] binder: 16081 RLIMIT_NICE not set [ 562.796734][T16079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 562.802850][T16079] fs-verity: sha512 using implementation "sha512-ce" [ 562.827077][T16095] binder: 16077:16095 got transaction to invalid handle, 1 [ 562.831823][T16095] binder: 16095:16077 cannot find target node [ 562.832910][T16095] binder: 16077:16095 transaction call to 0:0 failed 145/29201/-22, size 0-0 line 3062 [ 562.853768][T14675] EXT4-fs (loop3): unmounting filesystem. [ 562.971200][T14750] tipc: Left network mode [ 563.118410][T16114] loop3: detected capacity change from 0 to 1024 [ 563.143991][T16114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 563.456278][T16139] loop7: detected capacity change from 0 to 1024 [ 563.477270][T16139] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.3309: lblock 2 mapped to illegal pblock 2 (length 1) [ 563.487334][T16139] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 563.506642][T16139] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.3309: lblock 0 mapped to illegal pblock 48 (length 1) [ 563.515856][T16139] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 563.519935][T16139] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.3309: Failed to acquire dquot type 0 [ 563.539678][T16139] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 563.544580][T16139] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.3309: mark_inode_dirty error [ 563.548642][T16139] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 563.550652][T16139] EXT4-fs (loop7): 1 orphan inode deleted [ 563.551767][T16139] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 563.559263][ T39] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 563.570219][ T39] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 563.572218][ T39] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 563.672268][T16145] loop2: detected capacity change from 0 to 1024 [ 563.675411][T14288] EXT4-fs (loop7): unmounting filesystem. [ 563.676523][T13458] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 563.679728][T13458] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 563.681138][T13458] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 0 [ 563.695578][T14288] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 563.699478][T14288] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 563.726078][T16145] EXT4-fs: inline encryption not supported [ 563.730014][T14288] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 563.777363][T16145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 563.829313][T15441] EXT4-fs (loop2): unmounting filesystem. [ 563.908478][T16164] loop6: detected capacity change from 0 to 512 [ 563.951308][T16164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 563.952852][T16164] System zones: 1-12 [ 563.964345][T16164] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.3314: missing EA_INODE flag [ 563.981224][T16164] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.3314: error while reading EA inode 12 err=-117 [ 563.994588][T16164] EXT4-fs (loop6): 1 orphan inode deleted [ 563.995648][T16164] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 564.027271][T16164] overlayfs: missing 'workdir' [ 564.054918][T13947] EXT4-fs (loop6): unmounting filesystem. [ 564.182592][T14675] EXT4-fs (loop3): unmounting filesystem. [ 564.482248][T16226] loop2: detected capacity change from 0 to 512 [ 564.512505][T16226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 564.515427][T16226] System zones: 1-12 [ 564.518239][T16226] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.3327: missing EA_INODE flag [ 564.522981][T16226] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3327: error while reading EA inode 12 err=-117 [ 564.531679][T16226] EXT4-fs (loop2): 1 orphan inode deleted [ 564.534089][T16226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 564.559222][T16226] overlayfs: missing 'workdir' [ 564.601070][T15441] EXT4-fs (loop2): unmounting filesystem. [ 564.653072][T16243] loop2: detected capacity change from 0 to 1024 [ 564.687658][T16243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 564.834836][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 564.838884][T15952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 565.117752][T15952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 565.169503][T15952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 565.288014][T15952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 565.491516][T14750] device hsr_slave_0 left promiscuous mode [ 565.535716][ T4377] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 565.540270][T14750] device hsr_slave_1 left promiscuous mode [ 565.600812][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.602259][T14750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.603812][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.605234][T14750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.606715][T14750] device bridge_slave_1 left promiscuous mode [ 565.610215][T14750] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.676940][T14750] device bridge_slave_0 left promiscuous mode [ 565.678135][T14750] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.741959][ T4377] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.743825][ T4377] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 565.747453][ T4377] usb 1-1: Dual-Role OTG device on HNP port [ 565.748773][ T4377] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 565.750271][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.754880][ C1] ------------[ cut here ]------------ [ 565.755941][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 565.757191][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x2a8/0x528 [ 565.758706][ C1] Modules linked in: [ 565.759307][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 565.760384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 565.761937][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 565.763220][ C1] pc : usb_ep_enable+0x2a8/0x528 [ 565.764025][ C1] lr : usb_ep_enable+0x2a8/0x528 [ 565.764821][ C1] sp : ffff8000080178a0 [ 565.765456][ C1] x29: ffff8000080178a0 x28: 1fffe0001edd56d2 x27: 1fffe0001edd56e8 [ 565.766755][ C1] x26: dfff800000000000 x25: ffff0000f6eab690 x24: 1fffe0001a3be021 [ 565.768077][ C1] x23: ffff0000d1df00e8 x22: dfff800000000000 x21: 0000000000000081 [ 565.769434][ C1] x20: ffff0000f5bf393a x19: ffff0000d1df00e0 x18: 1fffe00033e7697e [ 565.770804][ C1] x17: 0000000000000000 x16: ffff800011b90080 x15: 0000000000000000 [ 565.772167][ C1] x14: 0000000000000001 x13: 1fffe00033e769a3 x12: 0000000000000000 [ 565.773438][ C1] x11: ff00800008195f70 x10: 0000000000000000 x9 : 6d87719b9f9aca00 [ 565.774758][ C1] x8 : 6d87719b9f9aca00 x7 : 0000000000000001 x6 : 0000000000000001 [ 565.776073][ C1] x5 : ffff800008017338 x4 : ffff800015464e80 x3 : ffff800008540904 [ 565.777401][ C1] x2 : 0000000000000001 x1 : 0000000000000103 x0 : 0000000000000000 [ 565.778658][ C1] Call trace: [ 565.779197][ C1] usb_ep_enable+0x2a8/0x528 [ 565.779968][ C1] hidg_set_alt+0x128/0x820 [ 565.780717][ C1] set_config+0x668/0xdf8 [ 565.781399][ C1] composite_setup+0x1590/0x27f4 [ 565.782263][ C1] configfs_composite_setup+0xc0/0x104 [ 565.783147][ C1] dummy_timer+0xd8c/0x2840 [ 565.783900][ C1] __hrtimer_run_queues+0x444/0xc58 [ 565.784743][ C1] hrtimer_run_softirq+0x164/0x408 [ 565.785527][ C1] handle_softirqs+0x318/0xc90 [ 565.786317][ C1] __do_softirq+0x14/0x20 [ 565.786978][ C1] ____do_softirq+0x14/0x20 [ 565.787764][ C1] call_on_irq_stack+0x30/0x48 [ 565.788513][ C1] do_softirq_own_stack+0x20/0x2c [ 565.789309][ C1] __irq_exit_rcu+0x23c/0x430 [ 565.790096][ C1] irq_exit_rcu+0x14/0x84 [ 565.790763][ C1] el1_interrupt+0x38/0x54 [ 565.791469][ C1] el1h_64_irq_handler+0x18/0x24 [ 565.792318][ C1] el1h_64_irq+0x64/0x68 [ 565.793059][ C1] finish_lock_switch+0xb8/0x1c8 [ 565.793865][ C1] finish_task_switch+0x120/0x658 [ 565.794706][ C1] __schedule+0xdb8/0x1a6c [ 565.795425][ C1] schedule_idle+0x60/0xa4 [ 565.796098][ C1] do_idle+0x598/0x600 [ 565.796719][ C1] cpu_startup_entry+0x5c/0x74 [ 565.797469][ C1] secondary_start_kernel+0x190/0x1b4 [ 565.798360][ C1] __secondary_switched+0xb0/0xb4 [ 565.799155][ C1] irq event stamp: 5788315 [ 565.799894][ C1] hardirqs last enabled at (5788314): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 565.801567][ C1] hardirqs last disabled at (5788315): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 565.803236][ C1] softirqs last enabled at (5788302): [] handle_softirqs+0xb1c/0xc90 [ 565.804814][ C1] softirqs last disabled at (5788311): [] __do_softirq+0x14/0x20 [ 565.806285][ C1] ---[ end trace 0000000000000000 ]--- [ 565.807160][ C1] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 565.809837][ T4377] usb 1-1: can't set config #1, error -32 [ 565.947183][T14750] device veth1_macvtap left promiscuous mode [ 565.948297][T14750] device veth0_macvtap left promiscuous mode [ 565.949395][T14750] device veth1_vlan left promiscuous mode [ 565.950407][T14750] device veth0_vlan left promiscuous mode [ 566.750561][T14750] bond17 (unregistering): Released all slaves [ 567.095290][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 567.488479][T14750] bond16 (unregistering): Released all slaves [ 567.562117][T14750] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 568.322546][T14750] bond15 (unregistering): Released all slaves [ 568.731005][T16248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 569.058720][T14750] bond14 (unregistering): Released all slaves [ 569.337612][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 569.805597][T14750] bond13 (unregistering): Released all slaves [ 570.573227][T14750] bond12 (unregistering): Released all slaves [ 571.345750][T14750] bond11 (unregistering): Released all slaves [ 572.148030][T14750] bond10 (unregistering): Released all slaves [ 572.960585][T14750] bond9 (unregistering): Released all slaves [ 573.729005][T14750] bond8 (unregistering): Released all slaves [ 574.530019][T14750] bond7 (unregistering): Released all slaves [ 575.311073][T14750] bond6 (unregistering): Released all slaves