last executing test programs: 3m55.743899449s ago: executing program 2 (id=7): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='./file2\x00', 0x2000000, &(0x7f0000000480)=ANY=[], 0xfb, 0x150a, &(0x7f0000001140)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000002680)='.\x00', 0xfffffe41) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002780)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000027c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000028c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) ioprio_set$uid(0x3, 0xee01, 0x2000) 3m54.041462723s ago: executing program 2 (id=21): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x3, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 3m53.523118826s ago: executing program 2 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f00000005c0)=0x5, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x581800, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) readv(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000880)) getpid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/seq/clients\x00', 0x0, 0x0) close(r5) umount2(0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m52.633181147s ago: executing program 2 (id=37): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000580)='./file1\x00', 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000680)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") r0 = syz_open_dev$loop(&(0x7f0000000080), 0x10, 0x141802) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_opaque(r1, 0x0, 0x0, 0x0, 0x1) write$binfmt_misc(r1, &(0x7f0000000100), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc86c1d1080096072000001ea89ce2b7fb0000e68080b8785d960001000000000010000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 3m51.987700443s ago: executing program 2 (id=40): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8140, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000240)="$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") syz_mount_image$udf(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x4804497, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0], 0x68, 0xc54, &(0x7f0000000d40)="$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") prlimit64(0x0, 0xe, &(0x7f00000019c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001ac0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001bc0)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x6e24, @empty}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000001c40)='net/wireless\x00') read$FUSE(r3, &(0x7f0000001c80)={0x2020}, 0x2020) 3m50.180576848s ago: executing program 3 (id=60): lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000200)=@v1={0x1000000, [{0xaa, 0x3}]}, 0xc, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000107000000090477c68453a58b3e55"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3m49.170783221s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x6a}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREAD(r2, 0x0, 0xb) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a880, 0x20) 3m49.096618089s ago: executing program 3 (id=67): r0 = eventfd2(0x2008, 0x80000) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f00000000c0)=""/82, 0x52) 3m49.067400241s ago: executing program 3 (id=68): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000580)='./file1\x00', 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000680)="$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") r0 = syz_open_dev$loop(&(0x7f0000000080), 0x10, 0x141802) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_opaque(r1, 0x0, 0x0, 0x0, 0x1) write$binfmt_misc(r1, &(0x7f0000000100), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc86c1d1080096072000001ea89ce2b7fb0000e68080b8785d960001000000000010000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 3m48.932793125s ago: executing program 3 (id=70): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000004c0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x17) 3m38.000632472s ago: executing program 3 (id=77): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002080), 0x42002) write$sndseq(r0, &(0x7f0000002100)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0x8}, {}, {0x0, 0x40}, @connect={{0x8, 0x1}, {0x73, 0x9}}}], 0x1c) 3m37.607303932s ago: executing program 32 (id=77): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002080), 0x42002) write$sndseq(r0, &(0x7f0000002100)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0x8}, {}, {0x0, 0x40}, @connect={{0x8, 0x1}, {0x73, 0x9}}}], 0x1c) 3m37.604471473s ago: executing program 2 (id=79): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000540)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f0000000580)=[{0x2}], 0x1) 3m37.158454538s ago: executing program 33 (id=79): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000540)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f0000000580)=[{0x2}], 0x1) 26.828923588s ago: executing program 0 (id=2511): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="560002002a000000000000000001010001000000000000000000000000000000000000000000000000ffffffffffffff", 0x30) 26.768245965s ago: executing program 0 (id=2514): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x90, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 26.760415546s ago: executing program 0 (id=2515): openat(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x12100, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001580)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000001300), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x6) copy_file_range(r2, &(0x7f00000014c0), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000001180)={@my=0x1}) 25.806462593s ago: executing program 0 (id=2526): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x90, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 25.776720126s ago: executing program 0 (id=2528): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000600)={0x8, {"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", 0x1000}}, 0xfffffe38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x90, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc7, 0x2c}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x408b0) 25.040474021s ago: executing program 0 (id=2538): r0 = socket(0xa, 0x3, 0xff) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @multicast2}, 0x10) 25.031275782s ago: executing program 34 (id=2538): r0 = socket(0xa, 0x3, 0xff) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @multicast2}, 0x10) 11.038847212s ago: executing program 4 (id=2739): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000008c0)=0x10001, 0x4) connect$inet(r0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) write(r0, 0x0, 0x0) 11.014719344s ago: executing program 4 (id=2740): r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000600)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xfffffff7, 0x3], [0xfffffbfc, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffeff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000880)={0x0, &(0x7f00000008c0)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000900)) 10.952521971s ago: executing program 4 (id=2741): unshare(0x22020600) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000100)=0xfc) 10.612851906s ago: executing program 4 (id=2746): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001280)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001300)=[{&(0x7f0000001340)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000380)) syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x2000844, &(0x7f00000005c0)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@hide}, {@map_normal}, {@gid}, {@uid}, {@dmode={'dmode', 0x3d, 0x803}}, {@session={'session', 0x3d, 0x54}}, {@cruft}, {@nojoliet}, {@nojoliet}, {@sbsector={'sbsector', 0x3d, 0x1bcd}}]}, 0x11, 0x580, &(0x7f0000000b80)="$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") write(r3, &(0x7f0000001100)='z\r\x00', 0x3) r7 = socket(0x28, 0x1, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) 10.17731126s ago: executing program 4 (id=2748): r0 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 10.113526256s ago: executing program 4 (id=2749): syz_mount_image$squashfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x1010808, &(0x7f0000000580)=ANY=[], 0x1, 0x190, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x140, 0x8) 6.684415537s ago: executing program 7 (id=2783): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/99, 0x63}, 0xb337}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000006c0)=0x1, 0x4) write(r0, &(0x7f0000000700)="240000001e005f0214e0ffda8250bb22fe54", 0x12) 5.795129678s ago: executing program 7 (id=2791): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x42) sendfile(r1, r1, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/fdt', 0x202, 0x40) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000001c0)='[)\x00', 0x0, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) keyctl$session_to_parent(0x12) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000380)="1b000000", 0x4) socket(0x22, 0x3, 0x7ff) 4.921099837s ago: executing program 7 (id=2799): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x90, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 4.375482943s ago: executing program 7 (id=2805): syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2aa, &(0x7f0000001e00)="$eJzs3c9OE10Yx/EfpS/wgjBVFAVjPNGNbiZQr6AhkBibaJAa/yQmg0y16dCSToOpMcLOrWsvgbh0Z2K8ATZegQt3bFyyMI7pdIACQ4IEmYLfz+Y8nTNPc06eM81p0pmuP3y3UC76dtGpK9VllJYGtCFllFK3WrqiNhXGPWq3opvD+W9X7j96fCeXz0/NGDOdm72VNcYMXf388vWHa1/qAw8+Dn3q1Vrm6fqP7Pe1kbXR9V+zL0q+KfmmUq0bx8xVq3VnznPNfMkv28bc81zHd02p4ru1Hf1Fr7q42DBOZX6wf7Hm+r5xKg1TdhumXjX1WsM4z51Sxdi2bQb7haa+/btSxzkOJKVWyzmTksb29BRWExkQAABIVMz+f+Uw+/909Jr9/0lSWJ2ZcXJJjwJHyNp7qLn/fxL7dY/9PwAAAAAAAAAAAAAAAAAAAAAAJ8FGEFhBEFjNdvP+gB5JQXT8f0n9kgYknZE0KGkous0gI+mspHOShiWdl3RB0oiki5IuSRpte6+Ep4oY7fVvtv9F9e+m/v+E/eq/6/oPHyJB/U+fA9af6/+UantwT5+08HapsFRota3+XFEleXI1Lks/w1pGWvH07fzUuAlldHlhOcpfXip078yfkNVcMHH5E618szO/N1x3W/lZWc0FFpefjc3v043rbfm2LH19pqo8zYdrcjv/zYQxk3fzu/LHwvN26zne8vx1ttkSWz/b3q+/lX+A9RGMx9YnrbF0snOH5DdelR3Pc2sEBJ0XjHTGMA4dvO+MYRwmSPqTCcdhu+hJjwQAAAAAAAAAAAAAAAAA8CeO5jeDm/8UFn9OwlMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCP3wEAAP//t8JUVA==") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) semget$private(0x0, 0x1, 0x490) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0xa7c, r3}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 3.416755181s ago: executing program 7 (id=2814): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001280)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001300)=[{&(0x7f0000001340)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.986244905s ago: executing program 7 (id=2815): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x90, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 2.277568727s ago: executing program 5 (id=2822): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 2.216451514s ago: executing program 5 (id=2823): close(0x3) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) process_vm_writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) 1.417408745s ago: executing program 1 (id=2826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x800000000000000}, {0x0, 0xa00, 0x407ffffffffffa, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) 1.36881629s ago: executing program 1 (id=2827): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000980)={0x1, 0x4, [0x73d, 0xb72, 0x724, 0x115]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f0000000600)='\f', 0x1, 0x0, 0x0, 0x4}]) 1.36836328s ago: executing program 5 (id=2828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x155, 0xaa, '\x00', "705104", 0xc}}}}}}, 0x0) 1.028230125s ago: executing program 6 (id=2829): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x3, @mcast1, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029000000340000efe08f00060000000000000018"], 0x30}}], 0x2, 0x888) 1.022520876s ago: executing program 5 (id=2830): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x10000, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.007505187s ago: executing program 6 (id=2831): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x200000000) preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1, 0x5a, 0xb, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002bc0)=0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) 944.570453ms ago: executing program 6 (id=2832): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close(0x3) 944.428933ms ago: executing program 6 (id=2833): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/99, 0x63}, 0xb337}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000006c0)=0x1, 0x4) write(r0, &(0x7f0000000700)="240000001e005f0214e0ffda8250bb22fe54e592afe412cdf8bb04", 0x1b) 790.476919ms ago: executing program 5 (id=2834): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000056608000010000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xa, 0xff5c, &(0x7f00000005c0)=""/222, 0x0, 0x8}, 0x78) 747.307614ms ago: executing program 5 (id=2835): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="64000000140021052bbd7000fbdbdf250a4000fe", @ANYRES32=r1, @ANYBLOB="08000a00040000000800080086060000140006000200000008000000010000000800000014000200ff"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44080) 437.815235ms ago: executing program 1 (id=2836): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001300)=[{&(0x7f0000001340)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 424.076917ms ago: executing program 1 (id=2837): r0 = semget(0x3, 0x4, 0x69c) semop(r0, &(0x7f00000003c0)=[{0x2, 0x7f, 0x800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000400)=[0x6, 0x7fff]) 308.482758ms ago: executing program 1 (id=2838): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) 295.33957ms ago: executing program 1 (id=2839): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x2208810, &(0x7f0000000080)={[{@dax}], [{@hash}]}, 0xfe, 0x58e, &(0x7f00000007c0)="$eJzs3U1vG0UfAPD/Ok76kr6kUlU9DwcUqQcKpU6bQCkSh3JEUFEJ7sVK3KiKU1exUzWhUtsDvXCpKiSEqIT4ANw5VnwA+BSVoFIFVQQHLkbrrFMnsfNWN0nr309yMrM79uzfuzM7413LAfSs4fRPLuL/EXEviTjcsi4f2crhxXILT2+Op48k6vXP/kwiyZY1yyfZ/8Es87+I+OWriJO51fVW5+aniuVyaSbLj9Smr41U5+ZPXZkuTpYmS1dHx8bOvTs2+v57Z7sW65sX//nu04cfnfv6+MK3Pz0+cj+J83EgW9cax3O43ZoZjuHYl6XPryh4pguV7SbJTm8AW9KXtfP+SPuAw9GXtXrg1XcrIupAj0q0f+hRzXFAc27fpXnwS+PJh4sToNXx5xc/G4m9jbnR/oVk2cwone8OdaH+tI6f/3hwP31E9z6HAFjX7TsRcTqfX93/JVn/t3WnN1BmZR0d+r/WU9Wy5VvbMiD1MB3/vL34OfDy9l/JSuxt/F05/hls03a3Yv32n3vchWo6Ssd/H7Qd/y5dtBrqy3IHG2O+/uTylXIp7dsORcSJ6N+T5te6nnNu4VHHfurZ+G+gMQZM62+OBbPteJzfs/w5E8Va8XlibvXkTsRrbce/ydL4N2mz/9P34+IG6zhWevB6p3Wt49/28b9Y9R8j3sj2/+1lc6JnV7SSNa5P5uPsSON4GGkeFav9fffYb53q7xz/wRcQ7Wrp/t/f9vhfin8oab1eW918HT/s/bfUad36+7/98T+QfN5ID2TLbhRrtZkzEQPJJ6uXjz57bjPfLJ/Gf+J4+/a/1vG/LyK+2GD8d4/e7Vh0p4//NP6JTe3/zSceffzl953q39j+f6eROpEt2Uj/t9ENfJ73DgAAAAAAAHabXEQciCRXWErncoXC4v0dR2N/rlyp1k5ersxenYjGd2V/feveocju7RrM7ofIZfc/DLXcHzG6Ij8WEUci4pu+fY18YbxSntjp4AEAAAAAAAAAAAAAAAAAAGCXGOzw/f/U7307vXXAC+cnv6F3rdv+u/FLT8Cu5PwPvUv7h97Vrv0nO7AdwPZz/ofelXeyh57l/A+9S/uH3qX9AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvHAhfdQXnt4cT/MT1+dmpyrXT02UqlOF6dnxwnhl5lphsvkDIdNrvljyV5QrlWtnRmP2xkitVK2NVOfmL01XZq/WLl2ZLk6WLpX6tyMoAAAAAAAAAAAAAAAAAAAAeMlU5+aniuVyaUbiVUnU6/Vb21hpfheELLGUaDbsZauSfMRmX3Bn+yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPVfAAAA//+O0TXm") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8000}, {r0, 0x1}], 0x2, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 97.81054ms ago: executing program 6 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x155, 0xaa, '\x00', "705104", 0xc}}}}}}, 0x0) 0s ago: executing program 6 (id=2841): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x509, &(0x7f0000000600)="$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") 0s ago: executing program 6 (id=2842): r0 = add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab052ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46890479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a7bde8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d604cb246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3d5", 0x55a, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c80)={r1}, &(0x7f0000000600)=ANY=[], 0x0, 0x0) kernel console output (not intermixed with test programs): stead [ 37.214362][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 37.220803][ T1971] binder: release 4537:4539 transaction 5 out, still active [ 37.242335][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 37.252140][ T1971] binder: undelivered TRANSACTION_COMPLETE [ 37.255789][ T1971] binder: send failed reply for transaction 5, target dead [ 37.260881][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.266905][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.393456][ T4550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 37.396799][ T4552] loop2: detected capacity change from 0 to 128 [ 37.425413][ T4552] FAT-fs (loop2): Directory bread(block 32) failed [ 37.427137][ T4552] FAT-fs (loop2): Directory bread(block 33) failed [ 37.428557][ T4552] FAT-fs (loop2): Directory bread(block 34) failed [ 37.429783][ T4552] FAT-fs (loop2): Directory bread(block 35) failed [ 37.431013][ T4552] FAT-fs (loop2): Directory bread(block 36) failed [ 37.432963][ T4552] FAT-fs (loop2): Directory bread(block 37) failed [ 37.434212][ T4552] FAT-fs (loop2): Directory bread(block 38) failed [ 37.435496][ T4552] FAT-fs (loop2): Directory bread(block 39) failed [ 37.436765][ T4552] FAT-fs (loop2): Directory bread(block 40) failed [ 37.438275][ T4552] FAT-fs (loop2): Directory bread(block 41) failed [ 37.622254][ T4552] syz.2.37: attempt to access beyond end of device [ 37.622254][ T4552] loop2: rw=2049, sector=4124, nr_sectors = 8 limit=128 [ 37.626000][ T4552] loop6: detected capacity change from 0 to 7 [ 37.629719][ T4552] Dev loop6: unable to read RDB block 7 [ 37.631162][ T4552] loop6: unable to read partition table [ 37.710447][ T4560] netlink: 'syz.3.39': attribute type 8 has an invalid length. [ 37.811198][ T4552] loop6: partition table beyond EOD, truncated [ 37.876420][ T4552] loop_reread_partitions: partition scan of loop6 (þ被xü†ÁÑ) failed (rc=-5) [ 38.028255][ T4344] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 38.030278][ T4344] FAT-fs (loop2): Filesystem has been set read-only [ 38.283755][ T4573] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.295566][ T4573] EXT4-fs (loop1): 1 truncate cleaned up [ 38.299576][ T4573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.341045][ T4577] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 38.729945][ T4585] IPv4: Oversized IP packet from 127.202.26.0 [ 38.983289][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 38.985051][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 38.986415][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 38.988020][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 39.176633][ T4332] EXT4-fs (loop1): unmounting filesystem. [ 39.189516][ T4590] syz.0.51 (4590): drop_caches: 0 [ 39.229154][ T4594] set_capacity_and_notify: 1 callbacks suppressed [ 39.229163][ T4594] loop1: detected capacity change from 0 to 16 [ 39.246616][ T4594] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.254418][ T4596] loop4: detected capacity change from 0 to 512 [ 39.258399][ T4596] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 39.260378][ T4596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.53: invalid indirect mapped block 256 (level 1) [ 39.265069][ T4596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.53: invalid indirect mapped block 2683928664 (level 1) [ 39.267635][ T4594] syz.1.50: attempt to access beyond end of device [ 39.267635][ T4594] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 39.268530][ T4596] EXT4-fs (loop4): 1 truncate cleaned up [ 39.273786][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.405495][ T4607] loop0: detected capacity change from 0 to 2048 [ 39.482997][ T4609] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.53: Invalid block bitmap block 3 in block_group 0 [ 39.680159][ T4607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 39.699775][ T4613] loop3: detected capacity change from 0 to 256 [ 39.736994][ T4613] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 39.887675][ T4618] netlink: 'syz.1.58': attribute type 8 has an invalid length. [ 40.182458][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 40.184379][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.187025][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.217600][ T4622] loop0: detected capacity change from 0 to 512 [ 40.223606][ T4622] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.236323][ T4622] EXT4-fs (loop0): 1 truncate cleaned up [ 40.237719][ T4622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.294368][ T4629] device syzkaller0 entered promiscuous mode [ 40.947183][ T4642] loop3: detected capacity change from 0 to 128 [ 40.956824][ T4642] FAT-fs (loop3): Directory bread(block 32) failed [ 40.958268][ T4642] FAT-fs (loop3): Directory bread(block 33) failed [ 40.959697][ T4642] FAT-fs (loop3): Directory bread(block 34) failed [ 40.960907][ T4642] FAT-fs (loop3): Directory bread(block 35) failed [ 40.963126][ T4642] FAT-fs (loop3): Directory bread(block 36) failed [ 40.964551][ T4642] FAT-fs (loop3): Directory bread(block 37) failed [ 40.966013][ T4642] FAT-fs (loop3): Directory bread(block 38) failed [ 40.967456][ T4642] FAT-fs (loop3): Directory bread(block 39) failed [ 40.968838][ T4642] FAT-fs (loop3): Directory bread(block 40) failed [ 40.970090][ T4642] FAT-fs (loop3): Directory bread(block 41) failed [ 41.038606][ T4642] syz.3.68: attempt to access beyond end of device [ 41.038606][ T4642] loop3: rw=2049, sector=4124, nr_sectors = 8 limit=128 [ 41.041561][ T4335] Bluetooth: hci0: command 0x1405 tx timeout [ 41.043612][ T4642] loop6: detected capacity change from 0 to 7 [ 41.045564][ T4642] Dev loop6: unable to read RDB block 7 [ 41.046631][ T4642] loop6: unable to read partition table [ 41.048037][ T4642] loop6: partition table beyond EOD, truncated [ 41.049550][ T4642] loop_reread_partitions: partition scan of loop6 (þ被xü†ÁÑ) failed (rc=-5) [ 41.075845][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 41.082517][ T4336] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 41.084179][ T4336] FAT-fs (loop3): Filesystem has been set read-only [ 51.718354][ T4415] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.736952][ T4649] loop4: detected capacity change from 0 to 2048 [ 51.750045][ T4649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.782705][ T4653] loop0: detected capacity change from 0 to 8192 [ 51.789523][ T4653] ======================================================= [ 51.789523][ T4653] WARNING: The mand mount option has been deprecated and [ 51.789523][ T4653] and is ignored by this kernel. Remove the mand [ 51.789523][ T4653] option from the mount to silence this warning. [ 51.789523][ T4653] ======================================================= [ 52.860457][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.869256][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.871645][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.873816][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.876541][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.878167][ T4688] loop0: detected capacity change from 0 to 512 [ 52.881056][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.883732][ T4684] netlink: 'syz.4.76': attribute type 8 has an invalid length. [ 52.949625][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.952094][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.954594][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.956782][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.958383][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.959969][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.000942][ T4688] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 53.004314][ T4688] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.89: invalid indirect mapped block 256 (level 1) [ 53.007479][ T4688] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.89: invalid indirect mapped block 2683928664 (level 1) [ 53.013802][ T4688] EXT4-fs (loop0): 1 truncate cleaned up [ 53.015233][ T4688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.074502][ T4619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.146451][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 53.185985][ T4619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.196724][ T4697] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.245722][ T4619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.256386][ T4686] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.343974][ T4619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.371471][ T4697] chnl_net:caif_netlink_parms(): no params data found [ 53.385280][ T4686] chnl_net:caif_netlink_parms(): no params data found [ 53.403310][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.404976][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.406741][ T4697] device bridge_slave_0 entered promiscuous mode [ 53.411014][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.413195][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.415127][ T4697] device bridge_slave_1 entered promiscuous mode [ 53.428169][ T4697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.430522][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.433258][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.435378][ T4686] device bridge_slave_0 entered promiscuous mode [ 53.438660][ T4697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.440778][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.444620][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.447027][ T4686] device bridge_slave_1 entered promiscuous mode [ 53.460439][ T4697] team0: Port device team_slave_0 added [ 53.463514][ T4697] team0: Port device team_slave_1 added [ 53.473303][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.475192][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.480656][ T4697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.520519][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.544370][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.546443][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.547662][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.557449][ T4697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.590969][ T4686] team0: Port device team_slave_0 added [ 53.605180][ T4686] team0: Port device team_slave_1 added [ 53.639561][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.640952][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.653538][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.694583][ T4697] device hsr_slave_0 entered promiscuous mode [ 53.761914][ T4697] device hsr_slave_1 entered promiscuous mode [ 53.801563][ T4697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.803211][ T4697] Cannot create hsr debugfs directory [ 53.805930][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.807589][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.813400][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.052783][ T4686] device hsr_slave_0 entered promiscuous mode [ 54.081756][ T4686] device hsr_slave_1 entered promiscuous mode [ 54.087334][ T4768] loop0: detected capacity change from 0 to 512 [ 54.106892][ T4768] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 54.109142][ T4768] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.92: invalid indirect mapped block 256 (level 1) [ 54.111594][ T4686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.113217][ T4686] Cannot create hsr debugfs directory [ 54.115181][ T4768] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.92: invalid indirect mapped block 2683928664 (level 1) [ 54.120772][ T4768] EXT4-fs (loop0): 1 truncate cleaned up [ 54.122568][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.364806][ T4772] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.92: Invalid block bitmap block 3 in block_group 0 [ 54.680976][ T4697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.976702][ T4697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 55.082076][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 55.082116][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 55.087732][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 55.113136][ T4791] netlink: 'syz.1.93': attribute type 8 has an invalid length. [ 55.115496][ T4697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 55.160409][ T4794] loop0: detected capacity change from 0 to 512 [ 55.164637][ T4794] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.94: bg 0: block 5: invalid block bitmap [ 55.168233][ T4794] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 55.170396][ T4794] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.94: invalid indirect mapped block 3 (level 2) [ 55.174145][ T4794] EXT4-fs (loop0): 1 orphan inode deleted [ 55.175506][ T4794] EXT4-fs (loop0): 1 truncate cleaned up [ 55.176996][ T4794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.188417][ T4697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 55.240949][ T4793] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.288291][ T4686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.389773][ T4686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.453821][ T4686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.487166][ T4686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.582473][ T4697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.591735][ T4697] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.597828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.618612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.630117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.632442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.637342][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 55.638768][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.640251][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.647350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.649482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.662930][ T4818] loop4: detected capacity change from 0 to 8192 [ 55.674238][ T4820] loop0: detected capacity change from 0 to 16 [ 55.676758][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.678173][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.686680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.700982][ T4697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.704724][ T4820] erofs: (device loop0): mounted with root inode @ nid 36. [ 55.709440][ T4820] syz.0.98: attempt to access beyond end of device [ 55.709440][ T4820] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 55.716145][ T4697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.060279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.062434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.064268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.066506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.068926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.071019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.076978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.079092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.081201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.086658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.099228][ T4814] device bridge1 entered promiscuous mode [ 56.132361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.136161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.795889][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.798086][ T4866] netlink: 'syz.4.104': attribute type 8 has an invalid length. [ 56.867563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.869463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.879424][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.885834][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.887962][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.890411][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.892047][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.915695][ T4619] device hsr_slave_0 left promiscuous mode [ 56.952114][ T4619] device hsr_slave_1 left promiscuous mode [ 56.998645][ T4880] loop0: detected capacity change from 0 to 128 [ 57.004529][ T4880] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 57.041787][ T4619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.043455][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.047219][ T4487] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 57.049451][ T4619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.051098][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.053878][ T4619] device bridge_slave_1 left promiscuous mode [ 57.056052][ T4619] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.079457][ T4883] loop0: detected capacity change from 0 to 16 [ 57.089915][ T4883] erofs: (device loop0): mounted with root inode @ nid 36. [ 57.097282][ T4883] syz.0.110: attempt to access beyond end of device [ 57.097282][ T4883] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 57.102869][ T4619] device bridge_slave_0 left promiscuous mode [ 57.104434][ T4619] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.121418][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 57.158398][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 57.173831][ T4885] loop4: detected capacity change from 0 to 512 [ 57.178943][ T4885] EXT4-fs (loop4): failed to initialize system zone (-117) [ 57.180743][ T4885] EXT4-fs (loop4): mount failed [ 57.196849][ T4885] loop4: detected capacity change from 0 to 2048 [ 57.199578][ T4885] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 57.202925][ T4885] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 57.205010][ T4885] UDF-fs: Scanning with blocksize 512 failed [ 57.209576][ T4885] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 57.211007][ T4885] UDF-fs: Scanning with blocksize 1024 failed [ 57.214375][ T4885] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 57.217601][ T4885] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 57.219312][ T4885] UDF-fs: Scanning with blocksize 2048 failed [ 57.221176][ T4885] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 57.224218][ T4885] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 57.226309][ T4885] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 57.227858][ T4885] UDF-fs: Scanning with blocksize 4096 failed [ 57.228974][ T4885] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 57.232344][ T4619] device veth1_macvtap left promiscuous mode [ 57.233747][ T4619] device veth0_macvtap left promiscuous mode [ 57.235104][ T4619] device veth1_vlan left promiscuous mode [ 57.236362][ T4619] device veth0_vlan left promiscuous mode [ 57.460101][ T4891] x_tables: duplicate underflow at hook 2 [ 58.241557][ T4335] Bluetooth: hci0: command 0x0401 tx timeout [ 58.609482][ T4899] fuse: Bad value for 'fd' [ 59.201453][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 59.202064][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 59.956516][ T4619] team0 (unregistering): Port device team_slave_1 removed [ 60.132143][ T4619] team0 (unregistering): Port device team_slave_0 removed [ 60.292450][ T4619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.492084][ T4619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.282562][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 61.293112][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 62.032892][ T4619] bond0 (unregistering): Released all slaves [ 62.290621][ T4697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.293815][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.295735][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.297591][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.299465][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.300926][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.303664][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.305805][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.307891][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.310767][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.313841][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.315725][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.317769][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.319269][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.322577][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.324492][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.327064][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.391422][ T4907] device batadv_slave_0 entered promiscuous mode [ 62.393063][ T4907] device batadv_slave_0 left promiscuous mode [ 62.398645][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.413586][ T4914] loop0: detected capacity change from 0 to 16 [ 62.420583][ T4916] loop4: detected capacity change from 0 to 128 [ 62.433403][ T4914] erofs: (device loop0): mounted with root inode @ nid 36. [ 62.437765][ T4916] FAT-fs (loop4): Directory bread(block 32) failed [ 62.439383][ T4916] FAT-fs (loop4): Directory bread(block 33) failed [ 62.440789][ T4916] FAT-fs (loop4): Directory bread(block 34) failed [ 62.443473][ T4916] FAT-fs (loop4): Directory bread(block 35) failed [ 62.444896][ T4916] FAT-fs (loop4): Directory bread(block 36) failed [ 62.446195][ T4916] FAT-fs (loop4): Directory bread(block 37) failed [ 62.447574][ T4916] FAT-fs (loop4): Directory bread(block 38) failed [ 62.448872][ T4916] FAT-fs (loop4): Directory bread(block 39) failed [ 62.451548][ T4916] FAT-fs (loop4): Directory bread(block 40) failed [ 62.452734][ T4916] FAT-fs (loop4): Directory bread(block 41) failed [ 62.454797][ T4914] syz.0.120: attempt to access beyond end of device [ 62.454797][ T4914] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 62.619810][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.625553][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.628348][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.686647][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.688548][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.697906][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.699874][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.705556][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.707561][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.717091][ T4697] device veth0_vlan entered promiscuous mode [ 62.720922][ T4697] device veth1_vlan entered promiscuous mode [ 62.739697][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.742608][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.747182][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.749969][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.755579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.757714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.764145][ T4697] device veth0_macvtap entered promiscuous mode [ 62.768265][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.771714][ T4697] device veth1_macvtap entered promiscuous mode [ 62.777830][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.780086][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.782749][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.784730][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.786849][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.789066][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.791042][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.793866][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.797737][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.800196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.803300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.807258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.814601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.858994][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.861298][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.866831][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.868971][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.871003][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.876245][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.878291][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.880530][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.882298][ T4943] loop4: detected capacity change from 0 to 1024 [ 62.887769][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.889900][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.892570][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.898887][ T4697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.900793][ T4697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.918863][ T4697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.920695][ T4697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.042327][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.044125][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.050155][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.067269][ T4865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.068937][ T4865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.070496][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.436531][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.438890][ T4959] loop0: detected capacity change from 0 to 4096 [ 63.445337][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.463403][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.465085][ T4959] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.469861][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.479806][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.488052][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.494916][ T4686] device veth0_vlan entered promiscuous mode [ 63.500493][ T4686] device veth1_vlan entered promiscuous mode [ 63.539901][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.543567][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.548615][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.554438][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.556416][ T4967] loop6: detected capacity change from 0 to 1024 [ 63.558206][ T4967] EXT4-fs: Ignoring removed oldalloc option [ 63.560396][ T4686] device veth0_macvtap entered promiscuous mode [ 63.565602][ T4686] device veth1_macvtap entered promiscuous mode [ 63.582594][ T4967] EXT4-fs: Ignoring removed orlov option [ 63.583614][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.594256][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.606461][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.609517][ T4959] EXT4-fs (loop0): Test dummy encryption mode enabled [ 63.621873][ T4959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.629927][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.635641][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.639015][ T4967] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 63.639104][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.645609][ T4967] EXT4-fs error (device loop6): __ext4_new_inode:1293: comm syz.6.127: failed to insert inode 12: doubly allocated? [ 63.649020][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.992237][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.002943][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.013418][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.020887][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 64.048237][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.049870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.060195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.066549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.080207][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 64.082549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.104683][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.106846][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.115490][ T4994] loop0: detected capacity change from 0 to 256 [ 64.123978][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.126079][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.128153][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.130792][ T4994] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.133797][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.137213][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.139516][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.145699][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.147837][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.150932][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.160323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.165357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.218143][ T4999] loop0: detected capacity change from 0 to 512 [ 64.229913][ T4999] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 64.233066][ T4999] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.134: invalid indirect mapped block 256 (level 1) [ 64.236456][ T4999] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.134: invalid indirect mapped block 2683928664 (level 1) [ 64.240017][ T4999] EXT4-fs (loop0): 1 truncate cleaned up [ 64.243988][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.479188][ T5009] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.134: Invalid block bitmap block 3 in block_group 0 [ 64.582128][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.583624][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.683776][ T4619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.693572][ T4686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.695364][ T4686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697202][ T4686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.698790][ T4686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.709561][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.135'. [ 64.720794][ T5010] tap0: tun_chr_ioctl cmd 35108 [ 64.765498][ T4619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.810853][ T4682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.815829][ T4682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.817785][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.854202][ T4619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.859275][ T4865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.861087][ T4865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.866131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.899787][ T5022] loop6: detected capacity change from 0 to 1024 [ 64.952936][ T4619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.012974][ T5028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.015833][ T5028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.058762][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 65.768982][ T5060] loop4: detected capacity change from 0 to 4096 [ 65.820800][ T5060] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.821187][ T5066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.153'. [ 65.837199][ T5060] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.893735][ T5060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.921965][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 66.274045][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.276027][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.354028][ T5089] loop6: detected capacity change from 0 to 256 [ 66.377419][ T5089] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 66.407592][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.149'. [ 66.409871][ T5087] tap0: tun_chr_ioctl cmd 35108 [ 66.579015][ T5107] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 66.584858][ T5107] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 66.587909][ T5107] EXT4-fs error (device loop6): ext4_acquire_dquot:6848: comm syz.6.156: Failed to acquire dquot type 0 [ 66.617278][ T5107] EXT4-fs error (device loop6): mb_free_blocks:1853: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 66.636046][ T5107] EXT4-fs (loop6): 1 truncate cleaned up [ 66.638042][ T5107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 66.734479][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 66.736161][ T5116] EXT4-fs: Ignoring removed oldalloc option [ 66.737626][ T5116] EXT4-fs: Ignoring removed orlov option [ 66.765913][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.048176][ T5116] EXT4-fs error (device loop0): __ext4_new_inode:1293: comm syz.0.158: failed to insert inode 12: doubly allocated? [ 67.085107][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 67.175078][ T5127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.197478][ T5127] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3877: comm syz.4.161: Allocating blocks 44-107 which overlap fs metadata [ 67.230100][ T5125] EXT4-fs (loop4): pa 0000000018f59a0a: logic 5, phys. 44, len 84 [ 67.232013][ T5125] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4909: group 0, free 21, pa_free 84 [ 67.280885][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 67.301747][ T5145] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 67.303804][ T5145] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.163: invalid indirect mapped block 256 (level 1) [ 67.318527][ T5145] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.163: invalid indirect mapped block 2683928664 (level 1) [ 67.329819][ T5145] EXT4-fs (loop0): 1 truncate cleaned up [ 67.338502][ T5145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.381028][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.166'. [ 67.383913][ T5150] tap0: tun_chr_ioctl cmd 35108 [ 67.556625][ T5166] set_capacity_and_notify: 5 callbacks suppressed [ 67.556635][ T5166] loop5: detected capacity change from 0 to 256 [ 67.564218][ T5163] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.163: Invalid block bitmap block 3 in block_group 0 [ 67.590180][ T5170] loop4: detected capacity change from 0 to 736 [ 67.596389][ T5166] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 67.995343][ T5182] device-mapper: table: 248:0: crypt: Not enough arguments (-EINVAL) [ 67.995382][ T5178] loop6: detected capacity change from 0 to 4096 [ 67.997969][ T5182] device-mapper: ioctl: error adding target to table [ 68.026962][ T5178] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 68.039914][ T5188] loop4: detected capacity change from 0 to 512 [ 68.045482][ T5188] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.047192][ T5188] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.049367][ T5188] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 68.126474][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 68.154984][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 68.207572][ T5199] loop0: detected capacity change from 0 to 128 [ 68.219287][ T5196] loop5: detected capacity change from 0 to 512 [ 68.349558][ T5042] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.385925][ T5196] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 68.388664][ T5196] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.181: invalid indirect mapped block 256 (level 1) [ 68.395363][ T5196] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.181: invalid indirect mapped block 2683928664 (level 1) [ 68.442819][ T5196] EXT4-fs (loop5): 1 truncate cleaned up [ 68.444305][ T5196] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.494802][ T5217] loop4: detected capacity change from 0 to 128 [ 68.511611][ T5217] FAT-fs (loop4): Directory bread(block 32) failed [ 68.513032][ T5217] FAT-fs (loop4): Directory bread(block 33) failed [ 68.517484][ T5217] FAT-fs (loop4): Directory bread(block 34) failed [ 68.518813][ T5217] FAT-fs (loop4): Directory bread(block 35) failed [ 68.520213][ T5217] FAT-fs (loop4): Directory bread(block 36) failed [ 68.594068][ T5219] loop0: detected capacity change from 0 to 512 [ 68.639050][ T5217] FAT-fs (loop4): Directory bread(block 37) failed [ 68.644568][ T5217] FAT-fs (loop4): Directory bread(block 38) failed [ 68.835595][ T5217] FAT-fs (loop4): Directory bread(block 39) failed [ 68.837532][ T5217] FAT-fs (loop4): Directory bread(block 40) failed [ 68.838777][ T5217] FAT-fs (loop4): Directory bread(block 41) failed [ 68.860096][ T5219] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 68.862005][ T5219] System zones: 0-2, 18-18, 34-34 [ 68.870704][ T5219] EXT4-fs (loop0): 1 orphan inode deleted [ 68.872116][ T5219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.029408][ T4619] device hsr_slave_0 left promiscuous mode [ 69.093931][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 69.102025][ T4619] device hsr_slave_1 left promiscuous mode [ 69.153897][ T5240] fuse: Bad value for 'fd' [ 69.157671][ T5241] loop0: detected capacity change from 0 to 512 [ 69.162007][ T4686] EXT4-fs (loop5): unmounting filesystem. [ 69.172291][ T4619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.173974][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.176413][ T4619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.178011][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.180845][ T5241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.190810][ T5239] loop4: detected capacity change from 0 to 512 [ 69.195422][ T4619] device bridge_slave_1 left promiscuous mode [ 69.197530][ T4619] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.399675][ T4619] device bridge_slave_0 left promiscuous mode [ 69.407162][ T4619] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.517339][ T5241] fs-verity: sha512 using implementation "sha512-ce" [ 69.525972][ T5239] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 69.529281][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.531083][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.538109][ T5239] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.191: invalid indirect mapped block 256 (level 1) [ 69.548946][ T5239] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.191: invalid indirect mapped block 2683928664 (level 1) [ 69.552596][ T5239] EXT4-fs (loop4): 1 truncate cleaned up [ 69.554150][ T5239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.597356][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 69.645711][ T114] cfg80211: failed to load regulatory.db [ 69.661607][ T4619] device veth1_macvtap left promiscuous mode [ 69.663121][ T4619] device veth0_macvtap left promiscuous mode [ 69.665285][ T4619] device veth1_vlan left promiscuous mode [ 69.666762][ T4619] device veth0_vlan left promiscuous mode [ 69.740567][ T5260] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.191: Invalid block bitmap block 3 in block_group 0 [ 70.516014][ T5272] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 70.517854][ T5272] System zones: 0-2, 18-18, 34-34 [ 70.521174][ T5272] EXT4-fs (loop5): 1 orphan inode deleted [ 70.522829][ T5272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 70.536146][ T1605] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.538922][ T1605] EXT4-fs error (device loop5): ext4_release_dquot:6884: comm kworker/u4:4: Failed to release dquot type 1 [ 70.839268][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.841638][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.958287][ T4686] EXT4-fs (loop5): unmounting filesystem. [ 70.988997][ T5280] binder: 5279:5280 unknown command 0 [ 70.990175][ T5280] binder: 5279:5280 ioctl c0306201 200002c0 returned -22 [ 71.110039][ T5285] erofs: (device loop5): mounted with root inode @ nid 36. [ 72.543881][ T4619] team0 (unregistering): Port device team_slave_1 removed [ 72.703612][ T4619] team0 (unregistering): Port device team_slave_0 removed [ 72.872294][ T4619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.072794][ T4619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.563572][ T4619] bond0 (unregistering): Released all slaves [ 74.855479][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.209'. [ 74.857445][ T5303] tap0: tun_chr_ioctl cmd 35108 [ 74.860253][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 74.916145][ T5329] set_capacity_and_notify: 3 callbacks suppressed [ 74.916155][ T5329] loop4: detected capacity change from 0 to 16 [ 74.926822][ T5329] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.082767][ T5347] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 75.184931][ T5358] loop0: detected capacity change from 0 to 512 [ 75.210518][ T5358] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 75.380806][ T5363] netlink: 'syz.4.227': attribute type 8 has an invalid length. [ 75.508576][ T5358] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.228: invalid indirect mapped block 256 (level 1) [ 75.567219][ T5358] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.228: invalid indirect mapped block 2683928664 (level 1) [ 75.573672][ T5358] EXT4-fs (loop0): 1 truncate cleaned up [ 75.575435][ T5358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.726787][ T5375] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.228: Invalid block bitmap block 3 in block_group 0 [ 75.770463][ T5380] futex_wake_op: syz.6.229 tries to shift op by 144; fix this program [ 76.142483][ T4340] EXT4-fs (loop0): unmounting filesystem. [ 76.297974][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.235'. [ 76.325703][ T5399] loop0: detected capacity change from 0 to 16 [ 76.334327][ T5399] erofs: (device loop0): mounted with root inode @ nid 36. [ 76.348996][ T5403] mmap: syz.1.237 (5403) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.350544][ T5399] syz.0.236: attempt to access beyond end of device [ 76.350544][ T5399] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 76.474909][ T5414] loop6: detected capacity change from 0 to 512 [ 76.567400][ T5414] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 76.569805][ T5414] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.242: invalid indirect mapped block 256 (level 1) [ 76.579524][ T5414] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.242: invalid indirect mapped block 2683928664 (level 1) [ 76.592389][ T5414] EXT4-fs (loop6): 1 truncate cleaned up [ 76.600472][ T5414] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 77.030771][ T5433] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.242: Invalid block bitmap block 3 in block_group 0 [ 77.278830][ T5457] fuse: Bad value for 'fd' [ 77.286870][ T5457] process 'syz.0.248' launched './file0' with NULL argv: empty string added [ 77.321817][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 77.410050][ T5465] fuse: Bad value for 'fd' [ 77.417834][ T5464] loop6: detected capacity change from 0 to 512 [ 77.421167][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 77.455106][ T5464] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 77.471239][ T5464] EXT4-fs (loop6): 1 truncate cleaned up [ 77.479461][ T5464] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 77.537027][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 78.554612][ T5510] bridge0: port 3(team0) entered blocking state [ 78.556342][ T5510] bridge0: port 3(team0) entered disabled state [ 78.560883][ T5510] device team0 entered promiscuous mode [ 78.564790][ T5510] device team_slave_0 entered promiscuous mode [ 78.567094][ T5510] device team_slave_1 entered promiscuous mode [ 78.580458][ T5510] bridge0: port 3(team0) entered blocking state [ 78.582006][ T5510] bridge0: port 3(team0) entered forwarding state [ 79.000754][ T5542] loop6: detected capacity change from 0 to 256 [ 79.045480][ T5542] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 79.509253][ T5552] loop6: detected capacity change from 0 to 2048 [ 79.765735][ T5552] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 80.009994][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 80.814465][ T5600] netlink: 'syz.0.276': attribute type 8 has an invalid length. [ 81.346492][ T5626] loop6: detected capacity change from 0 to 128 [ 81.362962][ T5626] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 81.908275][ T5650] fuse: Bad value for 'fd' [ 82.503440][ T39] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 82.814303][ T5674] netlink: 'syz.4.298': attribute type 8 has an invalid length. [ 83.030572][ T5673] loop6: detected capacity change from 0 to 512 [ 83.070311][ T5673] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 83.078632][ T5673] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.301: invalid indirect mapped block 256 (level 1) [ 83.098838][ T5673] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.301: invalid indirect mapped block 2683928664 (level 1) [ 83.106733][ T5673] EXT4-fs (loop6): 1 truncate cleaned up [ 83.109779][ T5686] fuse: Bad value for 'fd' [ 83.111855][ T5673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 83.855264][ T5702] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.301: Invalid block bitmap block 3 in block_group 0 [ 84.093899][ T4339] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 84.096538][ T4339] Bluetooth: hci4: Injecting HCI hardware error event [ 84.099049][ T4339] Bluetooth: hci4: hardware error 0x00 [ 84.547809][ T4697] EXT4-fs (loop6): unmounting filesystem. [ 84.909777][ T5730] fuse: Bad value for 'fd' [ 85.725419][ T5757] loop6: detected capacity change from 0 to 16 [ 85.727519][ T5757] erofs: (device loop6): mounted with root inode @ nid 36. [ 85.744590][ T5757] syz.6.324: attempt to access beyond end of device [ 85.744590][ T5757] loop6: rw=524288, sector=1342177272, nr_sectors = 2560 limit=16 [ 85.755769][ T5757] syz.6.324: attempt to access beyond end of device [ 85.755769][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.759210][ T5757] syz.6.324: attempt to access beyond end of device [ 85.759210][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.764392][ T5757] syz.6.324: attempt to access beyond end of device [ 85.764392][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.767435][ T5757] syz.6.324: attempt to access beyond end of device [ 85.767435][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.770950][ T5757] syz.6.324: attempt to access beyond end of device [ 85.770950][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.774200][ T5757] syz.6.324: attempt to access beyond end of device [ 85.774200][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.777368][ T5757] syz.6.324: attempt to access beyond end of device [ 85.777368][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.780398][ T5757] syz.6.324: attempt to access beyond end of device [ 85.780398][ T5757] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 85.839149][ T5765] loop6: detected capacity change from 0 to 2048 [ 85.896403][ T5765] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 86.182645][ T5765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.222466][ T5775] netlink: 248 bytes leftover after parsing attributes in process `syz.0.328'. [ 86.851640][ T4339] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 88.069366][ T5829] xt_bpf: check failed: parse error [ 88.109847][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.121462][ T4339] Bluetooth: Unexpected start frame (len 51) [ 88.162987][ T5833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.548227][ T27] audit: type=1326 audit(89.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.554543][ T27] audit: type=1326 audit(89.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.585699][ T27] audit: type=1326 audit(89.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.600251][ T27] audit: type=1326 audit(89.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.610203][ T27] audit: type=1326 audit(89.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.615845][ T27] audit: type=1326 audit(89.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.627199][ T27] audit: type=1326 audit(89.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.645345][ T27] audit: type=1326 audit(89.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=68 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.977810][ T27] audit: type=1326 audit(89.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 89.983279][ T27] audit: type=1326 audit(89.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.0.358" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 90.048990][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.101668][ T5893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.677089][ T4339] Bluetooth: hci1: link tx timeout [ 91.678616][ T4339] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.819999][ T5962] ip_tables: iptables: counters copy to user failed while replacing table [ 91.837144][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.892222][ T5964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.687119][ T6041] 9pnet_fd: Insufficient options for proto=fd [ 92.715358][ T6045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.392'. [ 93.402772][ T6123] fuse: Bad value for 'fd' [ 93.681554][ T4339] Bluetooth: hci1: command 0x0406 tx timeout [ 94.081280][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.132533][ T6171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.986562][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.011553][ T6253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.655618][ T4335] Bluetooth: Unexpected start frame (len 51) [ 96.036020][ T6290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.051833][ T6290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.096065][ T6322] ip_tables: iptables: counters copy to user failed while replacing table [ 97.098905][ T6322] raw_sendmsg: syz.4.461 forgot to set AF_INET. Fix it! [ 97.103622][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 97.129342][ T6324] fuse: Bad value for 'fd' [ 97.556539][ T6343] fuse: Bad value for 'fd' [ 97.772813][ T6358] capability: warning: `syz.5.477' uses 32-bit capabilities (legacy support in use) [ 98.823765][ T6385] fuse: Bad value for 'fd' [ 100.914740][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 100.914752][ T27] audit: type=1326 audit(100.900:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.921188][ T27] audit: type=1326 audit(100.900:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.930020][ T27] audit: type=1326 audit(100.900:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.935745][ T27] audit: type=1326 audit(100.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.940652][ T27] audit: type=1326 audit(100.900:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.946255][ T27] audit: type=1326 audit(100.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.951633][ T27] audit: type=1326 audit(100.900:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.957630][ T27] audit: type=1326 audit(100.900:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.976109][ T27] audit: type=1326 audit(100.900:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 100.994101][ T27] audit: type=1326 audit(100.900:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.511" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 101.137418][ T6532] fuse: Bad value for 'fd' [ 101.539913][ T6543] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.921096][ T6559] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.438327][ T4335] Bluetooth: Unexpected start frame (len 51) [ 103.531797][ T6602] bridge0: port 3(syz_tun) entered blocking state [ 103.533576][ T6602] bridge0: port 3(syz_tun) entered disabled state [ 103.535649][ T6602] device syz_tun entered promiscuous mode [ 103.537273][ T6602] bridge0: port 3(syz_tun) entered blocking state [ 103.538973][ T6602] bridge0: port 3(syz_tun) entered listening state [ 104.239955][ T6628] netlink: 'syz.6.559': attribute type 16 has an invalid length. [ 104.241517][ T6628] netlink: 'syz.6.559': attribute type 17 has an invalid length. [ 104.243088][ T6628] netlink: 'syz.6.559': attribute type 27 has an invalid length. [ 106.497462][ T6670] bridge0: port 3(syz_tun) entered blocking state [ 106.498973][ T6670] bridge0: port 3(syz_tun) entered disabled state [ 106.500753][ T6670] device syz_tun entered promiscuous mode [ 106.503166][ T6670] bridge0: port 3(syz_tun) entered blocking state [ 106.504759][ T6670] bridge0: port 3(syz_tun) entered listening state [ 107.256604][ T6684] netlink: 'syz.4.575': attribute type 16 has an invalid length. [ 107.258311][ T6684] netlink: 'syz.4.575': attribute type 17 has an invalid length. [ 107.260136][ T6684] netlink: 'syz.4.575': attribute type 27 has an invalid length. [ 107.730525][ T4335] Bluetooth: Unexpected start frame (len 51) [ 108.028539][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 108.028550][ T27] audit: type=1326 audit(108.010:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 108.036277][ T27] audit: type=1326 audit(108.020:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 108.048880][ T27] audit: type=1326 audit(108.030:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 108.068453][ T27] audit: type=1326 audit(108.030:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 108.081975][ T27] audit: type=1326 audit(108.030:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 108.095945][ T27] audit: type=1326 audit(108.030:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 108.112511][ T27] audit: type=1326 audit(108.030:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.6.594" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa0d796a8 code=0x7ffc0000 [ 109.252379][ T6742] netlink: 'syz.0.602': attribute type 16 has an invalid length. [ 109.254210][ T6742] netlink: 'syz.0.602': attribute type 17 has an invalid length. [ 109.255989][ T6742] netlink: 'syz.0.602': attribute type 27 has an invalid length. [ 109.527031][ T6760] 9pnet_fd: Insufficient options for proto=fd [ 110.564361][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.699646][ T6866] fuse: Bad value for 'fd' [ 113.274603][ T6901] netlink: 'syz.1.661': attribute type 8 has an invalid length. [ 114.363659][ T6943] netlink: 'syz.5.678': attribute type 8 has an invalid length. [ 115.235033][ T6961] Zero length message leads to an empty skb [ 115.239593][ T6963] 9pnet_fd: Insufficient options for proto=fd [ 116.045516][ T6990] netlink: 'syz.4.695': attribute type 8 has an invalid length. [ 116.732439][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 117.393563][ T27] audit: type=1326 audit(117.380:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.398135][ T27] audit: type=1326 audit(117.380:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.414352][ T27] audit: type=1326 audit(117.380:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.438667][ T27] audit: type=1326 audit(117.380:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.638109][ T27] audit: type=1326 audit(117.380:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.715297][ T27] audit: type=1326 audit(117.380:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.725040][ T27] audit: type=1326 audit(117.390:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.732748][ T27] audit: type=1326 audit(117.390:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.737391][ T27] audit: type=1326 audit(117.390:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 117.742224][ T27] audit: type=1326 audit(117.390:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.1.709" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 118.280701][ T7056] fuse: Bad value for 'fd' [ 118.892245][ C1] bridge0: port 3(syz_tun) entered learning state [ 119.310459][ T7089] xt_hashlimit: max too large, truncated to 1048576 [ 119.959398][ T7112] device veth0_to_team entered promiscuous mode [ 121.374402][ T7151] xt_hashlimit: size too large, truncated to 1048576 [ 121.460831][ T7157] syz.4.765 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.840120][ T4335] Bluetooth: hci0: command 0x0406 tx timeout [ 122.081375][ C0] bridge0: port 3(syz_tun) entered learning state [ 125.922377][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.923736][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.807650][ T7268] fuse: Unknown parameter '0xffffffffffffffff' [ 128.207171][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 128.207180][ T27] audit: type=1326 audit(128.190:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.6.816" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d796a8 code=0x0 [ 129.958150][ T7314] netlink: 'syz.1.822': attribute type 8 has an invalid length. [ 130.012022][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 130.105370][ T7325] fuse: Bad value for 'fd' [ 130.874522][ T7341] netlink: 'syz.1.832': attribute type 8 has an invalid length. [ 132.070014][ T7367] netlink: 'syz.1.838': attribute type 8 has an invalid length. [ 134.218161][ T7410] netlink: 'syz.1.857': attribute type 8 has an invalid length. [ 134.241389][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 134.242779][ C1] bridge0: topology change detected, propagating [ 135.590473][ T7455] fuse: Bad value for 'fd' [ 135.882986][ T7461] netlink: 'syz.1.872': attribute type 8 has an invalid length. [ 137.441930][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 137.443529][ C0] bridge0: topology change detected, propagating [ 137.948360][ T7516] netlink: 'syz.1.895': attribute type 8 has an invalid length. [ 140.238346][ T7579] netlink: 44 bytes leftover after parsing attributes in process `syz.0.918'. [ 140.770307][ T7586] netlink: 'syz.6.914': attribute type 8 has an invalid length. [ 142.303615][ T27] audit: type=1326 audit(142.290:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.320430][ T27] audit: type=1326 audit(142.290:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.340303][ T27] audit: type=1326 audit(142.290:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.394195][ T27] audit: type=1326 audit(142.290:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.418854][ T27] audit: type=1326 audit(142.320:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.435302][ T27] audit: type=1326 audit(142.340:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.519371][ T27] audit: type=1326 audit(142.370:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.541983][ T27] audit: type=1326 audit(142.370:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.561477][ T27] audit: type=1326 audit(142.370:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 142.569518][ T27] audit: type=1326 audit(142.370:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.0.929" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e7796a8 code=0x7ffc0000 [ 143.134666][ T7652] netlink: 'syz.1.936': attribute type 8 has an invalid length. [ 143.370420][ T4339] Bluetooth: Unexpected start frame (len 51) [ 143.388011][ T7658] ip_tables: iptables: counters copy to user failed while replacing table [ 144.331844][ T7679] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[7683] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[7679] [ 144.822372][ T4339] Bluetooth: Unexpected start frame (len 51) [ 146.795691][ T4339] Bluetooth: Unexpected start frame (len 51) [ 147.846973][ T7776] netlink: 'syz.1.984': attribute type 11 has an invalid length. [ 147.854583][ T7779] netlink: 'syz.5.985': attribute type 2 has an invalid length. [ 147.883924][ T7783] fuse: Bad value for 'fd' [ 147.904152][ T4339] Bluetooth: Unexpected start frame (len 51) [ 148.096965][ T7792] netlink: 176 bytes leftover after parsing attributes in process `syz.4.991'. [ 148.489721][ T7807] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.459470][ T7845] device batadv_slave_0 entered promiscuous mode [ 149.461624][ T7843] device batadv_slave_0 left promiscuous mode [ 149.623401][ T7853] fuse: Bad value for 'fd' [ 149.685005][ T7854] netlink: 'syz.1.1012': attribute type 8 has an invalid length. [ 150.256903][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1024'. [ 152.345606][ T7931] netlink: 'syz.4.1041': attribute type 8 has an invalid length. [ 152.379833][ T4338] Bluetooth: Unexpected start frame (len 51) [ 152.787482][ T7958] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1057'. [ 152.834206][ T4338] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 153.611391][ T4338] Bluetooth: hci3: command 0x0406 tx timeout [ 153.611724][ T4339] Bluetooth: hci1: command 0x0406 tx timeout [ 153.674910][ T7997] netlink: 'syz.1.1070': attribute type 8 has an invalid length. [ 154.050626][ T8014] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1081'. [ 155.884442][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 156.553154][ T8087] netlink: 'syz.1.1110': attribute type 8 has an invalid length. [ 161.342090][ T4338] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 161.357319][ T27] kauditd_printk_skb: 112 callbacks suppressed [ 161.357331][ T27] audit: type=1326 audit(161.340:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.365812][ T27] audit: type=1326 audit(161.340:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.370661][ T27] audit: type=1326 audit(161.340:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.377813][ T27] audit: type=1326 audit(161.340:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.385406][ T27] audit: type=1326 audit(161.340:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.390577][ T27] audit: type=1326 audit(161.350:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.396885][ T27] audit: type=1326 audit(161.350:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.404153][ T27] audit: type=1326 audit(161.350:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.409446][ T27] audit: type=1326 audit(161.350:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 161.415341][ T27] audit: type=1326 audit(161.350:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.5.1152" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 162.918613][ T8252] 9pnet_fd: Insufficient options for proto=fd [ 164.849825][ T8317] netlink: 'syz.5.1199': attribute type 8 has an invalid length. [ 165.780815][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1215'. [ 165.783255][ T8354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.885533][ T8354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.403204][ T8371] ip_tables: iptables: counters copy to user failed while replacing table [ 167.034791][ T8383] netlink: 'syz.1.1225': attribute type 8 has an invalid length. [ 168.776361][ T8448] netlink: 'syz.4.1251': attribute type 8 has an invalid length. [ 171.464779][ T4338] Bluetooth: Frame is too long (len 12, expected len 4) [ 172.750129][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 173.294099][ T4338] Bluetooth: Frame is too long (len 12, expected len 4) [ 173.700733][ T8631] netlink: 'syz.1.1322': attribute type 2 has an invalid length. [ 174.131447][ T8655] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.776801][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 177.776812][ T27] audit: type=1326 audit(689.757:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 177.820956][ T27] audit: type=1326 audit(689.757:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 177.828821][ T27] audit: type=1326 audit(689.757:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 177.838044][ T27] audit: type=1326 audit(689.757:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 177.845828][ T27] audit: type=1326 audit(689.757:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 177.854032][ T27] audit: type=1326 audit(689.757:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 177.859132][ T27] audit: type=1326 audit(689.757:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.5.1374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 179.084251][ T4338] Bluetooth: Unexpected start frame (len 12) [ 179.086953][ T4338] Bluetooth: Unexpected start frame (len 4) [ 179.179438][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.221439][ T8831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.146652][ T8908] netlink: 'syz.0.1430': attribute type 8 has an invalid length. [ 182.650565][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1450'. [ 183.421573][ T8979] netlink: 'syz.5.1456': attribute type 8 has an invalid length. [ 185.766988][ T9030] netlink: 'syz.0.1478': attribute type 4 has an invalid length. [ 187.535298][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.561080][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.060415][ T4338] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 188.080307][ T9077] Invalid option length (454) for dns_resolver key [ 189.052169][ T9101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.300758][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1521'. [ 191.090172][ T9180] netlink: 'syz.4.1532': attribute type 13 has an invalid length. [ 191.098021][ T9180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.345422][ T9200] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 192.028974][ T9213] netlink: 'syz.5.1545': attribute type 8 has an invalid length. [ 192.391049][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1548'. [ 200.383312][ T9471] overlayfs: failed to clone lowerpath [ 200.463287][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 200.820174][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1649'. [ 200.867747][ T9500] overlayfs: failed to clone lowerpath [ 202.437020][ T9610] ip_tables: iptables: counters copy to user failed while replacing table [ 203.440116][ T9659] ip_tables: iptables: counters copy to user failed while replacing table [ 203.500157][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 203.548171][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'. [ 203.551010][ T9667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 203.590192][ T4338] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 203.619871][ T4338] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 203.680023][ T9687] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 203.690830][ T9687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.705505][ T9687] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 203.802046][ T468] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.805053][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 203.911890][ T4682] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.677765][ T9760] 9pnet_virtio: no channels available for device syz [ 205.039560][ T9767] netlink: 'syz.0.1762': attribute type 8 has an invalid length. [ 205.952772][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 206.381476][ T9833] netlink: 'syz.5.1788': attribute type 8 has an invalid length. [ 206.934596][ T9867] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 206.944748][ T9867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.964353][ T9867] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 206.971687][ T9867] netlink: 'syz.4.1800': attribute type 10 has an invalid length. [ 206.973239][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1800'. [ 206.975050][ T9867] device dummy0 entered promiscuous mode [ 206.982118][ T9867] bond1: (slave dummy0): Releasing backup interface [ 207.542937][ T9903] netlink: 'syz.0.1813': attribute type 8 has an invalid length. [ 209.280320][ T9989] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 210.026515][ T4338] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 210.124927][T10044] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1874'. [ 210.126797][T10044] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1874'. [ 210.128571][T10044] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1874'. [ 210.379386][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 210.842058][T10074] CIFS: Attempting to mount \\127.0.0.1\share [ 210.868105][T10074] CIFS: VFS: Error connecting to socket. Aborting operation. [ 210.874175][T10074] CIFS: VFS: cifs_mount failed w/return code = -111 [ 211.782458][ T8244] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 211.787977][ T8244] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 212.236313][ T114] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 212.607640][T10104] ceph: No mds server is up or the cluster is laggy [ 213.695615][ T4338] Bluetooth: Unexpected start frame (len 4) [ 214.264656][T10209] netlink: 'syz.0.1942': attribute type 8 has an invalid length. [ 214.578891][T10218] infiniband syz0: set active [ 214.580950][T10218] infiniband syz0: added bond0 [ 214.614522][T10218] RDS/IB: syz0: added [ 214.615517][T10218] smc: adding ib device syz0 with port count 1 [ 214.616812][T10218] smc: ib device syz0 port 1 has pnetid [ 214.706203][T10240] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 215.870537][T10286] netlink: 'syz.5.1975': attribute type 8 has an invalid length. [ 216.864938][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1993'. [ 216.871450][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1993'. [ 219.274244][T10428] bond1: (slave vlan2): making interface the new active one [ 219.279314][T10428] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 219.304065][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 219.406583][T10442] netlink: 'syz.5.2036': attribute type 1 has an invalid length. [ 219.724785][T10442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.746182][T10445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.747801][T10445] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 219.757577][T10445] bond1: (slave gre1): Error -95 calling set_mac_address [ 219.794417][T10455] wg1 speed is unknown, defaulting to 1000 [ 219.801889][T10455] wg1 speed is unknown, defaulting to 1000 [ 219.805703][T10455] wg1 speed is unknown, defaulting to 1000 [ 219.839998][T10455] infiniband syz2: set active [ 219.855162][T10455] infiniband syz2: added wg1 [ 219.875844][T10455] RDS/IB: syz2: added [ 219.876722][T10455] smc: adding ib device syz2 with port count 1 [ 219.877924][T10455] smc: ib device syz2 port 1 has pnetid [ 219.896861][ T114] wg1 speed is unknown, defaulting to 1000 [ 219.898609][ T4403] wg1 speed is unknown, defaulting to 1000 [ 219.900237][T10455] wg1 speed is unknown, defaulting to 1000 [ 219.939216][T10455] wg1 speed is unknown, defaulting to 1000 [ 219.964343][T10455] wg1 speed is unknown, defaulting to 1000 [ 219.984187][T10455] wg1 speed is unknown, defaulting to 1000 [ 220.002153][T10455] wg1 speed is unknown, defaulting to 1000 [ 220.061801][ T14] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 220.068405][ T14] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 220.267970][T10502] netlink: 2980 bytes leftover after parsing attributes in process `syz.0.2059'. [ 220.373606][T10513] xt_hashlimit: size too large, truncated to 1048576 [ 220.375423][ T14] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 220.883975][ T4562] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 221.142242][T10472] ceph: No mds server is up or the cluster is laggy [ 221.246270][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2076'. [ 221.349411][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2077'. [ 221.642673][T10562] 9pnet_virtio: no channels available for device syz [ 221.788388][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 221.869013][T10578] 9pnet_virtio: no channels available for device syz [ 222.003159][T10590] netlink: 'syz.6.2099': attribute type 1 has an invalid length. [ 222.013815][T10590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.039865][T10590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.041878][T10590] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 222.044589][T10590] bond1: (slave gre1): Error -95 calling set_mac_address [ 222.198139][ T4562] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 222.451785][ T4562] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 222.647201][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 222.966032][ T4562] libceph: mon0 (1)127.0.0.1:1 socket error on write [ 223.222610][T10595] ceph: No mds server is up or the cluster is laggy [ 224.220383][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 224.394821][T10713] UBIFS error (pid: 10713): cannot open "ubi0:testvol", error -19 [ 226.393712][T10788] netlink: 'syz.6.2183': attribute type 8 has an invalid length. [ 227.652221][T10838] overlayfs: failed to clone upperpath [ 229.027804][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2249'. [ 229.253671][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 229.522402][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2262'. [ 229.524914][T10959] device syz_tun left promiscuous mode [ 229.527142][T10959] bridge0: port 3(syz_tun) entered disabled state [ 229.584369][T10959] device bridge_slave_1 left promiscuous mode [ 229.586235][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.654006][T10959] device bridge_slave_0 left promiscuous mode [ 229.656289][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.099995][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 230.147648][T10978] netlink: 632 bytes leftover after parsing attributes in process `syz.6.2269'. [ 230.633056][T11020] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 230.634756][T11020] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2285'. [ 231.115902][T11030] lo: Caught tx_queue_len zero misconfig [ 231.353769][ T27] audit: type=1326 audit(743.337:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.5.2298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x0 [ 232.359421][T11092] ip_tables: iptables: counters copy to user failed while replacing table [ 232.736754][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2320'. [ 233.183519][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 233.185768][T11124] device syz_tun left promiscuous mode [ 233.187191][T11124] bridge0: port 3(syz_tun) entered disabled state [ 233.223368][T11124] device bridge_slave_1 left promiscuous mode [ 233.224967][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.263592][T11124] device bridge_slave_0 left promiscuous mode [ 233.265243][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.269403][T11131] block device autoloading is deprecated and will be removed. [ 234.392004][T11169] netlink: 'syz.0.2342': attribute type 4 has an invalid length. [ 234.952318][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 235.354253][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2358'. [ 235.460204][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 235.470251][T11218] rxe_eth0 speed is unknown, defaulting to 1000 [ 235.530912][T11218] wg1 speed is unknown, defaulting to 1000 [ 236.295279][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2377'. [ 236.624587][T11266] netlink: 'syz.6.2382': attribute type 8 has an invalid length. [ 237.600951][ T27] audit: type=1326 audit(749.577:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.613812][ T27] audit: type=1326 audit(749.577:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.636142][ T27] audit: type=1326 audit(749.587:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.640889][ T27] audit: type=1326 audit(749.587:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.645768][ T27] audit: type=1326 audit(749.587:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.652284][ T27] audit: type=1326 audit(749.587:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.672082][ T27] audit: type=1326 audit(749.587:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.693372][ T27] audit: type=1326 audit(749.587:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.1.2411" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 237.850325][T11345] netlink: 'syz.1.2416': attribute type 8 has an invalid length. [ 238.175783][ T27] audit: type=1326 audit(749.917:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.5.2417" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 238.218088][ T27] audit: type=1326 audit(749.917:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.5.2417" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffa43796a8 code=0x7ffc0000 [ 239.738768][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'. [ 240.238399][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2469'. [ 240.949781][T11502] netlink: 'syz.0.2474': attribute type 8 has an invalid length. [ 240.977251][ T4338] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 241.283669][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2483'. [ 241.395870][T11521] device syz_tun entered promiscuous mode [ 242.969904][T11572] netlink: 'syz.1.2504': attribute type 8 has an invalid length. [ 244.506311][T11627] netlink: 'syz.1.2531': attribute type 8 has an invalid length. [ 244.884777][ T4338] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 244.886673][ T4338] CPU: 0 PID: 4338 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 244.888044][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 244.889776][ T4338] Workqueue: hci2 hci_rx_work [ 244.890719][ T4338] Call trace: [ 244.891373][ T4338] dump_backtrace+0x1c4/0x1f0 [ 244.892300][ T4338] show_stack+0x2c/0x3c [ 244.893200][ T4338] __dump_stack+0x30/0x40 [ 244.894145][ T4338] dump_stack_lvl+0xf4/0x15c [ 244.895132][ T4338] dump_stack+0x1c/0x5c [ 244.896035][ T4338] sysfs_create_dir_ns+0x244/0x264 [ 244.897082][ T4338] kobject_add_internal+0x5a8/0xb18 [ 244.898114][ T4338] kobject_add+0x144/0x20c [ 244.899027][ T4338] device_add+0x3dc/0xe4c [ 244.899941][ T4338] hci_conn_add_sysfs+0xb8/0x1bc [ 244.901023][ T4338] hci_sync_conn_complete_evt+0x728/0xb24 [ 244.902308][ T4338] hci_event_packet+0x4f0/0xb30 [ 244.903379][ T4338] hci_rx_work+0x310/0xa70 [ 244.904325][ T4338] process_one_work+0x7e4/0x13bc [ 244.905315][ T4338] worker_thread+0x8cc/0xfe8 [ 244.906219][ T4338] kthread+0x254/0x2e0 [ 244.907200][ T4338] ret_from_fork+0x10/0x20 [ 244.908660][ T4338] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 244.911178][ T4338] Bluetooth: hci2: failed to register connection device [ 245.013189][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.019213][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.022563][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.025556][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.027508][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.029878][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.100012][T11645] rxe_eth0 speed is unknown, defaulting to 1000 [ 245.136084][T11645] wg1 speed is unknown, defaulting to 1000 [ 245.230995][T11645] chnl_net:caif_netlink_parms(): no params data found [ 245.320469][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.324277][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.326191][T11645] device bridge_slave_0 entered promiscuous mode [ 245.328662][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.330019][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.332159][T11645] device bridge_slave_1 entered promiscuous mode [ 245.339843][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.343436][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.352179][T11645] team0: Port device team_slave_0 added [ 245.355555][T11645] team0: Port device team_slave_1 added [ 245.563323][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.565046][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.570682][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.576559][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.578037][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.584099][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.633284][T11645] device hsr_slave_0 entered promiscuous mode [ 245.662047][T11645] device hsr_slave_1 entered promiscuous mode [ 245.702378][T11645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.704837][T11645] Cannot create hsr debugfs directory [ 245.796677][T11645] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 246.206556][T11689] netlink: 'syz.4.2552': attribute type 8 has an invalid length. [ 246.208239][T11645] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 246.244650][T11645] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 246.273050][T11645] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 246.366351][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.377796][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.379856][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.384959][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.460861][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.464388][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.466112][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.467614][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.469157][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.474081][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.476258][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.478082][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.479488][ T5770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.485889][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.489988][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.499650][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.505494][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.709995][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.719796][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.725599][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.739865][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.745482][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.748042][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.750813][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.821872][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.961492][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 247.052422][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 247.177594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.182344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.190567][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.318872][T11745] ip_tables: iptables: counters copy to user failed while replacing table [ 247.399508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.409584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.411805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.414173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.421154][T11645] device veth0_vlan entered promiscuous mode [ 247.424218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.426187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.432705][T11645] device veth1_vlan entered promiscuous mode [ 247.455896][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.458050][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.460036][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.466087][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.526845][T11645] device veth0_macvtap entered promiscuous mode [ 247.531081][T11645] device veth1_macvtap entered promiscuous mode [ 247.548629][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.550982][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.556189][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.558573][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.560747][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.563143][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.565370][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.567671][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.569933][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.572393][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.799872][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.809073][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.816414][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.823620][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.828963][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.840439][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.843557][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.845822][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.881132][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.884106][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.886527][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.889478][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.895567][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.900937][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.905069][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.907153][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.911981][T11645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.914097][T11645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.916053][T11645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.917919][T11645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.030143][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 248.030342][ T27] audit: type=1326 audit(759.987:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.083661][ T27] audit: type=1326 audit(759.987:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.218933][ T27] audit: type=1326 audit(759.987:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.236166][ T4682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.238827][ T27] audit: type=1326 audit(759.987:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.241175][ T4682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.248480][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.254723][ T27] audit: type=1326 audit(759.997:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.297584][ T27] audit: type=1326 audit(759.997:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.308418][ T27] audit: type=1326 audit(759.997:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.319721][ T4682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.321661][ T4682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.323117][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.331188][ T27] audit: type=1326 audit(759.997:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.352353][ T27] audit: type=1326 audit(759.997:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.363580][ T27] audit: type=1326 audit(759.997:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.2585" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89796a8 code=0x7ffc0000 [ 248.866737][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.870763][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.147454][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 249.435813][T11825] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.490853][T11825] wg1 speed is unknown, defaulting to 1000 [ 249.533967][T11830] netlink: 'syz.6.2607': attribute type 16 has an invalid length. [ 249.535685][T11830] netlink: 'syz.6.2607': attribute type 17 has an invalid length. [ 249.551014][T11830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.553259][T11830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.555024][T11830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.860599][T11830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.788855][ T4335] Bluetooth: hci0: unexpected cc 0x042d length: 41 > 7 [ 250.790826][ T4335] Bluetooth: hci0: unexpected event for opcode 0x042d [ 251.211602][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 252.022355][T11922] Illegal XDP return value 4294967274 on prog (id 128) dev N/A, expect packet loss! [ 252.508435][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2651'. [ 253.064907][T11964] loop7: detected capacity change from 0 to 512 [ 253.131615][T11964] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 253.133897][T11964] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2661: invalid indirect mapped block 256 (level 1) [ 253.145067][T11964] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2661: invalid indirect mapped block 2683928664 (level 1) [ 253.151919][T11964] EXT4-fs (loop7): 1 truncate cleaned up [ 253.153340][T11964] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 253.321658][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 253.451797][T11980] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.2661: Invalid block bitmap block 3 in block_group 0 [ 253.917997][T12003] ip_tables: iptables: counters copy to user failed while replacing table [ 254.198858][T11645] EXT4-fs (loop7): unmounting filesystem. [ 254.220334][T12010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.242218][T12010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.396758][T12021] ip_tables: iptables: counters copy to user failed while replacing table [ 254.783465][T12031] loop7: detected capacity change from 0 to 128 [ 254.800113][T12031] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 255.352061][T12046] device bridge_slave_0 entered promiscuous mode [ 255.407962][T12054] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2696'. [ 255.752522][ T4561] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 255.818004][ T4335] Bluetooth: hci1: unexpected cc 0x042d length: 41 > 7 [ 255.923198][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'. [ 255.925315][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2707'. [ 255.927409][T12079] netlink: 'syz.5.2707': attribute type 2 has an invalid length. [ 256.118964][T12085] loop7: detected capacity change from 0 to 512 [ 256.135302][T12085] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 256.137456][T12085] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2709: invalid indirect mapped block 256 (level 1) [ 256.145677][T12085] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2709: invalid indirect mapped block 2683928664 (level 1) [ 256.148936][T12085] EXT4-fs (loop7): 1 truncate cleaned up [ 256.150513][T12085] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 256.348549][T12089] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.2709: Invalid block bitmap block 3 in block_group 0 [ 257.325239][T11645] EXT4-fs (loop7): unmounting filesystem. [ 258.611227][T12158] netlink: 'syz.7.2734': attribute type 8 has an invalid length. [ 259.515209][T12185] loop7: detected capacity change from 0 to 128 [ 259.519867][T12185] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 259.971098][ T4338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.975329][ T4338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.978100][ T4338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.981018][ T4338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.985275][ T4338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 259.987046][ T4339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.097973][T12197] rxe_eth0 speed is unknown, defaulting to 1000 [ 260.193534][T12197] wg1 speed is unknown, defaulting to 1000 [ 260.274966][T12197] chnl_net:caif_netlink_parms(): no params data found [ 260.297575][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.299298][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.303537][T12197] device bridge_slave_0 entered promiscuous mode [ 260.306222][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.307704][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.309689][T12197] device bridge_slave_1 entered promiscuous mode [ 260.319986][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.324177][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.334620][T12197] team0: Port device team_slave_0 added [ 260.346042][T12197] team0: Port device team_slave_1 added [ 260.377731][ T5770] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 260.766302][T12197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.767927][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.776175][T12197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.779927][T12225] netlink: 'syz.1.2756': attribute type 8 has an invalid length. [ 261.115346][ T4865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.157977][T12238] loop7: detected capacity change from 0 to 512 [ 261.158578][T12197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.160880][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.181592][T12197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.220105][T12238] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 261.226870][T12238] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2762: invalid indirect mapped block 256 (level 1) [ 261.230454][T12238] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2762: invalid indirect mapped block 2683928664 (level 1) [ 261.236693][T12238] EXT4-fs (loop7): 1 truncate cleaned up [ 261.240572][T12238] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 261.252838][ T4865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.346609][T12197] device hsr_slave_0 entered promiscuous mode [ 261.371761][T12197] device hsr_slave_1 entered promiscuous mode [ 261.580253][T12197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.625603][T12197] Cannot create hsr debugfs directory [ 261.628912][T12250] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.2762: Invalid block bitmap block 3 in block_group 0 [ 261.673393][ T4865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.765245][ T4865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.031762][ T4339] Bluetooth: hci5: command 0x0409 tx timeout [ 262.044768][T11645] EXT4-fs (loop7): unmounting filesystem. [ 262.366257][T12288] loop7: detected capacity change from 0 to 164 [ 262.602373][T12288] rock: directory entry would overflow storage [ 262.604248][T12288] rock: sig=0x5252, size=5, remaining=3 [ 262.605533][T12288] isofs_fill_super: root inode is not a directory. Corrupted media? [ 262.673868][T12268] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.722590][T12296] netlink: 'syz.1.2776': attribute type 15 has an invalid length. [ 262.724336][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2776'. [ 264.170917][ T4339] Bluetooth: hci5: command 0x041b tx timeout [ 265.101011][ T27] kauditd_printk_skb: 273 callbacks suppressed [ 265.101021][ T27] audit: type=1326 audit(777.077:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.110598][ T27] audit: type=1326 audit(777.087:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.115668][ T27] audit: type=1326 audit(777.087:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.120008][ T27] audit: type=1326 audit(777.087:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.132222][ T27] audit: type=1326 audit(777.107:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.141379][ T27] audit: type=1326 audit(777.117:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.146828][ T27] audit: type=1326 audit(777.117:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.152312][ T27] audit: type=1326 audit(777.127:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.158693][ T27] audit: type=1326 audit(777.127:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.1.2800" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff903796a8 code=0x7ffc0000 [ 265.640369][T12388] loop7: detected capacity change from 0 to 128 [ 265.757371][T12388] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 265.774117][T12197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.102392][T12197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.146978][T12197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.192715][T12197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.214754][ T4865] device hsr_slave_0 left promiscuous mode [ 266.241521][ T4339] Bluetooth: hci5: command 0x040f tx timeout [ 266.461588][ T4865] device hsr_slave_1 left promiscuous mode [ 266.541491][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.543318][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.545397][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.546965][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.671986][ T4865] device veth1_macvtap left promiscuous mode [ 266.673348][ T4865] device veth0_macvtap left promiscuous mode [ 266.674756][ T4865] device veth1_vlan left promiscuous mode [ 266.676080][ T4865] device veth0_vlan left promiscuous mode [ 266.755526][ T4865] infiniband syz0: set down [ 267.697313][ T4865] bond1 (unregistering): Released all slaves [ 268.391483][ T4339] Bluetooth: hci5: command 0x0419 tx timeout [ 270.036818][T12494] ------------[ cut here ]------------ [ 270.038064][T12494] kernel BUG at include/linux/scatterlist.h:163! [ 270.039502][T12494] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 270.040983][T12494] Modules linked in: [ 270.041673][T12494] CPU: 0 PID: 12494 Comm: syz.6.2842 Not tainted syzkaller #0 [ 270.043269][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 270.045275][T12494] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 270.046847][T12494] pc : sg_init_one+0x1b4/0x1c8 [ 270.047782][T12494] lr : sg_init_one+0x1b4/0x1c8 [ 270.048657][T12494] sp : ffff800023407750 [ 270.049522][T12494] x29: ffff800023407750 x28: ffff000103145d00 x27: dfff800000000000 [ 270.051080][T12494] x26: ffff0000c385ca0e x25: ffff700004680f00 x24: 1ffff00004680f14 [ 270.052431][T12494] x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010 [ 270.053924][T12494] x20: ffff8000234078a0 x19: 0000000000000000 x18: 0000000000000000 [ 270.055551][T12494] x17: ffff80000a50a158 x16: ffff800011ba16d0 x15: ffff80000a50a158 [ 270.057274][T12494] x14: 0000000000000003 x13: 1ffff00004680f15 x12: 0000000000080000 [ 270.058853][T12494] x11: 0000000000002872 x10: ffff8000308d3000 x9 : ffff80000a8cce04 [ 270.060536][T12494] x8 : 0000000000002873 x7 : 0000000000000000 x6 : ffff80000805ab74 [ 270.062253][T12494] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010 [ 270.063957][T12494] x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000 [ 270.065731][T12494] Call trace: [ 270.066378][T12494] sg_init_one+0x1b4/0x1c8 [ 270.067370][T12494] software_key_eds_op+0x410/0x938 [ 270.068542][T12494] asymmetric_key_eds_op+0x108/0x128 [ 270.069718][T12494] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 270.070578][T12494] __arm64_sys_keyctl+0x66c/0x8e0 [ 270.071617][T12494] invoke_syscall+0x98/0x290 [ 270.072552][T12494] el0_svc_common+0x13c/0x258 [ 270.073487][T12494] do_el0_svc+0x5c/0x134 [ 270.074378][T12494] el0_svc+0x58/0x12c [ 270.075193][T12494] el0t_64_sync_handler+0x84/0xf0 [ 270.076251][T12494] el0t_64_sync+0x18c/0x190 [ 270.077181][T12494] Code: aa1503e0 9780bd5d 17ffffec 976fa5ad (d4210000) [ 270.078699][T12494] ---[ end trace 0000000000000000 ]--- [ 270.377313][T12494] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 270.378800][T12494] SMP: stopping secondary CPUs [ 270.379843][T12494] Kernel Offset: disabled [ 270.380710][T12494] CPU features: 0x050000,000f0097,a65bfea7 [ 270.381926][T12494] Memory Limit: none [ 270.673521][T12494] Rebooting in 86400 seconds..