last executing test programs: 1m18.787657423s ago: executing program 3 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [{0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x1}}, 0x2c, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m18.53745759s ago: executing program 3 (id=1653): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x48, 0x14, 0xf0b, 0xfffdfffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xfff2, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x8}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 1m18.308773278s ago: executing program 3 (id=1655): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[], 0x1, 0x2c7, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x22020400) fadvise64(r0, 0x81, 0x1, 0x4) 1m17.905941881s ago: executing program 3 (id=1656): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m16.99080293s ago: executing program 3 (id=1658): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x100008) 1m15.7236383s ago: executing program 3 (id=1663): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 1m15.10880743s ago: executing program 32 (id=1663): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 12.098060486s ago: executing program 1 (id=1862): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x40000000015, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 10.776646648s ago: executing program 1 (id=1865): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 10.612974523s ago: executing program 1 (id=1866): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b0073697000080008000900000006000400001500"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 9.266250476s ago: executing program 4 (id=1868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.855491809s ago: executing program 4 (id=1870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 8.627933586s ago: executing program 2 (id=1872): socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x597b, &(0x7f0000000140)={0x0, 0x6d8b, 0x80, 0x1, 0x78}, &(0x7f0000000640), &(0x7f0000000100), &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000540)={0x8000000000000000, r2, 0x31, {0x3f0, 0x8000000000000001}, 0x54}, 0x1) 8.627090476s ago: executing program 1 (id=1880): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x40000000015, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 6.694701738s ago: executing program 2 (id=1873): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet6(0x10, 0x80000, 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@auto_da_alloc}, {@nombcache}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time}, {@commit}, {@nodiscard}], [{@seclabel}]}, 0x1, 0xbb9, &(0x7f0000006f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, 0x0, 0x0, 0x78, 0x0) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @p_u8=0x0}}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.693755608s ago: executing program 4 (id=1874): r0 = io_uring_setup(0x68f1, &(0x7f00000005c0)={0x0, 0x48c7, 0x8, 0x7, 0x1000168}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@sysvgroups}, {@block_validity}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000400)="$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") r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1fa8, 0x2b0e}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x3}, &(0x7f0000000100)=0x8) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 6.693649048s ago: executing program 1 (id=1882): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x40000000015, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(r0, 0x0, 0x0) 6.661378548s ago: executing program 0 (id=1875): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) socket$unix(0x1, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x12, &(0x7f0000002100)=ANY=[], 0x0) 6.294724891s ago: executing program 0 (id=1876): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x1, 0x5d, 0xfffff008}, {0x6, 0xc, 0x0, 0x3}]}, 0x10) socket$inet6(0x10, 0x80000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) 5.538818124s ago: executing program 1 (id=1877): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20) 4.869999836s ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.872114897s ago: executing program 0 (id=1879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getgroups(0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.420071722s ago: executing program 4 (id=1881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.297027566s ago: executing program 2 (id=1883): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b0073697000080008000900000006000400001500"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 3.079635623s ago: executing program 4 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) 1.870184281s ago: executing program 4 (id=1885): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0xe}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet_nvme(r0, &(0x7f00000003c0)=""/68, 0x44, 0x2000, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x1, 0x1, 0x2, {0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, 0x80) close(r3) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "66df024c45f4612fe28be8b9a147"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "925589c0bb"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_SEQ={0x14, 0x4, "25e8c2a5bcc84549a5159a0e47a2d1be"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24004009}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x84, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x1d, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x13}, 0x5, 0x42, @broadcast, 0x1, 0xa}}, @supported_rates]}]]}, 0x84}}, 0x0) 1.765645534s ago: executing program 0 (id=1886): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) socket$unix(0x1, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x12, &(0x7f0000002100)=ANY=[], 0x0) 1.390673987s ago: executing program 0 (id=1887): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x40000000015, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 1.233927292s ago: executing program 2 (id=1888): r0 = syz_io_uring_setup(0x597b, &(0x7f0000000140)={0x0, 0x6d8b, 0x80, 0x1, 0x78}, &(0x7f0000000640), &(0x7f0000000100), &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000540)={0x8000000000000000, r1, 0x31, {0x3f0, 0x8000000000000001}, 0x54}, 0x1) 1.056982367s ago: executing program 2 (id=1889): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x1, 0x5d, 0xfffff008}, {0x6, 0xc, 0x0, 0x3}]}, 0x10) socket$inet6(0x10, 0x80000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) 0s ago: executing program 0 (id=1890): io_uring_setup(0x68f1, &(0x7f00000005c0)={0x0, 0x48c7, 0x8, 0x7, 0x1000168}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@sysvgroups}, {@block_validity}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000400)="$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") r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1fa8, 0x2b0e}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==") read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x3}, &(0x7f0000000100)=0x8) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): st dummy encryption mode enabled [ 105.513823][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.755557][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.576488][ T6041] siw: device registration error -23 [ 107.729116][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 108.409136][ T6043] loop2: detected capacity change from 0 to 512 [ 108.416642][ T6043] EXT4-fs: Ignoring removed oldalloc option [ 108.459647][ T6043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.495606][ T6043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.529506][ T6043] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 108.559245][ T6043] EXT4-fs (loop2): 1 truncate cleaned up [ 108.566817][ T6043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.684960][ T6045] syzkaller0: entered promiscuous mode [ 108.716168][ T6045] syzkaller0: entered allmulticast mode [ 108.838263][ T6055] loop3: detected capacity change from 0 to 4096 [ 108.867253][ T6055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.898914][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.919722][ T6055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.003240][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.790505][ T6074] loop3: detected capacity change from 0 to 4096 [ 111.828864][ T6074] EXT4-fs: inline encryption not supported [ 111.863434][ T6074] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.883802][ T6074] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.927800][ T6074] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 111.948250][ T6074] System zones: 0-5 [ 111.972666][ T6074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.041179][ T6079] loop2: detected capacity change from 0 to 128 [ 112.121902][ T6079] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.175614][ T6079] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.356567][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.529737][ T6074] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 112.767369][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.177653][ T6099] loop3: detected capacity change from 0 to 4096 [ 113.200153][ T6099] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.246721][ T6099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.366103][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.804063][ T6138] loop3: detected capacity change from 0 to 4096 [ 117.828510][ T6138] EXT4-fs (loop3): Test dummy encryption mode enabled [ 117.861113][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.012441][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.290755][ T6147] Zero length message leads to an empty skb [ 118.612475][ T6151] siw: device registration error -23 [ 120.898787][ T6173] loop0: detected capacity change from 0 to 4096 [ 120.915217][ T6173] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.077158][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.267351][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.274688][ T6177] syzkaller0: entered promiscuous mode [ 121.284027][ T6177] syzkaller0: entered allmulticast mode [ 123.497830][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.91'. [ 124.917255][ T6212] loop2: detected capacity change from 0 to 4096 [ 124.955028][ T6212] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.077962][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.324553][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.559822][ T6232] syzkaller0: entered promiscuous mode [ 126.567356][ T6232] syzkaller0: entered allmulticast mode [ 127.999496][ T6247] loop1: detected capacity change from 0 to 4096 [ 128.032713][ T6247] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.105582][ T6247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.367299][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.518970][ T6260] loop2: detected capacity change from 0 to 4096 [ 129.544874][ T6260] EXT4-fs: inline encryption not supported [ 129.605979][ T6260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.640116][ T6260] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.696905][ T6260] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 129.739037][ T6260] System zones: 0-5 [ 129.791944][ T6260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.123644][ T6260] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 130.263039][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.581724][ T6280] loop1: detected capacity change from 0 to 4096 [ 131.617037][ T6280] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.651909][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.806677][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.988503][ T6293] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.125'. [ 133.093818][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100645][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.597453][ T6305] loop2: detected capacity change from 0 to 4096 [ 133.651543][ T6305] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.715627][ T6305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.862211][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.042034][ T6310] syzkaller0: entered promiscuous mode [ 134.057825][ T6310] syzkaller0: entered allmulticast mode [ 134.917118][ T6319] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.136'. [ 137.127542][ T6339] loop2: detected capacity change from 0 to 4096 [ 137.155281][ T6339] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.182315][ T6339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.257238][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.530493][ T6365] siw: device registration error -23 [ 140.497227][ T6370] loop3: detected capacity change from 0 to 512 [ 140.541911][ T6370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.646851][ T6370] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #17: comm syz.3.154: corrupted xattr block 128: invalid header [ 140.720711][ T6370] EXT4-fs (loop3): Remounting filesystem read-only [ 140.758888][ T6370] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 140.769051][ T6370] EXT4-fs (loop3): 1 orphan inode deleted [ 140.808891][ T6370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.894537][ T6370] netlink: 'syz.3.154': attribute type 2 has an invalid length. [ 140.949786][ T6380] loop2: detected capacity change from 0 to 128 [ 140.966837][ T6380] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.984174][ T6380] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.229390][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.210117][ T6390] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.241639][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.306727][ T6391] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 143.641989][ T6403] siw: device registration error -23 [ 144.895021][ T6411] syzkaller0: entered promiscuous mode [ 144.900815][ T6411] syzkaller0: entered allmulticast mode [ 145.078958][ T5082] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 146.855968][ T6442] loop2: detected capacity change from 0 to 128 [ 146.914719][ T6442] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.940987][ T6442] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.072876][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.219965][ T6446] loop2: detected capacity change from 0 to 4096 [ 147.248352][ T6446] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.282968][ T6446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.369913][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.744648][ T6465] siw: device registration error -23 [ 150.771246][ T6473] loop2: detected capacity change from 0 to 128 [ 150.865937][ T6473] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.922226][ T6473] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.379144][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.809958][ T6479] syzkaller0: entered promiscuous mode [ 151.853423][ T6479] syzkaller0: entered allmulticast mode [ 151.915325][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 151.931564][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 151.939378][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.949487][ T5082] Workqueue: hci0 hci_rx_work [ 151.954239][ T5082] Call Trace: [ 151.957597][ T5082] [ 151.960587][ T5082] dump_stack_lvl+0x18c/0x250 [ 151.965331][ T5082] ? show_regs_print_info+0x20/0x20 [ 151.970579][ T5082] ? load_image+0x420/0x420 [ 151.975160][ T5082] sysfs_create_dir_ns+0x26e/0x2a0 [ 151.980335][ T5082] ? sysfs_warn_dup+0xa0/0xa0 [ 151.985058][ T5082] ? do_raw_spin_unlock+0x121/0x230 [ 151.990315][ T5082] kobject_add_internal+0x61c/0xcc0 [ 151.995589][ T5082] kobject_add+0x164/0x240 [ 152.000062][ T5082] ? __rwlock_init+0x150/0x150 [ 152.004956][ T5082] ? kobject_init+0x1e0/0x1e0 [ 152.009699][ T5082] ? _raw_spin_unlock+0x28/0x40 [ 152.014603][ T5082] ? get_device_parent+0x366/0x390 [ 152.019780][ T5082] device_add+0x408/0xc50 [ 152.024180][ T5082] hci_conn_add_sysfs+0xd5/0x1e0 [ 152.029178][ T5082] le_conn_complete_evt+0xf5d/0x1540 [ 152.034513][ T5082] ? hci_event_packet+0x4cb/0x1270 [ 152.039710][ T5082] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 152.046077][ T5082] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 152.051747][ T5082] ? skb_pull_data+0xfb/0x200 [ 152.056469][ T5082] hci_le_conn_complete_evt+0x187/0x440 [ 152.062133][ T5082] ? hci_remote_host_features_evt+0x150/0x150 [ 152.068241][ T5082] hci_event_packet+0x7ba/0x1270 [ 152.073250][ T5082] ? bis_list+0x290/0x290 [ 152.077612][ T5082] ? lockdep_hardirqs_on+0x98/0x150 [ 152.082935][ T5082] ? hci_send_to_monitor+0xd7/0x4f0 [ 152.088170][ T5082] hci_rx_work+0x43a/0xd60 [ 152.092625][ T5082] ? process_scheduled_works+0x96f/0x15d0 [ 152.098562][ T5082] process_scheduled_works+0xa5d/0x15d0 [ 152.104167][ T5082] ? worker_attach_to_pool+0x380/0x380 [ 152.109659][ T5082] ? assign_work+0x3d2/0x5d0 [ 152.114307][ T5082] worker_thread+0xa55/0xfc0 [ 152.118945][ T5082] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 152.124876][ T5082] ? _raw_spin_unlock+0x40/0x40 [ 152.129762][ T5082] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 152.135737][ T5082] kthread+0x2fa/0x390 [ 152.139866][ T5082] ? pr_cont_work+0x560/0x560 [ 152.144600][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 152.149232][ T5082] ret_from_fork+0x48/0x80 [ 152.153709][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 152.158342][ T5082] ret_from_fork_asm+0x11/0x20 [ 152.163163][ T5082] [ 152.166333][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.222489][ T5082] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 152.236861][ T5082] Bluetooth: hci0: failed to register connection device [ 156.120979][ T6518] loop1: detected capacity change from 0 to 128 [ 156.189847][ T6518] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.216081][ T6518] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.454213][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 156.648872][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.033583][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 158.318535][ T6542] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.197'. [ 158.666994][ T6546] syzkaller0: entered promiscuous mode [ 158.673432][ T6546] syzkaller0: entered allmulticast mode [ 161.611771][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 161.866074][ T6570] loop1: detected capacity change from 0 to 128 [ 161.897178][ T6570] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.929538][ T6570] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.036829][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.043173][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 164.701186][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 165.226000][ T6603] syzkaller0: entered promiscuous mode [ 165.264742][ T6603] syzkaller0: entered allmulticast mode [ 165.365299][ T6606] siw: device registration error -23 [ 166.446470][ T6615] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.215'. [ 169.406940][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 169.625918][ T5082] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 169.798599][ T6649] siw: device registration error -23 [ 171.175765][ T6655] syzkaller0: entered promiscuous mode [ 171.208430][ T6655] syzkaller0: entered allmulticast mode [ 174.735686][ T6689] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.231'. [ 175.293609][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 175.701751][ T5082] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 179.684284][ T6732] syzkaller0: entered promiscuous mode [ 179.709013][ T6732] syzkaller0: entered allmulticast mode [ 179.931221][ T6744] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.244'. [ 181.384210][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 182.561706][ T6763] siw: device registration error -23 [ 183.448163][ T5082] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 185.382376][ T6792] syzkaller0: entered promiscuous mode [ 185.401843][ T6792] syzkaller0: entered allmulticast mode [ 185.456989][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 188.182472][ T6818] siw: device registration error -23 [ 189.061078][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 191.525573][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.268'. [ 191.624887][ T6850] syzkaller0: entered promiscuous mode [ 191.667180][ T6850] syzkaller0: entered allmulticast mode [ 193.354221][ T6868] siw: device registration error -23 [ 194.566080][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.578691][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.355414][ T5082] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 197.080479][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 198.357491][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 198.368795][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 198.376413][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.386519][ T5082] Workqueue: hci1 hci_rx_work [ 198.391946][ T5082] Call Trace: [ 198.395262][ T5082] [ 198.398232][ T5082] dump_stack_lvl+0x18c/0x250 [ 198.402962][ T5082] ? show_regs_print_info+0x20/0x20 [ 198.408301][ T5082] ? load_image+0x420/0x420 [ 198.412881][ T5082] sysfs_create_dir_ns+0x26e/0x2a0 [ 198.418048][ T5082] ? sysfs_warn_dup+0xa0/0xa0 [ 198.422774][ T5082] ? do_raw_spin_unlock+0x121/0x230 [ 198.428045][ T5082] kobject_add_internal+0x61c/0xcc0 [ 198.433436][ T5082] kobject_add+0x164/0x240 [ 198.437937][ T5082] ? __rwlock_init+0x150/0x150 [ 198.442756][ T5082] ? kobject_init+0x1e0/0x1e0 [ 198.447479][ T5082] ? _raw_spin_unlock+0x28/0x40 [ 198.452477][ T5082] ? get_device_parent+0x366/0x390 [ 198.457648][ T5082] device_add+0x408/0xc50 [ 198.462041][ T5082] hci_conn_add_sysfs+0xd5/0x1e0 [ 198.467046][ T5082] le_conn_complete_evt+0xf5d/0x1540 [ 198.472382][ T5082] ? hci_event_packet+0x4cb/0x1270 [ 198.477563][ T5082] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 198.483857][ T5082] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 198.489544][ T5082] ? skb_pull_data+0xfb/0x200 [ 198.494297][ T5082] hci_le_conn_complete_evt+0x187/0x440 [ 198.499925][ T5082] ? hci_remote_host_features_evt+0x150/0x150 [ 198.506057][ T5082] hci_event_packet+0x7ba/0x1270 [ 198.511088][ T5082] ? bis_list+0x290/0x290 [ 198.515479][ T5082] ? lockdep_hardirqs_on+0x98/0x150 [ 198.520734][ T5082] ? hci_send_to_monitor+0xd7/0x4f0 [ 198.525988][ T5082] hci_rx_work+0x43a/0xd60 [ 198.530465][ T5082] ? process_scheduled_works+0x96f/0x15d0 [ 198.536237][ T5082] process_scheduled_works+0xa5d/0x15d0 [ 198.541874][ T5082] ? worker_attach_to_pool+0x380/0x380 [ 198.547407][ T5082] ? assign_work+0x3d2/0x5d0 [ 198.552061][ T5082] worker_thread+0xa55/0xfc0 [ 198.556702][ T5082] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 198.562644][ T5082] ? _raw_spin_unlock+0x40/0x40 [ 198.567544][ T5082] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 198.573516][ T5082] kthread+0x2fa/0x390 [ 198.577633][ T5082] ? pr_cont_work+0x560/0x560 [ 198.582375][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 198.587015][ T5082] ret_from_fork+0x48/0x80 [ 198.591482][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 198.596235][ T5082] ret_from_fork_asm+0x11/0x20 [ 198.601111][ T5082] [ 198.604269][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.767764][ T5082] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.786181][ T5082] Bluetooth: hci1: failed to register connection device [ 199.078049][ T6917] syzkaller0: entered promiscuous mode [ 199.106251][ T6917] syzkaller0: entered allmulticast mode [ 200.311273][ T6941] siw: device registration error -23 [ 202.377120][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 204.117817][ T5082] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 205.150045][ T6991] siw: device registration error -23 [ 205.936796][ T6988] syzkaller0: entered promiscuous mode [ 205.980086][ T6988] syzkaller0: entered allmulticast mode [ 206.873333][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 209.215155][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 209.738870][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 212.019850][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.026672][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 212.034987][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 213.491928][ T7057] syzkaller0: entered promiscuous mode [ 213.497507][ T7057] syzkaller0: entered allmulticast mode [ 214.291756][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 215.673940][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.319'. [ 217.226776][ T7106] siw: device registration error -23 [ 218.250302][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 218.916117][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 221.085586][ T7154] siw: device registration error -23 [ 221.136665][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 222.531779][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 224.127609][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 225.220549][ T7209] siw: device registration error -23 [ 226.348043][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 227.311350][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 228.039107][ T7245] siw: device registration error -23 [ 230.972914][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 231.177865][ T5779] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 233.758015][ T7316] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.387'. [ 234.112349][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'. [ 234.384613][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 235.548096][ T7338] siw: device registration error -23 [ 236.916769][ T7343] syzkaller0: entered promiscuous mode [ 236.951565][ T7343] syzkaller0: entered allmulticast mode [ 237.720885][ T7353] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.397'. [ 237.964648][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 238.223318][ T5779] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 240.695290][ T7383] syzkaller0: entered promiscuous mode [ 240.717950][ T7383] syzkaller0: entered allmulticast mode [ 241.804237][ T7389] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.409'. [ 242.251178][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 242.372683][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 244.432847][ T7420] siw: device registration error -23 [ 246.789080][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 246.881613][ T5779] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 248.917502][ T7462] syzkaller0: entered promiscuous mode [ 249.006075][ T7462] syzkaller0: entered allmulticast mode [ 250.869120][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 251.065794][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 251.885358][ T7486] syzkaller0: entered promiscuous mode [ 251.891548][ T7486] syzkaller0: entered allmulticast mode [ 252.908713][ T7496] siw: device registration error -23 [ 253.383132][ T7500] syzkaller0: entered promiscuous mode [ 253.412745][ T7500] syzkaller0: entered allmulticast mode [ 254.086763][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.442'. [ 255.384766][ T5779] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 256.019337][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.025718][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.248600][ T7522] syzkaller0: entered promiscuous mode [ 256.280014][ T7522] syzkaller0: entered allmulticast mode [ 257.288298][ T7531] siw: device registration error -23 [ 258.029774][ T7535] syzkaller0: entered promiscuous mode [ 258.051831][ T7535] syzkaller0: entered allmulticast mode [ 260.122372][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'. [ 261.258147][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 261.335362][ T7564] syzkaller0: entered promiscuous mode [ 261.345478][ T7564] syzkaller0: entered allmulticast mode [ 263.906855][ T7580] siw: device registration error -23 [ 264.544926][ T7582] syzkaller0: entered promiscuous mode [ 264.572060][ T7582] syzkaller0: entered allmulticast mode [ 265.317493][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 265.517873][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 266.739225][ T7604] syzkaller0: entered promiscuous mode [ 266.760886][ T7604] syzkaller0: entered allmulticast mode [ 267.806259][ T7616] siw: device registration error -23 [ 268.744840][ T7620] syzkaller0: entered promiscuous mode [ 268.770835][ T7620] syzkaller0: entered allmulticast mode [ 269.395330][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 269.858432][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 273.209044][ T7654] siw: device registration error -23 [ 273.892598][ T7656] syzkaller0: entered promiscuous mode [ 273.903425][ T7656] syzkaller0: entered allmulticast mode [ 275.053407][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.488'. [ 275.339822][ T7667] syzkaller0: entered promiscuous mode [ 275.347764][ T7667] syzkaller0: entered allmulticast mode [ 282.594570][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.499'. [ 287.116389][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 287.146856][ T7771] syzkaller0: entered promiscuous mode [ 287.159837][ T7771] syzkaller0: entered allmulticast mode [ 287.267845][ T7775] syzkaller0: entered promiscuous mode [ 287.280083][ T7775] syzkaller0: entered allmulticast mode [ 287.596211][ T7780] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.518'. [ 288.651746][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 288.661586][ T5779] CPU: 1 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 288.669204][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.679308][ T5779] Workqueue: hci0 hci_rx_work [ 288.684060][ T5779] Call Trace: [ 288.687377][ T5779] [ 288.690360][ T5779] dump_stack_lvl+0x18c/0x250 [ 288.695102][ T5779] ? show_regs_print_info+0x20/0x20 [ 288.700345][ T5779] ? load_image+0x420/0x420 [ 288.704920][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 288.710089][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 288.714808][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 288.720069][ T5779] kobject_add_internal+0x61c/0xcc0 [ 288.725343][ T5779] kobject_add+0x164/0x240 [ 288.729823][ T5779] ? kobject_init+0x1e0/0x1e0 [ 288.734558][ T5779] ? _raw_spin_unlock+0x3a/0x40 [ 288.739464][ T5779] ? get_device_parent+0x366/0x390 [ 288.744637][ T5779] device_add+0x408/0xc50 [ 288.749024][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 288.754009][ T5779] le_conn_complete_evt+0xf5d/0x1540 [ 288.759344][ T5779] ? hci_event_packet+0x4cb/0x1270 [ 288.764534][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 288.770827][ T5779] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 288.776506][ T5779] ? skb_pull_data+0xfb/0x200 [ 288.781240][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 288.786838][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 288.792953][ T5779] hci_event_packet+0x7ba/0x1270 [ 288.797955][ T5779] ? bis_list+0x290/0x290 [ 288.802349][ T5779] ? kcov_remote_start+0x2b/0x7e0 [ 288.807431][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 288.812682][ T5779] hci_rx_work+0x43a/0xd60 [ 288.817168][ T5779] ? process_scheduled_works+0x96f/0x15d0 [ 288.822933][ T5779] process_scheduled_works+0xa5d/0x15d0 [ 288.828574][ T5779] ? worker_attach_to_pool+0x380/0x380 [ 288.834085][ T5779] ? assign_work+0x3d2/0x5d0 [ 288.838737][ T5779] worker_thread+0xa55/0xfc0 [ 288.843406][ T5779] kthread+0x2fa/0x390 [ 288.847507][ T5779] ? pr_cont_work+0x560/0x560 [ 288.852340][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 288.856972][ T5779] ret_from_fork+0x48/0x80 [ 288.861460][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 288.866102][ T5779] ret_from_fork_asm+0x11/0x20 [ 288.870932][ T5779] [ 288.897554][ T5779] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 288.917781][ T5779] Bluetooth: hci0: failed to register connection device [ 290.039080][ T7798] siw: device registration error -23 [ 290.988526][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 291.637575][ T7811] syzkaller0: entered promiscuous mode [ 291.657669][ T7811] syzkaller0: entered allmulticast mode [ 291.888239][ T7809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'. [ 292.083369][ T7817] syzkaller0: entered promiscuous mode [ 292.103069][ T7817] syzkaller0: entered allmulticast mode [ 293.356020][ T7823] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.531'. [ 294.232433][ T7834] siw: device registration error -23 [ 295.433779][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 295.433901][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 295.433925][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.433941][ T51] Workqueue: hci0 hci_rx_work [ 295.433972][ T51] Call Trace: [ 295.433981][ T51] [ 295.433991][ T51] dump_stack_lvl+0x18c/0x250 [ 295.434022][ T51] ? show_regs_print_info+0x20/0x20 [ 295.434046][ T51] ? load_image+0x420/0x420 [ 295.434094][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 295.434121][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 295.434146][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 295.434194][ T51] kobject_add_internal+0x61c/0xcc0 [ 295.434231][ T51] kobject_add+0x164/0x240 [ 295.434265][ T51] ? kobject_init+0x1e0/0x1e0 [ 295.434294][ T51] ? _raw_spin_unlock+0x3a/0x40 [ 295.434326][ T51] ? get_device_parent+0x366/0x390 [ 295.434360][ T51] device_add+0x408/0xc50 [ 295.434393][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 295.434423][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 295.434461][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 295.434491][ T51] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 295.434521][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 295.434548][ T51] ? skb_pull_data+0xfb/0x200 [ 295.434579][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 295.434608][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 295.434637][ T51] hci_event_packet+0x7ba/0x1270 [ 295.434675][ T51] ? bis_list+0x290/0x290 [ 295.434702][ T51] ? kasan_check_range+0x89/0x290 [ 295.434734][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 295.434762][ T51] hci_rx_work+0x43a/0xd60 [ 295.434814][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 295.434848][ T51] process_scheduled_works+0xa5d/0x15d0 [ 295.434930][ T51] ? worker_attach_to_pool+0x380/0x380 [ 295.434971][ T51] ? assign_work+0x3d2/0x5d0 [ 295.435006][ T51] worker_thread+0xa55/0xfc0 [ 295.435064][ T51] kthread+0x2fa/0x390 [ 295.435085][ T51] ? pr_cont_work+0x560/0x560 [ 295.435113][ T51] ? kthread_blkcg+0xd0/0xd0 [ 295.435136][ T51] ret_from_fork+0x48/0x80 [ 295.435161][ T51] ? kthread_blkcg+0xd0/0xd0 [ 295.435184][ T51] ret_from_fork_asm+0x11/0x20 [ 295.435231][ T51] [ 295.435411][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 295.435597][ T51] Bluetooth: hci0: failed to register connection device [ 296.079481][ T7847] syzkaller0: entered promiscuous mode [ 296.079505][ T7847] syzkaller0: entered allmulticast mode [ 296.290485][ T7852] syzkaller0: entered promiscuous mode [ 296.290509][ T7852] syzkaller0: entered allmulticast mode [ 296.765770][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 297.078845][ T7863] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.543'. [ 297.489151][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 300.488108][ T7881] syzkaller0: entered promiscuous mode [ 300.494274][ T7881] syzkaller0: entered allmulticast mode [ 300.935970][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 300.945903][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 300.953582][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.963687][ T5779] Workqueue: hci2 hci_rx_work [ 300.968418][ T5779] Call Trace: [ 300.971732][ T5779] [ 300.974710][ T5779] dump_stack_lvl+0x18c/0x250 [ 300.979442][ T5779] ? show_regs_print_info+0x20/0x20 [ 300.984691][ T5779] ? load_image+0x420/0x420 [ 300.989278][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 300.994456][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 300.999199][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 301.004451][ T5779] kobject_add_internal+0x61c/0xcc0 [ 301.009814][ T5779] kobject_add+0x164/0x240 [ 301.014311][ T5779] ? kobject_init+0x1e0/0x1e0 [ 301.019048][ T5779] ? _raw_spin_unlock+0x3a/0x40 [ 301.023953][ T5779] ? get_device_parent+0x366/0x390 [ 301.029311][ T5779] device_add+0x408/0xc50 [ 301.033699][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 301.038696][ T5779] le_conn_complete_evt+0xf5d/0x1540 [ 301.044036][ T5779] ? lock_chain_count+0x20/0x20 [ 301.048943][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 301.055234][ T5779] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 301.060945][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 301.066547][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 301.072682][ T5779] hci_event_packet+0x7ba/0x1270 [ 301.077704][ T5779] ? bis_list+0x290/0x290 [ 301.082088][ T5779] ? kcov_remote_start+0x2b/0x7e0 [ 301.087178][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 301.092429][ T5779] hci_rx_work+0x43a/0xd60 [ 301.096908][ T5779] ? process_scheduled_works+0x96f/0x15d0 [ 301.102687][ T5779] process_scheduled_works+0xa5d/0x15d0 [ 301.108333][ T5779] ? worker_attach_to_pool+0x380/0x380 [ 301.113858][ T5779] ? assign_work+0x3d2/0x5d0 [ 301.118523][ T5779] worker_thread+0xa55/0xfc0 [ 301.123188][ T5779] kthread+0x2fa/0x390 [ 301.127308][ T5779] ? pr_cont_work+0x560/0x560 [ 301.132035][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 301.136665][ T5779] ret_from_fork+0x48/0x80 [ 301.141123][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 301.145759][ T5779] ret_from_fork_asm+0x11/0x20 [ 301.150603][ T5779] [ 301.153708][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.201997][ T5779] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 301.217341][ T5779] Bluetooth: hci2: failed to register connection device [ 301.594145][ T7891] netlink: 'syz.3.552': attribute type 72 has an invalid length. [ 302.160917][ T7894] syzkaller0: entered promiscuous mode [ 302.280599][ T7894] syzkaller0: entered allmulticast mode [ 302.476117][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.554'. [ 303.247830][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 304.616156][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 304.625843][ T5779] CPU: 1 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 304.633452][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.643544][ T5779] Workqueue: hci2 hci_rx_work [ 304.648275][ T5779] Call Trace: [ 304.651589][ T5779] [ 304.654555][ T5779] dump_stack_lvl+0x18c/0x250 [ 304.659302][ T5779] ? show_regs_print_info+0x20/0x20 [ 304.664554][ T5779] ? load_image+0x420/0x420 [ 304.669148][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 304.674455][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 304.679175][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 304.684436][ T5779] kobject_add_internal+0x61c/0xcc0 [ 304.689706][ T5779] kobject_add+0x164/0x240 [ 304.694191][ T5779] ? kobject_init+0x1e0/0x1e0 [ 304.698924][ T5779] ? _raw_spin_unlock+0x3a/0x40 [ 304.703818][ T5779] ? get_device_parent+0x366/0x390 [ 304.709008][ T5779] device_add+0x408/0xc50 [ 304.713389][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 304.718371][ T5779] le_conn_complete_evt+0xf5d/0x1540 [ 304.723700][ T5779] ? trace_irq_disable+0x37/0xe0 [ 304.728707][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 304.734995][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 304.740244][ T5779] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 304.745933][ T5779] ? skb_pull_data+0xfb/0x200 [ 304.750659][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 304.756258][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 304.762390][ T5779] hci_event_packet+0x7ba/0x1270 [ 304.767472][ T5779] ? bis_list+0x290/0x290 [ 304.771849][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 304.777114][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 304.782360][ T5779] hci_rx_work+0x43a/0xd60 [ 304.786889][ T5779] ? process_scheduled_works+0x96f/0x15d0 [ 304.792643][ T5779] process_scheduled_works+0xa5d/0x15d0 [ 304.798280][ T5779] ? worker_attach_to_pool+0x380/0x380 [ 304.803805][ T5779] ? assign_work+0x3d2/0x5d0 [ 304.808470][ T5779] worker_thread+0xa55/0xfc0 [ 304.813141][ T5779] kthread+0x2fa/0x390 [ 304.817244][ T5779] ? pr_cont_work+0x560/0x560 [ 304.821973][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 304.826604][ T5779] ret_from_fork+0x48/0x80 [ 304.831066][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 304.835719][ T5779] ret_from_fork_asm+0x11/0x20 [ 304.840551][ T5779] [ 304.937716][ T5779] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 304.956682][ T5779] Bluetooth: hci2: failed to register connection device [ 305.215791][ T7921] netlink: 68 bytes leftover after parsing attributes in process `syz.2.557'. [ 305.340128][ T7927] netlink: 'syz.1.561': attribute type 72 has an invalid length. [ 306.414156][ T7935] syzkaller0: entered promiscuous mode [ 306.429731][ T7935] syzkaller0: entered allmulticast mode [ 306.495879][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 307.007875][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 307.608213][ T7941] syzkaller0: entered promiscuous mode [ 307.613759][ T7941] syzkaller0: entered allmulticast mode [ 308.004170][ T7951] netlink: 'syz.1.570': attribute type 72 has an invalid length. [ 308.307025][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 308.321167][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 308.328613][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.338725][ T51] Workqueue: hci1 hci_rx_work [ 308.343467][ T51] Call Trace: [ 308.346792][ T51] [ 308.349785][ T51] dump_stack_lvl+0x18c/0x250 [ 308.354522][ T51] ? show_regs_print_info+0x20/0x20 [ 308.359788][ T51] ? load_image+0x420/0x420 [ 308.364362][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 308.369610][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 308.374378][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 308.379637][ T51] kobject_add_internal+0x61c/0xcc0 [ 308.384922][ T51] kobject_add+0x164/0x240 [ 308.389402][ T51] ? kobject_init+0x1e0/0x1e0 [ 308.394133][ T51] ? _raw_spin_unlock+0x3a/0x40 [ 308.399050][ T51] ? get_device_parent+0x366/0x390 [ 308.404215][ T51] device_add+0x408/0xc50 [ 308.408605][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 308.413594][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 308.418944][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 308.425244][ T51] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 308.430935][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 308.436184][ T51] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 308.441900][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 308.447520][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 308.453645][ T51] hci_event_packet+0x7ba/0x1270 [ 308.458653][ T51] ? bis_list+0x290/0x290 [ 308.463038][ T51] ? kcov_remote_start+0x2b/0x7e0 [ 308.468117][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 308.473385][ T51] hci_rx_work+0x43a/0xd60 [ 308.477874][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 308.483659][ T51] process_scheduled_works+0xa5d/0x15d0 [ 308.489296][ T51] ? worker_attach_to_pool+0x380/0x380 [ 308.494814][ T51] ? assign_work+0x3d2/0x5d0 [ 308.499458][ T51] worker_thread+0xa55/0xfc0 [ 308.504144][ T51] kthread+0x2fa/0x390 [ 308.508272][ T51] ? pr_cont_work+0x560/0x560 [ 308.513009][ T51] ? kthread_blkcg+0xd0/0xd0 [ 308.517640][ T51] ret_from_fork+0x48/0x80 [ 308.522106][ T51] ? kthread_blkcg+0xd0/0xd0 [ 308.526741][ T51] ret_from_fork_asm+0x11/0x20 [ 308.531586][ T51] [ 308.803223][ T7956] siw: device registration error -23 [ 308.895177][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 308.915815][ T51] Bluetooth: hci1: failed to register connection device [ 309.749710][ T7966] syzkaller0: entered promiscuous mode [ 309.768909][ T7966] syzkaller0: entered allmulticast mode [ 310.941681][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 310.951475][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 311.125713][ T7963] netlink: 68 bytes leftover after parsing attributes in process `syz.0.573'. [ 312.300911][ T7988] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.580'. [ 312.568871][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 312.587407][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 312.594862][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.604956][ T51] Workqueue: hci3 hci_rx_work [ 312.609710][ T51] Call Trace: [ 312.613038][ T51] [ 312.616035][ T51] dump_stack_lvl+0x18c/0x250 [ 312.620765][ T51] ? show_regs_print_info+0x20/0x20 [ 312.626056][ T51] ? load_image+0x420/0x420 [ 312.630623][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 312.635789][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 312.640515][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 312.645781][ T51] kobject_add_internal+0x61c/0xcc0 [ 312.651052][ T51] kobject_add+0x164/0x240 [ 312.655620][ T51] ? kobject_init+0x1e0/0x1e0 [ 312.660351][ T51] ? _raw_spin_unlock+0x3a/0x40 [ 312.665257][ T51] ? get_device_parent+0x366/0x390 [ 312.670420][ T51] device_add+0x408/0xc50 [ 312.674827][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 312.679822][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 312.685182][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 312.691486][ T51] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 312.697191][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 312.702433][ T51] ? skb_pull_data+0xfb/0x200 [ 312.707169][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 312.712772][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 312.718891][ T51] hci_event_packet+0x7ba/0x1270 [ 312.723892][ T51] ? bis_list+0x290/0x290 [ 312.728282][ T51] ? kcov_remote_start+0x2b/0x7e0 [ 312.733455][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 312.738706][ T51] hci_rx_work+0x43a/0xd60 [ 312.743185][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 312.748957][ T51] process_scheduled_works+0xa5d/0x15d0 [ 312.754596][ T51] ? worker_attach_to_pool+0x380/0x380 [ 312.760207][ T51] ? assign_work+0x3d2/0x5d0 [ 312.764852][ T51] worker_thread+0xa55/0xfc0 [ 312.769536][ T51] kthread+0x2fa/0x390 [ 312.773671][ T51] ? pr_cont_work+0x560/0x560 [ 312.778487][ T51] ? kthread_blkcg+0xd0/0xd0 [ 312.783128][ T51] ret_from_fork+0x48/0x80 [ 312.787615][ T51] ? kthread_blkcg+0xd0/0xd0 [ 312.792253][ T51] ret_from_fork_asm+0x11/0x20 [ 312.797084][ T51] [ 312.800256][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.862711][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 312.882299][ T51] Bluetooth: hci3: failed to register connection device [ 313.163440][ T7996] syzkaller0: entered promiscuous mode [ 313.246686][ T7996] syzkaller0: entered allmulticast mode [ 313.735165][ T8003] siw: device registration error -23 [ 314.898161][ T8008] syzkaller0: entered promiscuous mode [ 314.923708][ T8008] syzkaller0: entered allmulticast mode [ 314.977765][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 315.391386][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.586'. [ 316.323524][ T8023] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.589'. [ 316.632954][ T8029] syzkaller0: entered promiscuous mode [ 316.642211][ T8029] syzkaller0: entered allmulticast mode [ 317.426159][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.437174][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.776025][ T8033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.588'. [ 318.083913][ T8043] syzkaller0: entered promiscuous mode [ 318.105328][ T8043] syzkaller0: entered allmulticast mode [ 318.317498][ T8045] siw: device registration error -23 [ 319.276709][ T8050] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.598'. [ 319.656649][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 321.559037][ T8072] syzkaller0: entered promiscuous mode [ 321.564598][ T8072] syzkaller0: entered allmulticast mode [ 321.860955][ T8077] syzkaller0: entered promiscuous mode [ 321.890242][ T8077] syzkaller0: entered allmulticast mode [ 323.726006][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'. [ 324.539238][ T8098] netlink: 68 bytes leftover after parsing attributes in process `syz.3.607'. [ 325.138335][ T8109] syzkaller0: entered promiscuous mode [ 325.144796][ T8109] syzkaller0: entered allmulticast mode [ 325.633822][ T8116] syzkaller0: entered promiscuous mode [ 325.644325][ T8116] syzkaller0: entered allmulticast mode [ 325.721004][ T8117] siw: device registration error -23 [ 327.193734][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 329.094050][ T8149] syzkaller0: entered promiscuous mode [ 329.107499][ T8149] syzkaller0: entered allmulticast mode [ 329.622374][ T8157] syzkaller0: entered promiscuous mode [ 329.642454][ T8157] syzkaller0: entered allmulticast mode [ 329.935855][ T8161] siw: device registration error -23 [ 330.042997][ T8160] netlink: 68 bytes leftover after parsing attributes in process `syz.3.627'. [ 331.079680][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 333.437260][ T8184] syzkaller0: entered promiscuous mode [ 333.450951][ T8184] syzkaller0: entered allmulticast mode [ 334.326581][ T8191] syzkaller0: entered promiscuous mode [ 334.352630][ T8191] syzkaller0: entered allmulticast mode [ 337.650472][ T8218] netlink: 68 bytes leftover after parsing attributes in process `syz.3.646'. [ 339.712208][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 340.029592][ T8239] syzkaller0: entered promiscuous mode [ 340.035249][ T8239] syzkaller0: entered allmulticast mode [ 341.466055][ T8259] syzkaller0: entered promiscuous mode [ 341.484295][ T8259] syzkaller0: entered allmulticast mode [ 342.388348][ T8263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.657'. [ 342.511670][ T8268] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 342.588481][ T8271] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 342.958953][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 342.996236][ T8274] siw: device registration error -23 [ 343.182082][ T8279] syzkaller0: entered promiscuous mode [ 343.188027][ T8279] syzkaller0: entered allmulticast mode [ 344.725881][ T8296] syzkaller0: entered promiscuous mode [ 344.759525][ T8296] syzkaller0: entered allmulticast mode [ 345.911032][ T8307] syzkaller0: entered promiscuous mode [ 345.916724][ T8307] syzkaller0: entered allmulticast mode [ 345.933419][ T8305] netlink: 68 bytes leftover after parsing attributes in process `syz.0.672'. [ 346.524075][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'. [ 347.398140][ T8323] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 347.433361][ T8323] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 349.344127][ T8343] syzkaller0: entered promiscuous mode [ 349.359916][ T8343] syzkaller0: entered allmulticast mode [ 349.424854][ T8340] syzkaller0: entered promiscuous mode [ 349.450188][ T8340] syzkaller0: entered allmulticast mode [ 349.937552][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.686'. [ 350.124096][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 350.595382][ T51] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 351.518545][ T8363] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 351.545651][ T8363] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 351.948877][ T8376] siw: device registration error -23 [ 352.075849][ T8373] syzkaller0: entered promiscuous mode [ 352.203919][ T8373] syzkaller0: entered allmulticast mode [ 353.173839][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.700'. [ 353.519879][ T5779] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 355.027814][ T8409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.038917][ T8409] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 355.346173][ T8414] syzkaller0: entered promiscuous mode [ 355.373942][ T8414] syzkaller0: entered allmulticast mode [ 355.520701][ T8417] siw: device registration error -23 [ 356.540231][ T8419] syzkaller0: entered promiscuous mode [ 356.545785][ T8419] syzkaller0: entered allmulticast mode [ 356.778550][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.712'. [ 357.267935][ T51] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 358.121383][ T8445] syzkaller0: entered promiscuous mode [ 358.141795][ T8445] syzkaller0: entered allmulticast mode [ 358.287259][ T8447] siw: device registration error -23 [ 359.439008][ T8454] syzkaller0: entered promiscuous mode [ 359.456271][ T8454] syzkaller0: entered allmulticast mode [ 359.496833][ T8456] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 359.731734][ T8459] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 360.227113][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.727'. [ 360.862889][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 361.149962][ T8481] siw: device registration error -23 [ 362.225556][ T8485] syzkaller0: entered promiscuous mode [ 362.275349][ T8485] syzkaller0: entered allmulticast mode [ 362.389071][ T8492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 362.398152][ T8491] syzkaller0: entered promiscuous mode [ 362.411289][ T8491] syzkaller0: entered allmulticast mode [ 362.419617][ T8492] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 363.551953][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 364.234743][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.741'. [ 364.486627][ T8516] syzkaller0: entered promiscuous mode [ 364.492430][ T8516] syzkaller0: entered allmulticast mode [ 364.592344][ T8519] siw: device registration error -23 [ 365.915140][ T8525] syzkaller0: entered promiscuous mode [ 365.931186][ T8525] syzkaller0: entered allmulticast mode [ 366.164721][ T8533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 366.179803][ T8533] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 366.861935][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'. [ 366.874461][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 367.704260][ T8555] syzkaller0: entered promiscuous mode [ 367.713836][ T8555] syzkaller0: entered allmulticast mode [ 367.784966][ T8556] siw: device registration error -23 [ 368.925448][ T8561] syzkaller0: entered promiscuous mode [ 368.938386][ T8561] syzkaller0: entered allmulticast mode [ 371.332821][ T8578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.342952][ T8581] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 371.350824][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.766'. [ 371.698716][ T8604] syzkaller0: entered promiscuous mode [ 371.708461][ T8604] syzkaller0: entered allmulticast mode [ 372.578777][ T8617] syzkaller0: entered promiscuous mode [ 372.596634][ T8617] syzkaller0: entered allmulticast mode [ 373.080094][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 373.799979][ T8631] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 373.874087][ T8631] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 374.107264][ T8639] loop3: detected capacity change from 0 to 4096 [ 374.134222][ T8639] EXT4-fs: inline encryption not supported [ 374.165747][ T8639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 374.176472][ T8639] EXT4-fs (loop3): Test dummy encryption mode enabled [ 374.203942][ T8641] syzkaller0: entered promiscuous mode [ 374.212235][ T8639] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 374.220544][ T8641] syzkaller0: entered allmulticast mode [ 374.230379][ T8639] System zones: 0-5 [ 374.240750][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.354010][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.578203][ T8647] syzkaller0: entered promiscuous mode [ 374.604681][ T8647] syzkaller0: entered allmulticast mode [ 375.301477][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'. [ 376.038652][ T8677] syzkaller0: entered promiscuous mode [ 376.044219][ T8677] syzkaller0: entered allmulticast mode [ 376.077312][ T8680] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 376.109411][ T8680] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 376.212157][ T8685] syzkaller0: entered promiscuous mode [ 376.227870][ T8685] syzkaller0: entered allmulticast mode [ 377.526756][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'. [ 378.526744][ T8710] syzkaller0: entered promiscuous mode [ 378.541869][ T8710] syzkaller0: entered allmulticast mode [ 378.864086][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.871280][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.934891][ T8712] syzkaller0: entered promiscuous mode [ 378.946253][ T8712] syzkaller0: entered allmulticast mode [ 378.953978][ T8721] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 378.973752][ T8724] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 380.924766][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'. [ 381.379453][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.813'. [ 381.675285][ T8752] syzkaller0: entered promiscuous mode [ 381.681668][ T8752] syzkaller0: entered allmulticast mode [ 381.763418][ T8757] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.774132][ T8757] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 383.108481][ T8776] loop2: detected capacity change from 0 to 4096 [ 383.129377][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'. [ 383.150017][ T8776] EXT4-fs: inline encryption not supported [ 383.180555][ T8776] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.206774][ T8776] EXT4-fs (loop2): Test dummy encryption mode enabled [ 383.241398][ T8776] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 383.250384][ T8779] syzkaller0: entered promiscuous mode [ 383.258715][ T8779] syzkaller0: entered allmulticast mode [ 383.265728][ T8776] System zones: 0-5 [ 383.273927][ T8776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.341030][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.678686][ T8792] syzkaller0: entered promiscuous mode [ 383.690869][ T8792] syzkaller0: entered allmulticast mode [ 383.741397][ T8794] loop3: detected capacity change from 0 to 4096 [ 383.754033][ T8794] ext4: Unknown parameter 'seclabel' [ 384.274069][ T8795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 384.854782][ T8797] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 384.939347][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 384.950038][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 385.234639][ T8813] syzkaller0: entered promiscuous mode [ 385.249847][ T8813] syzkaller0: entered allmulticast mode [ 385.891814][ T8819] loop0: detected capacity change from 0 to 4096 [ 385.933868][ T8819] EXT4-fs: inline encryption not supported [ 385.978743][ T8819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.998880][ T8819] EXT4-fs (loop0): Test dummy encryption mode enabled [ 386.054932][ T8819] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 386.096505][ T8819] System zones: 0-5 [ 386.239809][ T8819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.396543][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 386.416586][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.435354][ T8831] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 386.509413][ T8831] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 386.629308][ T8836] syzkaller0: entered promiscuous mode [ 386.635060][ T8836] syzkaller0: entered allmulticast mode [ 386.935913][ T8840] syzkaller0: entered promiscuous mode [ 386.943097][ T8840] syzkaller0: entered allmulticast mode [ 388.503891][ T8859] syzkaller0: entered promiscuous mode [ 388.519876][ T8859] syzkaller0: entered allmulticast mode [ 388.915707][ T8864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.956700][ T8864] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 388.991355][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 389.033414][ T8867] syzkaller0: entered promiscuous mode [ 389.039154][ T8867] syzkaller0: entered allmulticast mode [ 389.323636][ T8870] loop1: detected capacity change from 0 to 4096 [ 389.331845][ T8870] EXT4-fs: inline encryption not supported [ 389.342892][ T8870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 389.357730][ T8870] EXT4-fs (loop1): Test dummy encryption mode enabled [ 389.374794][ T8870] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 389.385320][ T8870] System zones: 0-5 [ 389.400080][ T8870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.460413][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.982020][ T8890] syzkaller0: entered promiscuous mode [ 391.050644][ T8890] syzkaller0: entered allmulticast mode [ 391.250772][ T8895] syzkaller0: entered promiscuous mode [ 391.258977][ T8893] loop3: detected capacity change from 0 to 4096 [ 391.265759][ T8895] syzkaller0: entered allmulticast mode [ 391.278854][ T8893] EXT4-fs: inline encryption not supported [ 391.312099][ T8893] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.337914][ T8893] EXT4-fs (loop3): Test dummy encryption mode enabled [ 391.356034][ T8893] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 391.403656][ T8893] System zones: 0-5 [ 391.448678][ T8893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.688361][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'. [ 391.729200][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.778485][ T8904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 394.022719][ T8926] syzkaller0: entered promiscuous mode [ 394.022745][ T8926] syzkaller0: entered allmulticast mode [ 394.045464][ T8920] tty tty1: ldisc open failed (-12), clearing slot 0 [ 394.677282][ T8939] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 395.385304][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'. [ 396.774420][ T51] Bluetooth: Wrong link type (-71) [ 397.178702][ T8960] syzkaller0: entered promiscuous mode [ 397.194793][ T8960] syzkaller0: entered allmulticast mode [ 398.079421][ T8981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 398.357744][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.898'. [ 400.883938][ T9001] syzkaller0: entered promiscuous mode [ 400.912185][ T9001] syzkaller0: entered allmulticast mode [ 401.447106][ T9013] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 401.883419][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.910'. [ 404.279901][ T9033] syzkaller0: entered promiscuous mode [ 404.285545][ T9033] syzkaller0: entered allmulticast mode [ 404.834277][ T9048] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 404.939414][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 405.174814][ T5817] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 405.215046][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.248410][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 405.292451][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.348962][ T5817] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.387697][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.410658][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 405.420411][ T5817] usb 1-1: Product: syz [ 405.443829][ T5817] usb 1-1: Manufacturer: syz [ 405.515866][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 405.525317][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 405.553891][ T5817] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 405.563556][ T5817] cdc_wdm 1-1:1.0: Unknown control protocol [ 405.734587][ T5817] usb 1-1: USB disconnect, device number 2 [ 406.573306][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 407.030143][ T5817] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.046384][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.084714][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.149727][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.204067][ T5817] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.235797][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.271561][ T5817] usb 1-1: Product: syz [ 407.286065][ T5817] usb 1-1: Manufacturer: syz [ 407.321781][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 407.334336][ T5817] cdc_wdm 1-1:1.0: skipping garbage [ 407.357867][ T5817] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 407.370580][ T5817] cdc_wdm 1-1:1.0: Unknown control protocol [ 407.429204][ T9084] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 408.407765][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.431204][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.736328][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 408.968924][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'. [ 409.010958][ T9100] syz.1.936 uses obsolete (PF_INET,SOCK_PACKET) [ 409.463477][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 409.470350][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 409.476735][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 409.478595][ T5817] usb 1-1: USB disconnect, device number 3 [ 409.483370][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 409.483389][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 409.535984][ T9112] syzkaller0: entered promiscuous mode [ 409.563491][ T9112] syzkaller0: entered allmulticast mode [ 410.631651][ T9123] netlink: 176 bytes leftover after parsing attributes in process `syz.2.941'. [ 412.022481][ T9142] loop3: detected capacity change from 0 to 128 [ 412.114622][ T9142] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.191130][ T9142] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 412.222961][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.404888][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.660149][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 412.987638][ T9153] tipc: Started in network mode [ 412.993463][ T9153] tipc: Node identity 84e, cluster identity 4711 [ 413.000030][ T9153] tipc: Node number set to 2126 [ 417.080081][ T9163] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.122668][ T9164] syzkaller0: entered promiscuous mode [ 417.148334][ T9164] syzkaller0: entered allmulticast mode [ 417.274024][ T9172] loop0: detected capacity change from 0 to 8 [ 418.226032][ T9186] loop0: detected capacity change from 0 to 2048 [ 418.261982][ T9186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.655100][ T2979] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 418.688546][ T2979] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 418.737827][ T2979] EXT4-fs (loop0): This should not happen!! Data will be lost [ 418.737827][ T2979] [ 418.755357][ T2979] EXT4-fs (loop0): Total free blocks count 0 [ 418.764667][ T2979] EXT4-fs (loop0): Free/Dirty block details [ 418.773713][ T2979] EXT4-fs (loop0): free_blocks=4096 [ 418.779101][ T2979] EXT4-fs (loop0): dirty_blocks=512 [ 418.784472][ T2979] EXT4-fs (loop0): Block reservation details [ 418.797605][ T2979] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 418.816721][ T2979] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 419.021749][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.960'. [ 419.782438][ T9204] loop0: detected capacity change from 0 to 256 [ 420.163145][ T9211] syzkaller0: entered promiscuous mode [ 420.193087][ T9215] loop0: detected capacity change from 0 to 512 [ 420.200169][ T9211] syzkaller0: entered allmulticast mode [ 420.249721][ T9215] EXT4-fs: Ignoring removed bh option [ 420.268120][ T9215] EXT4-fs: Ignoring removed oldalloc option [ 420.306863][ T9215] EXT4-fs (loop0): 1 truncate cleaned up [ 420.330472][ T9215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.703310][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.208739][ T9235] sctp: [Deprecated]: syz.0.970 (pid 9235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.208739][ T9235] Use struct sctp_sack_info instead [ 422.692605][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.972'. [ 422.928331][ T9243] loop3: detected capacity change from 0 to 128 [ 422.959111][ T9243] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.980518][ T9243] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.088520][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.238478][ T9251] syzkaller0: entered promiscuous mode [ 424.251234][ T9251] syzkaller0: entered allmulticast mode [ 424.313185][ T9256] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (1030) [ 425.481851][ T9276] tipc: Started in network mode [ 425.507297][ T9276] tipc: Node identity 32899700b285, cluster identity 4711 [ 425.538393][ T9276] tipc: Enabled bearer , priority 0 [ 425.571727][ T9277] syzkaller0: entered promiscuous mode [ 425.605285][ T9277] syzkaller0: entered allmulticast mode [ 425.642248][ T9276] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 425.755439][ T9276] tipc: Resetting bearer [ 425.769130][ T9274] tipc: Resetting bearer [ 425.793808][ T9274] tipc: Disabling bearer [ 425.988587][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.983'. [ 426.128208][ T9288] syzkaller0: entered promiscuous mode [ 426.133934][ T9288] syzkaller0: entered allmulticast mode [ 426.739374][ T9294] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 426.772237][ T9292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.986'. [ 426.799452][ T9294] team0: Port device dummy0 added [ 427.087849][ T9295] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 427.161817][ T9295] team0: Port device dummy0 removed [ 427.174745][ T9295] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.342223][ T9298] syzkaller0: entered promiscuous mode [ 427.380328][ T9298] syzkaller0: entered allmulticast mode [ 427.570516][ T9295] syz.2.988 (9295) used greatest stack depth: 20456 bytes left [ 428.673463][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 429.285553][ T9334] syzkaller0: entered promiscuous mode [ 429.294678][ T9334] syzkaller0: entered allmulticast mode [ 430.160960][ T9353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.999'. [ 430.447457][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1008'. [ 430.899230][ T9371] syzkaller0: entered promiscuous mode [ 430.906496][ T9371] syzkaller0: entered allmulticast mode [ 432.895319][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 433.311712][ T9405] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1018'. [ 433.899122][ T9409] syzkaller0: entered promiscuous mode [ 433.923783][ T9409] syzkaller0: entered allmulticast mode [ 435.310742][ T9428] lo speed is unknown, defaulting to 1000 [ 436.545003][ T9436] x_tables: duplicate underflow at hook 4 [ 438.489016][ T9444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 439.463892][ T9459] syzkaller0: entered promiscuous mode [ 439.486435][ T9459] syzkaller0: entered allmulticast mode [ 440.264777][ T9483] syzkaller0: entered promiscuous mode [ 440.271323][ T9483] syzkaller0: entered allmulticast mode [ 440.293532][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.300238][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.603502][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 442.077148][ T9504] syzkaller0: entered promiscuous mode [ 442.087786][ T9504] syzkaller0: entered allmulticast mode [ 442.349051][ T9517] loop1: detected capacity change from 0 to 1024 [ 442.366414][ T9517] EXT4-fs: Ignoring removed bh option [ 442.520115][ T9517] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 442.605042][ T9526] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 442.627181][ T9526] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 442.667193][ T9517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.862284][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 442.943075][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.909668][ T9559] loop3: detected capacity change from 0 to 512 [ 444.941548][ T9559] EXT4-fs: Ignoring removed i_version option [ 444.973175][ T9559] EXT4-fs: Ignoring removed nobh option [ 445.003433][ T9559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 445.064830][ T9559] EXT4-fs (loop3): 1 truncate cleaned up [ 445.121465][ T9559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.619049][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 445.686248][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.883704][ T9576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 445.918205][ T9576] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 446.087136][ T9581] syzkaller0: entered promiscuous mode [ 446.097473][ T9581] syzkaller0: entered allmulticast mode [ 447.463584][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 447.984932][ T9619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 447.999118][ T9619] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 448.295975][ T9624] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 449.535789][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'. [ 449.666221][ T9656] syz.3.1099 (9656) used greatest stack depth: 19784 bytes left [ 450.226938][ T12] wlan1: Trigger new scan to find an IBSS to join [ 450.894818][ T9669] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 450.953448][ T9670] syzkaller0: entered promiscuous mode [ 450.969627][ T9670] syzkaller0: entered allmulticast mode [ 450.991210][ T9671] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 451.387124][ T9679] loop3: detected capacity change from 0 to 512 [ 451.487208][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.502357][ T9679] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.461634][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.715848][ T9703] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 452.747890][ T9703] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 452.792842][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'. [ 453.051186][ T9708] syzkaller0: entered promiscuous mode [ 453.064418][ T9708] syzkaller0: entered allmulticast mode [ 453.515290][ T9722] loop2: detected capacity change from 0 to 512 [ 453.538718][ T9722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.552993][ T9722] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.419565][ T31] wlan1: Trigger new scan to find an IBSS to join [ 454.569783][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.856829][ T9734] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 454.886583][ T9734] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 455.264243][ T9742] syzkaller0: entered promiscuous mode [ 455.270121][ T9742] syzkaller0: entered allmulticast mode [ 455.501593][ T31] wlan1: Creating new IBSS network, BSSID ce:89:3a:ed:d4:4b [ 455.636451][ T9743] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1125'. [ 455.848337][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 456.800421][ T9758] loop1: detected capacity change from 0 to 512 [ 456.861938][ T9758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.897877][ T9758] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.937098][ T9766] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 457.955889][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.968738][ T9766] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 458.922809][ T9777] team0: Device gtp1 is of different type [ 459.854248][ T9790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1138'. [ 460.011824][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1140'. [ 462.187136][ T9812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 462.205533][ T9812] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 462.277051][ T9720] Set syz1 is full, maxelem 65536 reached [ 462.462949][ T9819] loop0: detected capacity change from 0 to 512 [ 462.540493][ T9819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.594371][ T9819] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.626359][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.809490][ T9834] team0: Device gtp0 is of different type [ 464.253361][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1153'. [ 464.445901][ T9841] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1151'. [ 465.361120][ T9864] loop3: detected capacity change from 0 to 512 [ 465.413777][ T9864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.468121][ T9864] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.775487][ T9868] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 465.833527][ T9868] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 466.544648][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.834799][ T9879] team0: Device gtp0 is of different type [ 467.932371][ T9884] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1167'. [ 468.153020][ T9891] loop0: detected capacity change from 0 to 256 [ 468.206914][ T9891] FAT-fs (loop0): Directory bread(block 64) failed [ 468.215171][ T9891] FAT-fs (loop0): Directory bread(block 65) failed [ 468.228226][ T9891] FAT-fs (loop0): Directory bread(block 66) failed [ 468.241438][ T9890] syzkaller0: entered promiscuous mode [ 468.246980][ T9890] syzkaller0: entered allmulticast mode [ 468.254036][ T9891] FAT-fs (loop0): Directory bread(block 67) failed [ 468.284724][ T9891] FAT-fs (loop0): Directory bread(block 68) failed [ 468.302050][ T9891] FAT-fs (loop0): Directory bread(block 69) failed [ 468.321454][ T9891] FAT-fs (loop0): Directory bread(block 70) failed [ 468.343162][ T9891] FAT-fs (loop0): Directory bread(block 71) failed [ 468.363897][ T9891] FAT-fs (loop0): Directory bread(block 72) failed [ 468.381055][ T9891] FAT-fs (loop0): Directory bread(block 73) failed [ 468.778495][ T9899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 468.812266][ T9899] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 470.146163][ T9908] team0: Device gtp0 is of different type [ 471.056600][ T9914] syzkaller0: entered promiscuous mode [ 471.077765][ T9914] syzkaller0: entered allmulticast mode [ 472.221282][ T9925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1181'. [ 472.275902][ T9929] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 472.308986][ T9929] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 472.386055][ T9930] loop0: detected capacity change from 0 to 4096 [ 472.442066][ T9930] EXT4-fs: inline encryption not supported [ 472.494356][ T9930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 472.520981][ T9930] EXT4-fs (loop0): Test dummy encryption mode enabled [ 472.566418][ T9930] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 472.599135][ T9930] System zones: 0-5 [ 472.621463][ T9930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.703741][ T9855] Set syz1 is full, maxelem 65536 reached [ 472.946542][ T9939] team0: Device gtp0 is of different type [ 473.022268][ T9930] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 473.081476][ T9935] overlay: ./file0 is not a directory [ 473.150935][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.435068][ T9951] syzkaller0: entered promiscuous mode [ 473.460689][ T9951] syzkaller0: entered allmulticast mode [ 474.045513][ T9962] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1195'. [ 475.540859][ T9976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 475.558598][ T9976] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 475.821058][ T9979] team0: Device gtp0 is of different type [ 477.754173][ T9991] syzkaller0: entered promiscuous mode [ 477.770101][ T9991] syzkaller0: entered allmulticast mode [ 479.190210][T10011] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 479.199224][T10011] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 479.207107][T10001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1207'. [ 479.718882][T10018] syzkaller0: entered promiscuous mode [ 479.724442][T10018] syzkaller0: entered allmulticast mode [ 482.075742][T10038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 482.088843][T10038] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 483.280624][T10047] syzkaller0: entered promiscuous mode [ 483.286187][T10047] syzkaller0: entered allmulticast mode [ 483.388505][T10045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'. [ 484.032243][T10061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 484.060424][T10061] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 484.623301][ T9968] Set syz1 is full, maxelem 65536 reached [ 484.651920][T10070] loop2: detected capacity change from 0 to 256 [ 484.701559][ T9167] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 484.721545][T10070] Invalid option length (190) for dns_resolver key [ 485.531087][ T1137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.018702][T10078] syzkaller0: entered promiscuous mode [ 486.024264][T10078] syzkaller0: entered allmulticast mode [ 487.178381][T10094] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 487.223540][T10094] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 487.466737][T10086] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1238'. [ 488.568440][T10111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1251'. [ 489.041373][T10115] syzkaller0: entered promiscuous mode [ 489.065233][T10115] syzkaller0: entered allmulticast mode [ 489.494380][T10120] loop1: detected capacity change from 0 to 256 [ 489.550581][T10120] Invalid option length (190) for dns_resolver key [ 489.966695][T10138] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 489.976276][T10138] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 490.708220][T10141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1256'. [ 491.031375][T10145] syzkaller0: entered promiscuous mode [ 491.036928][T10145] syzkaller0: entered allmulticast mode [ 492.579094][T10100] Set syz1 is full, maxelem 65536 reached [ 494.261349][T10165] loop3: detected capacity change from 0 to 256 [ 494.920818][ T9167] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.498236][T10165] Invalid option length (190) for dns_resolver key [ 495.577115][T10184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 495.632618][T10184] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 496.221761][T10194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1267'. [ 496.702130][T10201] loop2: detected capacity change from 0 to 256 [ 496.811677][T10201] FAT-fs (loop2): Directory bread(block 64) failed [ 496.827840][T10201] FAT-fs (loop2): Directory bread(block 65) failed [ 496.851286][T10201] FAT-fs (loop2): Directory bread(block 66) failed [ 496.871477][T10201] FAT-fs (loop2): Directory bread(block 67) failed [ 496.888951][T10201] FAT-fs (loop2): Directory bread(block 68) failed [ 496.922436][T10201] FAT-fs (loop2): Directory bread(block 69) failed [ 496.972183][T10201] FAT-fs (loop2): Directory bread(block 70) failed [ 497.005068][T10201] FAT-fs (loop2): Directory bread(block 71) failed [ 497.050290][T10201] FAT-fs (loop2): Directory bread(block 72) failed [ 497.056927][T10201] FAT-fs (loop2): Directory bread(block 73) failed [ 498.345896][T10224] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 498.411295][T10224] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 500.090856][T10235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1287'. [ 500.520318][T10261] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 500.543393][T10261] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 501.768015][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.774968][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.954477][T10322] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 503.968084][T10308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1307'. [ 504.001032][T10322] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 504.085777][T10325] loop1: detected capacity change from 0 to 256 [ 504.227872][T10325] Invalid option length (190) for dns_resolver key [ 505.367036][T10331] syzkaller0: entered promiscuous mode [ 505.424143][T10331] syzkaller0: entered allmulticast mode [ 506.850040][T10355] loop2: detected capacity change from 0 to 256 [ 506.904546][ T9167] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.925692][T10355] Invalid option length (190) for dns_resolver key [ 508.642488][T10363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1325'. [ 511.581821][T10357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 511.603888][T10358] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 512.167364][T10399] loop1: detected capacity change from 0 to 256 [ 512.214823][ T9167] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 512.221410][T10399] Invalid option length (1114) for dns_resolver key [ 512.468069][T10407] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 512.501093][T10407] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 513.648562][T10412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1335'. [ 514.384315][T10420] syzkaller0: entered promiscuous mode [ 514.400383][T10420] syzkaller0: entered allmulticast mode [ 515.279768][T10430] loop3: detected capacity change from 0 to 256 [ 515.341687][T10430] Invalid option length (1114) for dns_resolver key [ 515.478994][T10435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 515.499418][T10435] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 516.459299][T10459] syzkaller0: entered promiscuous mode [ 516.471286][T10459] syzkaller0: entered allmulticast mode [ 516.625491][T10461] loop2: detected capacity change from 0 to 256 [ 516.673227][T10461] Invalid option length (1114) for dns_resolver key [ 516.837783][T10462] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1353'. [ 517.172991][ T7422] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.201177][T10490] syzkaller0: entered promiscuous mode [ 518.213242][T10490] syzkaller0: entered allmulticast mode [ 519.409140][T10517] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1370'. [ 519.826086][T10520] syzkaller0: entered promiscuous mode [ 519.844105][T10520] syzkaller0: entered allmulticast mode [ 520.773704][T10541] syzkaller0: entered promiscuous mode [ 520.787565][T10541] syzkaller0: entered allmulticast mode [ 522.364569][T10569] syzkaller0: entered promiscuous mode [ 522.380019][T10569] syzkaller0: entered allmulticast mode [ 522.752527][T10573] loop3: detected capacity change from 0 to 256 [ 522.792782][T10573] Invalid option length (1114) for dns_resolver key [ 524.188707][T10600] syzkaller0: entered promiscuous mode [ 524.194278][T10600] syzkaller0: entered allmulticast mode [ 524.328305][T10604] loop3: detected capacity change from 0 to 256 [ 524.373515][T10604] Invalid option length (1114) for dns_resolver key [ 525.800084][T10635] syzkaller0: entered promiscuous mode [ 525.805662][T10635] syzkaller0: entered allmulticast mode [ 525.831522][T10637] loop2: detected capacity change from 0 to 256 [ 525.846764][T10637] Invalid option length (1114) for dns_resolver key [ 527.602080][T10664] syzkaller0: entered promiscuous mode [ 527.607760][T10664] syzkaller0: entered allmulticast mode [ 527.842419][T10670] loop1: detected capacity change from 0 to 256 [ 527.938665][ T9162] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 527.944608][T10670] Invalid option length (1114) for dns_resolver key [ 530.146095][T10706] syzkaller0: entered promiscuous mode [ 530.159292][T10706] syzkaller0: entered allmulticast mode [ 530.495004][T10710] loop1: detected capacity change from 0 to 256 [ 530.547339][T10710] Invalid option length (1114) for dns_resolver key [ 532.078237][T10737] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 532.142668][T10736] syzkaller0: entered promiscuous mode [ 532.167085][T10736] syzkaller0: entered allmulticast mode [ 532.742710][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 533.027389][T10744] loop1: detected capacity change from 0 to 256 [ 533.128531][T10744] Invalid option length (1114) for dns_resolver key [ 534.064095][T10765] syzkaller0: entered promiscuous mode [ 534.070436][T10765] syzkaller0: entered allmulticast mode [ 534.189934][T10768] loop3: detected capacity change from 0 to 128 [ 534.218496][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 534.230808][T10768] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 534.569277][T10775] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 534.601329][T10776] loop3: detected capacity change from 0 to 256 [ 534.649492][T10776] Invalid option length (1114) for dns_resolver key [ 536.526985][T10796] syzkaller0: entered promiscuous mode [ 536.533411][T10796] syzkaller0: entered allmulticast mode [ 536.639667][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 536.828361][T10802] loop3: detected capacity change from 0 to 256 [ 536.914471][ T9167] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 536.967933][T10802] Invalid option length (1114) for dns_resolver key [ 536.986779][T10807] loop1: detected capacity change from 0 to 128 [ 537.036743][T10807] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 537.208418][T10812] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 537.765298][T10819] syzkaller0: entered promiscuous mode [ 537.782525][T10819] syzkaller0: entered allmulticast mode [ 538.293571][T10835] loop0: detected capacity change from 0 to 256 [ 538.446543][ T9167] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 538.606646][T10835] Invalid option length (1114) for dns_resolver key [ 538.761601][T10841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1491'. [ 539.489339][T10852] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 539.587925][T10854] syzkaller0: entered promiscuous mode [ 539.605196][T10854] syzkaller0: entered allmulticast mode [ 540.282179][T10862] loop0: detected capacity change from 0 to 256 [ 540.347834][ T9167] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 541.276901][T10880] syzkaller0: entered promiscuous mode [ 541.287722][T10880] syzkaller0: entered allmulticast mode [ 541.873922][T10889] loop1: detected capacity change from 0 to 256 [ 541.967639][ T9167] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 542.212244][T10894] loop0: detected capacity change from 0 to 128 [ 542.248060][T10894] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 542.434614][T10897] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 542.789745][T10907] syzkaller0: entered promiscuous mode [ 542.795415][T10907] syzkaller0: entered allmulticast mode [ 544.039290][T10918] loop1: detected capacity change from 0 to 256 [ 545.077726][ T9167] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 545.298008][T10932] loop1: detected capacity change from 0 to 128 [ 545.310887][T10932] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 545.346775][T10930] syzkaller0: entered promiscuous mode [ 545.384137][T10930] syzkaller0: entered allmulticast mode [ 545.733897][T10948] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 546.314362][T10958] loop3: detected capacity change from 0 to 256 [ 547.015372][ T9162] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 547.410423][T10964] loop3: detected capacity change from 0 to 128 [ 547.452749][T10964] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 548.200388][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.498857][T10986] loop1: detected capacity change from 0 to 256 [ 548.516665][T10987] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 549.336550][T10995] loop0: detected capacity change from 0 to 128 [ 549.379245][T10995] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 551.032073][T11012] loop1: detected capacity change from 0 to 256 [ 551.121174][ T9167] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 551.296431][T11022] loop1: detected capacity change from 0 to 128 [ 551.306403][T11022] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 551.623994][T11032] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 552.666598][T11046] loop0: detected capacity change from 0 to 256 [ 552.711347][T11048] loop3: detected capacity change from 0 to 128 [ 552.728134][ T9167] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 552.740136][T11048] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 553.745779][T11069] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 554.417810][T11076] loop0: detected capacity change from 0 to 256 [ 554.491491][ T9167] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.799802][T11080] loop0: detected capacity change from 0 to 128 [ 554.821862][T11080] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 555.883308][T11100] loop1: detected capacity change from 0 to 256 [ 556.365934][T11112] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 557.307156][T11129] loop3: detected capacity change from 0 to 256 [ 557.412476][ T9167] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 559.414579][T11176] loop2: detected capacity change from 0 to 256 [ 559.444496][T11177] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 561.323967][T11212] loop2: detected capacity change from 0 to 256 [ 561.409724][ T9167] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 562.242486][T11229] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 563.181657][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.189765][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.684337][T11260] loop0: detected capacity change from 0 to 128 [ 563.703151][T11260] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 565.261615][T11282] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 565.323247][T11282] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 566.265458][T11314] loop3: detected capacity change from 0 to 128 [ 566.303898][T11314] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 568.218906][T11356] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 568.248580][T11356] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 568.553760][T11364] loop3: detected capacity change from 0 to 128 [ 568.598864][T11364] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 568.915355][T11366] loop3: detected capacity change from 0 to 512 [ 568.986097][T11366] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 569.061954][T11366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 569.084307][T11366] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1656: bad orphan inode 15 [ 569.197889][T11366] ext4_test_bit(bit=14, block=18) = 1 [ 569.203409][T11366] is_bad_inode(inode)=0 [ 569.237807][T11366] NEXT_ORPHAN(inode)=1023 [ 569.242485][T11366] max_ino=32 [ 569.255842][T11366] i_nlink=0 [ 569.264641][T11366] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1656: bg 0: block 161: padding at end of block bitmap is not set [ 569.283425][T11366] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 569.301469][T11366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 569.754730][ T5778] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /423/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 569.825987][ T5778] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 569.899189][ T5778] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 570.947281][T11377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.085700][ T1298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.282788][ T1298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.496887][ T1298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.593471][ T1298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.348333][ T1298] tipc: Left network mode [ 573.375360][T11442] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 573.386832][T11442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 573.397143][T11442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 573.406329][T11442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.423577][T11442] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 573.437341][T11442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.804871][T11438] lo speed is unknown, defaulting to 1000 [ 574.999785][T11438] chnl_net:caif_netlink_parms(): no params data found [ 575.488883][ T51] Bluetooth: hci3: command tx timeout [ 576.436831][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.464146][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.487751][T11438] bridge_slave_0: entered allmulticast mode [ 576.497836][T11438] bridge_slave_0: entered promiscuous mode [ 576.567835][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.575115][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.598620][T11438] bridge_slave_1: entered allmulticast mode [ 576.615209][T11438] bridge_slave_1: entered promiscuous mode [ 576.866852][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.914097][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.153973][T11438] team0: Port device team_slave_0 added [ 577.268787][ T1298] hsr_slave_0: left promiscuous mode [ 577.295772][ T1298] hsr_slave_1: left promiscuous mode [ 577.349415][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.376571][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.389103][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.396580][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.421520][ T1298] bridge_slave_1: left allmulticast mode [ 577.427241][ T1298] bridge_slave_1: left promiscuous mode [ 577.449383][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.475907][ T1298] bridge_slave_0: left allmulticast mode [ 577.488523][ T1298] bridge_slave_0: left promiscuous mode [ 577.505702][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.573240][ T51] Bluetooth: hci3: command tx timeout [ 577.629335][ T1298] veth1_macvtap: left promiscuous mode [ 577.647868][ T1298] veth0_macvtap: left promiscuous mode [ 577.653583][ T1298] veth1_vlan: left promiscuous mode [ 577.688400][ T1298] veth0_vlan: left promiscuous mode [ 579.330979][ T1137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.463532][T11551] loop2: detected capacity change from 0 to 512 [ 579.512092][T11551] EXT4-fs error (device loop2): ext4_quota_enable:7144: comm syz.2.1689: inode #100663296: comm syz.2.1689: iget: illegal inode # [ 579.543550][T11551] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.1689: Bad quota inode: 100663296, type: 2 [ 579.567411][T11551] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 579.587174][T11551] EXT4-fs (loop2): mount failed [ 579.616348][ T1298] team0 (unregistering): Port device team_slave_1 removed [ 579.647844][ T51] Bluetooth: hci3: command tx timeout [ 579.666447][T11551] loop2: detected capacity change from 0 to 512 [ 579.675457][T11551] EXT4-fs: Mount option(s) incompatible with ext2 [ 579.703060][ T1298] team0 (unregistering): Port device team_slave_0 removed [ 579.767215][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.817738][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.176016][ T1298] bond0 (unregistering): Released all slaves [ 580.269037][T11438] team0: Port device team_slave_1 added [ 580.471020][T11438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.627925][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.737576][T11438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.770161][T11438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.777187][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.803233][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.213946][T11438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.722501][T11438] hsr_slave_0: entered promiscuous mode [ 581.736855][ T51] Bluetooth: hci3: command tx timeout [ 581.879746][T11438] hsr_slave_1: entered promiscuous mode [ 581.908496][T11438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.916317][T11438] Cannot create hsr debugfs directory [ 582.740251][T11438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 582.764181][T11438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 582.791040][T11438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 582.823528][T11438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 583.211457][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.326939][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.382999][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.390350][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.630456][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.637853][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.454028][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.072048][T11438] veth0_vlan: entered promiscuous mode [ 585.125747][T11438] veth1_vlan: entered promiscuous mode [ 585.236840][T11438] veth0_macvtap: entered promiscuous mode [ 585.272643][T11438] veth1_macvtap: entered promiscuous mode [ 585.310643][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.323119][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.339946][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.354196][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.365639][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.377675][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.390082][T11438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.415978][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.433185][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.444025][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.456401][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.466662][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.479968][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.492215][T11438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.517095][T11438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.526199][T11438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.542534][T11438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.551732][T11438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.692082][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.713281][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.784400][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.804450][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.041126][T11668] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 586.525350][T11687] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 588.264418][T11710] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 588.449384][T11710] overlayfs: missing 'lowerdir' [ 588.870005][T11724] loop4: detected capacity change from 0 to 512 [ 588.919686][T11724] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 588.943885][T11724] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 588.998797][T11724] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.1712: Invalid inode table block 1 in block_group 0 [ 589.053362][T11724] EXT4-fs (loop4): get root inode failed [ 589.061671][T11724] EXT4-fs (loop4): mount failed [ 592.175851][T11783] loop2: detected capacity change from 0 to 512 [ 592.227646][T11783] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 592.290716][T11783] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 592.347167][T11783] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1726: Invalid inode table block 1 in block_group 0 [ 592.380621][T11783] EXT4-fs (loop2): get root inode failed [ 592.397944][T11783] EXT4-fs (loop2): mount failed [ 592.415863][T11778] loop0: detected capacity change from 0 to 8192 [ 592.496221][T11778] loop0: p1 < > p3 < p5 > p4 [ 592.624377][T11778] loop0: p4 size 3081 extends beyond EOD, truncated [ 592.713517][T11778] loop0: p5 size 3081 extends beyond EOD, truncated [ 592.848753][ T967] IPVS: starting estimator thread 0... [ 592.988025][T11791] IPVS: using max 21 ests per chain, 50400 per kthread [ 593.626508][T11654] udevd[11654]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 593.642124][ T9362] udevd[9362]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 593.691041][ T9162] udevd[9162]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 593.754472][T11806] udevd[11806]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 593.921600][ T9162] udevd[9162]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 593.946628][T11654] udevd[11654]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 594.002299][T11806] udevd[11806]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 594.026883][ T9167] udevd[9167]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 594.905232][T11819] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 596.405344][T11849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 597.449016][T11858] loop1: detected capacity change from 0 to 512 [ 597.506053][T11858] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 597.527564][T11858] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 597.558728][T11858] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.1736: Invalid inode table block 1 in block_group 0 [ 597.597948][T11858] EXT4-fs (loop1): get root inode failed [ 597.613041][T11858] EXT4-fs (loop1): mount failed [ 597.928526][T11868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1739'. [ 599.613256][ T787] IPVS: starting estimator thread 0... [ 599.764205][T11891] IPVS: using max 17 ests per chain, 40800 per kthread [ 600.966817][T11906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 601.379624][T11913] syzkaller0: entered promiscuous mode [ 601.399780][T11913] syzkaller0: entered allmulticast mode [ 601.553489][T11917] loop1: detected capacity change from 0 to 512 [ 601.583232][T11917] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1752: inode has both inline data and extents flags [ 601.622843][T11917] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1752: couldn't read orphan inode 15 (err -117) [ 601.649311][T11917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.230937][T11932] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 602.843868][T11939] syzkaller0: entered promiscuous mode [ 602.946898][T11939] syzkaller0: entered allmulticast mode [ 604.051076][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.221777][T11950] syzkaller0: entered promiscuous mode [ 604.236639][T11950] syzkaller0: entered allmulticast mode [ 605.316781][T11964] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 606.489533][T11975] loop1: detected capacity change from 0 to 128 [ 606.580915][T11975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 606.655827][T11975] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 606.914764][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.378337][ T8] IPVS: starting estimator thread 0... [ 607.499617][T11995] IPVS: using max 16 ests per chain, 38400 per kthread [ 607.737222][T12009] syzkaller0: entered promiscuous mode [ 607.743097][T12009] syzkaller0: entered allmulticast mode [ 607.788155][T12007] input: syz1 as /devices/virtual/input/input5 [ 608.749155][T12027] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 609.313005][T12035] loop4: detected capacity change from 0 to 512 [ 609.360068][T12035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 609.444085][T12035] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #17: comm syz.4.1776: corrupted xattr block 128: invalid header [ 609.469849][T12035] EXT4-fs (loop4): Remounting filesystem read-only [ 609.510004][T12035] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 609.553916][T12035] EXT4-fs (loop4): 1 orphan inode deleted [ 609.561311][T12050] syzkaller0: entered promiscuous mode [ 609.571102][T12050] syzkaller0: entered allmulticast mode [ 609.614790][T12035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.701658][T12035] netlink: 'syz.4.1776': attribute type 2 has an invalid length. [ 609.811570][T12058] loop1: detected capacity change from 0 to 128 [ 609.890125][T12058] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 609.929551][T12058] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.211193][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 610.315335][T11438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.357942][ T1137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 610.418139][T12071] loop0: detected capacity change from 0 to 512 [ 610.520036][T12071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.621319][T12071] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 610.658934][T12079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 610.809545][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.160452][T12095] syzkaller0: entered promiscuous mode [ 611.166069][T12095] syzkaller0: entered allmulticast mode [ 612.654053][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 612.679061][T12118] loop0: detected capacity change from 0 to 512 [ 612.707803][T12118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 612.783749][T12118] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #17: comm syz.0.1796: corrupted xattr block 128: invalid header [ 612.837820][T12118] EXT4-fs (loop0): Remounting filesystem read-only [ 612.844505][T12118] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 612.857599][T12118] EXT4-fs (loop0): 1 orphan inode deleted [ 612.946028][T12118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.030066][T12131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 613.062494][T12118] netlink: 'syz.0.1796': attribute type 2 has an invalid length. [ 613.748381][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.957979][T12149] syzkaller0: entered promiscuous mode [ 613.981267][T12149] syzkaller0: entered allmulticast mode [ 616.852840][T12190] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 617.527056][T12185] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 618.188520][T12207] loop4: detected capacity change from 0 to 512 [ 618.208496][T12207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 618.255231][T12207] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #17: comm syz.4.1816: corrupted xattr block 128: invalid header [ 618.704451][T12207] EXT4-fs (loop4): Remounting filesystem read-only [ 619.068259][T12207] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 619.128456][T12207] EXT4-fs (loop4): 1 orphan inode deleted [ 619.143956][T12207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.176584][T12213] loop1: detected capacity change from 0 to 512 [ 619.222628][T12213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 619.233832][T12207] netlink: 'syz.4.1816': attribute type 2 has an invalid length. [ 619.278273][T12213] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #17: comm syz.1.1817: corrupted xattr block 128: invalid header [ 619.292498][T12213] EXT4-fs (loop1): Remounting filesystem read-only [ 619.299408][T12213] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 619.309113][T12213] EXT4-fs (loop1): 1 orphan inode deleted [ 619.359008][T12213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.525484][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.592808][T11438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.621555][T12219] syzkaller0: entered promiscuous mode [ 619.627134][T12219] syzkaller0: entered allmulticast mode [ 621.327253][T12254] loop2: detected capacity change from 0 to 512 [ 621.370368][T12254] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 621.390931][T12257] loop0: detected capacity change from 0 to 512 [ 621.416894][T12257] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 621.480057][T12254] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #17: comm syz.2.1827: corrupted xattr block 128: invalid header [ 621.528040][T12257] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #17: comm syz.0.1828: corrupted xattr block 128: invalid header [ 621.564370][T12254] EXT4-fs (loop2): Remounting filesystem read-only [ 621.586370][T12254] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 621.599882][T12257] EXT4-fs (loop0): Remounting filesystem read-only [ 621.616638][T12257] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 621.626794][T12254] EXT4-fs (loop2): 1 orphan inode deleted [ 621.639371][T12254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.652604][T12257] EXT4-fs (loop0): 1 orphan inode deleted [ 621.669047][T12257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.748060][T12257] netlink: 'syz.0.1828': attribute type 2 has an invalid length. [ 621.809707][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.293252][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.453793][T12279] syzkaller0: entered promiscuous mode [ 623.476975][T12279] syzkaller0: entered allmulticast mode [ 624.612507][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.620190][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.170189][T12315] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 626.348947][T12327] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 626.540223][T12330] loop2: detected capacity change from 0 to 512 [ 626.567831][T12330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 626.649266][T12330] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #17: comm syz.2.1838: corrupted xattr block 128: invalid header [ 626.695124][T12330] EXT4-fs (loop2): Remounting filesystem read-only [ 626.709527][T12330] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 626.764792][T12330] EXT4-fs (loop2): 1 orphan inode deleted [ 626.788940][T12330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.911943][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.115264][T12334] loop2: detected capacity change from 0 to 512 [ 627.177092][T12334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 627.256379][T12334] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #17: comm syz.2.1839: corrupted xattr block 128: invalid header [ 627.315213][T12334] EXT4-fs (loop2): Remounting filesystem read-only [ 627.323132][T12334] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 627.333135][T12334] EXT4-fs (loop2): 1 orphan inode deleted [ 627.340473][T12334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.359210][T12334] netlink: 'syz.2.1839': attribute type 2 has an invalid length. [ 628.749756][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.967892][T12343] syzkaller0: entered promiscuous mode [ 628.973452][T12343] syzkaller0: entered allmulticast mode [ 629.457261][T12347] loop1: detected capacity change from 0 to 4096 [ 629.490833][T12347] ext4: Unknown parameter 'seclabel' [ 629.569363][T11654] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 630.957962][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 630.977925][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 631.184205][T12231] Set syz1 is full, maxelem 65536 reached [ 631.883355][T12371] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 634.538435][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 634.549379][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 634.566371][T12408] loop4: detected capacity change from 0 to 4096 [ 634.587157][T12408] ext4: Unknown parameter 'seclabel' [ 636.044051][T12428] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 637.576812][T12441] syzkaller0: entered promiscuous mode [ 637.584927][T12441] syzkaller0: entered allmulticast mode [ 638.107020][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 638.147991][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 640.378583][T12470] loop4: detected capacity change from 0 to 512 [ 640.391701][T12466] loop2: detected capacity change from 0 to 4096 [ 640.403709][T12470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 640.416839][T12466] ext4: Unknown parameter 'seclabel' [ 640.979956][T12470] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #17: comm syz.4.1874: corrupted xattr block 128: invalid header [ 641.569323][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 641.850867][T12470] EXT4-fs (loop4): Remounting filesystem read-only [ 641.920714][T12470] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 642.376943][T12470] EXT4-fs (loop4): 1 orphan inode deleted [ 642.668928][T12470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.835240][T12470] netlink: 'syz.4.1874': attribute type 2 has an invalid length. [ 643.014575][T12486] syzkaller0: entered promiscuous mode [ 643.063869][T12486] syzkaller0: entered allmulticast mode [ 643.307974][T12494] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 643.332354][T11438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.964517][T12526] loop0: detected capacity change from 0 to 512 [ 647.012675][T12526] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 647.078881][T12526] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #17: comm syz.0.1890: corrupted xattr block 128: invalid header [ 647.119517][T12526] EXT4-fs (loop0): Remounting filesystem read-only [ 647.126110][T12526] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 647.162059][T12526] EXT4-fs (loop0): 1 orphan inode deleted [ 647.186908][T12526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.243325][T12526] netlink: 'syz.0.1890': attribute type 2 has an invalid length. [ 647.383493][T12526] ------------[ cut here ]------------ [ 647.389108][T12526] kernel BUG at net/phonet/socket.c:213! [ 647.414913][T12526] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 647.421086][T12526] CPU: 0 PID: 12526 Comm: syz.0.1890 Not tainted syzkaller #0 [ 647.428598][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.438709][T12526] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 647.444487][T12526] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 647.464150][T12526] RSP: 0018:ffffc9000c877960 EFLAGS: 00010283 [ 647.470278][T12526] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 647.478306][T12526] RDX: ffffc9000d57b000 RSI: 0000000000000050 RDI: 0000000000000051 [ 647.486333][T12526] RBP: ffffc9000c877a10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 647.494363][T12526] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 647.502488][T12526] R13: ffff88805e196c00 R14: ffff88805dc05dc0 R15: 1ffff9200190ef30 [ 647.510508][T12526] FS: 00007f7253d246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 647.519497][T12526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.526131][T12526] CR2: 00007f74e6c85000 CR3: 000000002edfc000 CR4: 00000000003506f0 [ 647.534192][T12526] Call Trace: [ 647.537513][T12526] [ 647.540485][T12526] ? pn_socket_ioctl+0x350/0x350 [ 647.545566][T12526] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 647.550905][T12526] ? security_socket_sendmsg+0x80/0xa0 [ 647.556437][T12526] ? pn_socket_ioctl+0x350/0x350 [ 647.561449][T12526] ____sys_sendmsg+0x5ba/0x960 [ 647.566262][T12526] ? __lock_acquire+0x7d40/0x7d40 [ 647.571340][T12526] ? __asan_memset+0x22/0x40 [ 647.576011][T12526] ? __sys_sendmsg_sock+0x30/0x30 [ 647.581075][T12526] ? __import_iovec+0x5f2/0x850 [ 647.585978][T12526] ? import_iovec+0x73/0xa0 [ 647.590529][T12526] ___sys_sendmsg+0x2a6/0x360 [ 647.595271][T12526] ? __sys_sendmsg+0x2a0/0x2a0 [ 647.600119][T12526] __se_sys_sendmsg+0x1c2/0x2b0 [ 647.605043][T12526] ? __x64_sys_sendmsg+0x80/0x80 [ 647.610060][T12526] ? lockdep_hardirqs_on+0x98/0x150 [ 647.615341][T12526] do_syscall_64+0x55/0xb0 [ 647.619812][T12526] ? clear_bhb_loop+0x40/0x90 [ 647.624548][T12526] ? clear_bhb_loop+0x40/0x90 [ 647.629285][T12526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.635235][T12526] RIP: 0033:0x7f7252d9ce59 [ 647.639801][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.659553][T12526] RSP: 002b:00007f7253d24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.668023][T12526] RAX: ffffffffffffffda RBX: 00007f7253015fa0 RCX: 00007f7252d9ce59 [ 647.676055][T12526] RDX: 0000000004004081 RSI: 00002000000002c0 RDI: 0000000000000008 [ 647.684093][T12526] RBP: 00007f7252e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 647.692121][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.700144][T12526] R13: 00007f7253016038 R14: 00007f7253015fa0 R15: 00007ffe5fc93848 [ 647.708174][T12526] [ 647.711265][T12526] Modules linked in: [ 647.721450][T12526] ---[ end trace 0000000000000000 ]--- [ 647.726980][T12526] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 647.734255][T12526] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 647.755287][T12526] RSP: 0018:ffffc9000c877960 EFLAGS: 00010283 [ 647.761682][T12526] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 647.770181][T12526] RDX: ffffc9000d57b000 RSI: 0000000000000050 RDI: 0000000000000051 [ 647.779822][T12526] RBP: ffffc9000c877a10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 647.788498][T12526] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 647.796720][T12526] R13: ffff88805e196c00 R14: ffff88805dc05dc0 R15: 1ffff9200190ef30 [ 647.805212][T12526] FS: 00007f7253d246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 647.815410][T12526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.822308][T12526] CR2: 00007f74e6c85000 CR3: 000000002edfc000 CR4: 00000000003506f0 [ 647.830921][T12526] Kernel panic - not syncing: Fatal exception [ 647.837170][T12526] Kernel Offset: disabled [ 647.841595][T12526] Rebooting in 86400 seconds..