last executing test programs: 5.264387891s ago: executing program 3 (id=1929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002) 4.874566154s ago: executing program 3 (id=1933): openat$ppp(0xffffffffffffff9c, 0x0, 0x5277c0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb4d, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000084) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 4.656445741s ago: executing program 2 (id=1939): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1f) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) socket$nl_generic(0x10, 0x3, 0x10) 3.571588976s ago: executing program 0 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002) 3.493141448s ago: executing program 3 (id=1945): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d", 0x9b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.491728938s ago: executing program 2 (id=1946): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000200)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@discard_sync}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x9, 0x401, 0x2000000004010}) 3.481109419s ago: executing program 0 (id=1947): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f780"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf", @ANYRES32, @ANYRES16], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) bind$alg(r3, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f00000000c0)=0xa40f) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100425bd7000fedbdf250100000010000600000000000000000000000000c3155136e5c45c1b00ffffe0"], 0x30}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x891c, &(0x7f0000000000)={'veth0_vlan\x00', @random="0200ff7fffff"}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.312398504s ago: executing program 0 (id=1953): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x21}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 3.281490595s ago: executing program 0 (id=1954): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000002000), 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x10000) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 3.249226916s ago: executing program 3 (id=1956): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.179397468s ago: executing program 1 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002) 3.158000819s ago: executing program 1 (id=1958): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="20ec0100000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000080)=[{0x0, 0x6000, 0x2, &(0x7f0000000040)="aa34"}], 0x1}) 2.720402513s ago: executing program 2 (id=1959): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2.720167563s ago: executing program 2 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.749815354s ago: executing program 1 (id=1964): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x21}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 1.686464156s ago: executing program 3 (id=1966): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d", 0x9b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.685324486s ago: executing program 4 (id=1967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000600)="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", 0x190, 0x42, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) shutdown(r0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1.684128016s ago: executing program 1 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002) 1.619035239s ago: executing program 1 (id=1969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff3}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1.56537501s ago: executing program 4 (id=1970): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write(r0, &(0x7f0000000100)="281030068d", 0x5) 1.538267241s ago: executing program 0 (id=1971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) sched_getaffinity(r1, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) memfd_create(0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 1.485225303s ago: executing program 4 (id=1972): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000940)="b0", 0x1}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="1400000000000000000000000200000006000000", @ANYRES32=0x0, @ANYBLOB="ffffffffe00000010000000030"], 0x68}}], 0x1, 0x40004) listen(r0, 0x80c) 1.485040363s ago: executing program 1 (id=1973): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x0, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="20822200"], 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="208402"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000880)={0x0, 0x13, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.484220232s ago: executing program 2 (id=1974): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000280)=@udp, 0x1}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.419380685s ago: executing program 4 (id=1975): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_ublk_setup_io_uring(0x45ff, 0x0, 0x0, &(0x7f00000003c0), 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket(0x10, 0x803, 0x2) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) 1.331382017s ago: executing program 3 (id=1976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.328822557s ago: executing program 2 (id=1977): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 54.117169ms ago: executing program 4 (id=1978): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200447ac, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)="449f6aed247d197178c52d7eb85ff4a6e16fa6c282d8c3961e8d6c0082d2a25713fcbe0b0dfc6642ddb8617cead45f7b95c5989ddccf5460087b3e23cd11c12178f5a69a0ec4d95afb9b948c7527c466ab2093c578ac513b364476aa18fca150e57783c6fdb38f6b13d1a98ec11e7241280ee08a24c6a460c92ec8568aa3cf3af8fd16492e39dfca628c9bd0d9ea070b64", 0x91}, {&(0x7f0000000780)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351050b828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d5637f61d05401a64482860fc94a6311097055383c1d39604895eac4f83a498251f71485b91b9b091354c0d70b5058755b701b57a992f5012829db80bb04ecbc7663de9c8fad1a822cc061166f1cfebc8c45cc776ebf8e514", 0x124}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}], 0x1}}], 0x3, 0x4004) 745.21µs ago: executing program 0 (id=1979): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='\x01n\xeb\xda5\xb5Q1\xb8\xb5\xdb\xe8\xb6X\xa8M\x03\a\x13\x8b\x12c\x19\xa5\x16\xaf\xee\x90>m?\"K\xa4\x16\xeb\xe6\xf2\x94\xe4\x8e\xb0hAC\x12\xa1a\x00\x00\x00\x00\x00\x00\xc6\xfc\xd8\xafyK\xff\xa6\xdc\xc2\xc3\x90\xec\x8b7)\xfc\xe9I\x16\x8b4\xcc\xeb+\x87\x80\xd3\rW\x7f\x1e\xbd\xeb\x14_0\xf7\xce\x96\xbf\xba\"\x85\x06\xb5\xa7\"\xf5\x03\xff\xe5u\x8eL\xc4\xeb \x89sN\'\x1a`\xe5\xa3\a\xe9\xa8\x1b\x87\xe8\xe3\x9f\xb9-\x9deO\xf1\x9d\xf1\xbd\nJ\xe5\'\xbe\x1c\xb1\x15\xbb\xfaR\xdd\xb5\xe2\xa6\x15\xbd\xa2\xfe\x99\xd8Bk\x96H\xc4\xb1\xc7H\xd6\xac\xf8\xaf\xa6\xbeWvB', &(0x7f00000010c0)='\x8e\x1d\x98\\\x7f\xc3\x91nd\x9f\xb1\x85\xaa\"~%*\xfe\xaf\xfc[}\xa8:\x8d\x91 *\xff\x03\v\xcb\x94\x8e\x80!\xb2', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000440)='.!@*\x00', &(0x7f0000000740)="e5", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x407, 0x4, 0x9}) kernel console output (not intermixed with test programs): g state [ 33.678450][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.680462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.695971][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.700512][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.702544][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.704044][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.705121][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.706539][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.708042][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.709512][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.710814][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.722218][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.724018][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.725511][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.726786][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.728254][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.730399][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.744952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.746881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.748503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.751489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.756522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.758340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.760035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.762747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.764309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.765847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.767535][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.769027][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.770454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.774779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.778582][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.780321][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.782213][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.790254][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.795962][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.797324][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.798542][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.800267][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.802274][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.803429][ T1782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.804896][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.807641][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.809606][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.816651][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.821971][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.825693][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.827501][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.829031][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.833695][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.835590][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.845050][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.847045][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.848607][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.850135][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.859120][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.861766][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.863368][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.868084][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.869786][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.876269][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.878303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.879865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.882157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.883698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.885157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.888029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.889230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.898578][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.900266][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.907338][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.935459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.937032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.938610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.943324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.947255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.951831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.956705][ T4338] device veth0_vlan entered promiscuous mode [ 33.971717][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.974119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.975425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.997082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.998536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.009450][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.011022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.012686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.014394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.015765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.017611][ T4338] device veth1_vlan entered promiscuous mode [ 34.019601][ T4327] device veth0_vlan entered promiscuous mode [ 34.026166][ T4327] device veth1_vlan entered promiscuous mode [ 34.048220][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.049840][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.054749][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.056223][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.062188][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.063493][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.076648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.078278][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.087792][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.089631][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.093561][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.095538][ T4327] device veth0_macvtap entered promiscuous mode [ 34.099964][ T4327] device veth1_macvtap entered promiscuous mode [ 34.105256][ T4328] device veth0_vlan entered promiscuous mode [ 34.108809][ T4328] device veth1_vlan entered promiscuous mode [ 34.113933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.115513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.116971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.118518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.120021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.122249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.123907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.127401][ T4338] device veth0_macvtap entered promiscuous mode [ 34.141925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.143577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.145116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.146621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.150249][ T4338] device veth1_macvtap entered promiscuous mode [ 34.161029][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.166374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.167988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.169514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.173699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.175279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.176904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.178535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.182402][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.184098][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.186416][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.189001][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.190513][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.193673][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.195942][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.198000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.199619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.202143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.203742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.205225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.206784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.217780][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.219415][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.221504][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.222851][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.226194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.227757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.233423][ T4338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.234921][ T4338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.236482][ T4338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.238028][ T4338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.241591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.243056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.250122][ T4337] device veth0_vlan entered promiscuous mode [ 34.253462][ T4329] device veth0_vlan entered promiscuous mode [ 34.255845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.257432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.262415][ T4328] device veth0_macvtap entered promiscuous mode [ 34.265135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.266703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.268124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.269999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.272694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.276992][ T4329] device veth1_vlan entered promiscuous mode [ 34.286380][ T4328] device veth1_macvtap entered promiscuous mode [ 34.296293][ T4337] device veth1_vlan entered promiscuous mode [ 34.316234][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.317969][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.319760][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.324665][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.327202][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.337325][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.339007][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.340393][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.342318][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.343790][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.345339][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.347052][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.348664][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.350148][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.353632][ T4329] device veth0_macvtap entered promiscuous mode [ 34.356485][ T4329] device veth1_macvtap entered promiscuous mode [ 34.358232][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.359892][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.364420][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.366077][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.368377][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.374268][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.375981][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.377351][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.379082][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.381179][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.382769][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.386331][ T4337] device veth0_macvtap entered promiscuous mode [ 34.402583][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.403915][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.409915][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.412552][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.414177][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.415921][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.417827][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.419515][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.424742][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.428319][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.430049][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.432249][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.433836][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.443300][ T4337] device veth1_macvtap entered promiscuous mode [ 34.446552][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.447494][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.447695][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.449384][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.454090][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.455852][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.457494][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.459197][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.462296][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.464060][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.465475][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.466989][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.468541][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.473834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.475375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.476775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.478239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.481723][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.482947][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.484920][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.487088][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.488863][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.490484][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.493750][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.495414][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.497246][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.499026][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.501913][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.504357][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.513894][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.515532][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.521272][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.522541][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.523095][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.525676][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.527321][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.529037][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.535221][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.536935][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.538435][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.540054][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.546670][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.549087][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.554037][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.555500][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.556977][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.566984][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.568567][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.570244][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.609625][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.611182][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.612561][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.614075][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.638196][ T4408] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 34.639547][ T4408] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 34.642883][ T4408] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.644183][ T4408] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 34.645388][ T4408] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 34.653216][ T4408] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 34.654471][ T4408] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 34.655751][ T4408] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.657092][ T4408] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 34.658268][ T4408] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 34.659474][ T4410] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 34.659514][ T4408] Zero length message leads to an empty skb [ 34.661227][ T4410] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 34.663036][ T4410] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.664478][ T4410] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.685465][ T4410] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.686979][ T4410] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.709703][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.712873][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.714306][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.717129][ T4412] loop0: detected capacity change from 0 to 512 [ 34.718887][ T4412] EXT4-fs: Ignoring removed oldalloc option [ 34.736994][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.738278][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.741370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.757635][ T4416] loop3: detected capacity change from 0 to 1024 [ 34.759123][ T4416] ======================================================= [ 34.759123][ T4416] WARNING: The mand mount option has been deprecated and [ 34.759123][ T4416] and is ignored by this kernel. Remove the mand [ 34.759123][ T4416] option from the mount to silence this warning. [ 34.759123][ T4416] ======================================================= [ 34.780849][ T4412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.6: inode #1: comm syz.0.6: iget: illegal inode # [ 34.784086][ T1782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.785293][ T1782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.789499][ T4412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.6: error while reading EA inode 1 err=-117 [ 34.791760][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.797026][ T4412] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.799295][ T4412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.6: inode #1: comm syz.0.6: iget: illegal inode # [ 34.809360][ T1782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.814815][ T1782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.816258][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.818019][ T4412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.6: error while reading EA inode 1 err=-117 [ 34.820656][ T4412] EXT4-fs (loop0): 1 orphan inode deleted [ 34.821677][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.825691][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.844609][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.846081][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.847663][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.882594][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 34.884280][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 34.892909][ T1782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.894467][ T1782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.896469][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.432814][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 35.449842][ T4425] device syzkaller0 entered promiscuous mode [ 35.451057][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 35.451081][ T4340] Bluetooth: hci0: command 0x041b tx timeout [ 35.451098][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 35.460755][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 35.464379][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 35.481677][ T4425] TC_ACT_REPEAT abuse ? [ 35.539731][ T4431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10'. [ 35.571081][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 35.641168][ T4437] loop2: detected capacity change from 0 to 256 [ 35.643576][ T4437] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.643852][ T4439] loop0: detected capacity change from 0 to 512 [ 35.656758][ T4437] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.657737][ T4439] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.664566][ T4439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.675955][ T4439] EXT4-fs (loop0): 1 truncate cleaned up [ 35.676946][ T4439] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.809178][ T4449] netlink: 148 bytes leftover after parsing attributes in process `syz.4.16'. [ 35.836581][ T4451] loop3: detected capacity change from 0 to 512 [ 35.838051][ T4451] EXT4-fs: Ignoring removed oldalloc option [ 35.937025][ T4451] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.17: inode #1: comm syz.3.17: iget: illegal inode # [ 35.941861][ T4451] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.17: error while reading EA inode 1 err=-117 [ 35.944371][ T4451] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.17: inode #1: comm syz.3.17: iget: illegal inode # [ 35.946879][ T4451] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.17: error while reading EA inode 1 err=-117 [ 35.948972][ T4451] EXT4-fs (loop3): 1 orphan inode deleted [ 35.949886][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.965305][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 36.290257][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 36.695129][ T4499] loop3: detected capacity change from 0 to 512 [ 36.704810][ T4499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.715727][ T4499] EXT4-fs (loop3): 1 truncate cleaned up [ 36.716681][ T4499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.113361][ T4506] loop4: detected capacity change from 0 to 512 [ 37.115019][ T4506] EXT4-fs: Ignoring removed oldalloc option [ 37.139833][ T4506] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.34: inode #1: comm syz.4.34: iget: illegal inode # [ 37.143907][ T4508] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 37.162058][ T4506] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.34: error while reading EA inode 1 err=-117 [ 37.164880][ T4506] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.34: inode #1: comm syz.4.34: iget: illegal inode # [ 37.185855][ T4506] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.34: error while reading EA inode 1 err=-117 [ 37.191171][ T4506] EXT4-fs (loop4): 1 orphan inode deleted [ 37.192098][ T4506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.232075][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 37.278207][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 37.448731][ T4538] loop4: detected capacity change from 0 to 512 [ 37.450536][ T4538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.451899][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 37.469212][ T4532] loop3: detected capacity change from 0 to 8192 [ 37.524334][ T4538] EXT4-fs (loop4): 1 truncate cleaned up [ 37.525506][ T4538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.534303][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 37.535228][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 37.536294][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 37.537254][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 37.658166][ T4548] loop3: detected capacity change from 0 to 512 [ 37.716230][ T4548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.757745][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 38.305411][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 38.353459][ T4590] device syzkaller0 entered promiscuous mode [ 38.579238][ T4613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.586302][ T4613] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 38.612272][ T4619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.642437][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 38.679970][ T4619] EXT4-fs (loop2): 1 truncate cleaned up [ 38.681026][ T4619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.686714][ T4622] EXT4-fs: Ignoring removed oldalloc option [ 38.699278][ T4622] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.84: inode #1: comm syz.4.84: iget: illegal inode # [ 38.704124][ T4622] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.84: error while reading EA inode 1 err=-117 [ 38.711462][ T4622] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.84: inode #1: comm syz.4.84: iget: illegal inode # [ 38.714036][ T4622] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.84: error while reading EA inode 1 err=-117 [ 38.716337][ T4622] EXT4-fs (loop4): 1 orphan inode deleted [ 38.717330][ T4622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.747146][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 39.017166][ T4645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.138009][ T4657] EXT4-fs: Ignoring removed oldalloc option [ 39.147012][ T4657] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.98: inode #1: comm syz.0.98: iget: illegal inode # [ 39.149462][ T4657] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.98: error while reading EA inode 1 err=-117 [ 39.152596][ T4657] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.98: inode #1: comm syz.0.98: iget: illegal inode # [ 39.154936][ T4657] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.98: error while reading EA inode 1 err=-117 [ 39.157187][ T4657] EXT4-fs (loop0): 1 orphan inode deleted [ 39.158202][ T4657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.173415][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 39.492608][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 39.532394][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.563969][ T4672] device syzkaller0 entered promiscuous mode [ 39.621381][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 39.622313][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 39.623278][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 39.624267][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 39.797020][ T4685] set_capacity_and_notify: 4 callbacks suppressed [ 39.797030][ T4685] loop0: detected capacity change from 0 to 512 [ 39.809189][ T4685] EXT4-fs: Ignoring removed oldalloc option [ 39.818938][ T4687] loop2: detected capacity change from 0 to 512 [ 39.823479][ T4687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.832316][ T4687] EXT4-fs (loop2): 1 truncate cleaned up [ 39.833828][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.836630][ T4685] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.109: inode #1: comm syz.0.109: iget: illegal inode # [ 39.844849][ T4685] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.109: error while reading EA inode 1 err=-117 [ 39.855327][ T4685] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.109: inode #1: comm syz.0.109: iget: illegal inode # [ 39.859076][ T4685] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.109: error while reading EA inode 1 err=-117 [ 39.865440][ T4685] EXT4-fs (loop0): 1 orphan inode deleted [ 39.866576][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.882421][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 40.023339][ T4703] __nla_validate_parse: 20 callbacks suppressed [ 40.023353][ T4703] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 40.026040][ T4701] device veth1_to_bond entered promiscuous mode [ 40.065188][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 40.128119][ T4711] device syzkaller0 entered promiscuous mode [ 40.237599][ T4715] loop4: detected capacity change from 0 to 512 [ 40.243068][ T4715] EXT4-fs: Ignoring removed oldalloc option [ 40.247530][ T4715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.122: inode #1: comm syz.4.122: iget: illegal inode # [ 40.249793][ T4715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.122: error while reading EA inode 1 err=-117 [ 40.256625][ T4715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.122: inode #1: comm syz.4.122: iget: illegal inode # [ 40.259091][ T4715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.122: error while reading EA inode 1 err=-117 [ 40.264719][ T4715] EXT4-fs (loop4): 1 orphan inode deleted [ 40.265776][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.291858][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 40.786080][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.820901][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 40.888232][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 41.344172][ T4747] device syzkaller0 entered promiscuous mode [ 42.332825][ T4773] loop0: detected capacity change from 0 to 512 [ 44.553153][ T4819] loop0: detected capacity change from 0 to 8192 [ 44.563549][ T4819] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.568471][ T4819] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 44.569898][ T4819] FAT-fs (loop0): Filesystem has been set read-only [ 53.803332][ T4856] loop4: detected capacity change from 0 to 512 [ 53.805988][ T4856] EXT4-fs: Ignoring removed oldalloc option [ 53.815697][ T4856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.169: inode #1: comm syz.4.169: iget: illegal inode # [ 53.819205][ T4856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.169: error while reading EA inode 1 err=-117 [ 53.824889][ T4856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.169: inode #1: comm syz.4.169: iget: illegal inode # [ 53.831410][ T4856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.169: error while reading EA inode 1 err=-117 [ 53.833647][ T4856] EXT4-fs (loop4): 1 orphan inode deleted [ 53.834574][ T4856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.869373][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 54.118141][ T4883] device syzkaller0 entered promiscuous mode [ 55.283151][ T4895] loop4: detected capacity change from 0 to 164 [ 55.654382][ T4919] device syzkaller0 entered promiscuous mode [ 55.674034][ T4921] device syzkaller0 entered promiscuous mode [ 56.795573][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 56.922944][ T4949] netlink: 284 bytes leftover after parsing attributes in process `syz.1.203'. [ 57.237315][ T4962] binder: 4961:4962 tried to acquire reference to desc 0, got 1 instead [ 58.401414][ T4993] binder: 4992:4993 tried to acquire reference to desc 0, got 1 instead [ 58.830435][ T5018] validate_nla: 13 callbacks suppressed [ 58.830447][ T5018] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 58.864024][ T5018] device bond1 entered promiscuous mode [ 58.867296][ T5021] loop4: detected capacity change from 0 to 512 [ 58.868565][ T5018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.941144][ T5018] bond1: (slave erspan1): making interface the new active one [ 58.944752][ T5018] device erspan1 entered promiscuous mode [ 58.950376][ T5018] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 58.958734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 59.016736][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 59.042112][ T5023] binder: 5022:5023 tried to acquire reference to desc 0, got 1 instead [ 59.146004][ T5027] loop4: detected capacity change from 0 to 512 [ 59.173908][ T5027] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.233: bad orphan inode 15 [ 59.176408][ T5027] EXT4-fs (loop4): Remounting filesystem read-only [ 59.177714][ T5027] ext4_test_bit(bit=14, block=18) = 1 [ 59.178600][ T5027] is_bad_inode(inode)=0 [ 59.179423][ T5027] NEXT_ORPHAN(inode)=1023 [ 59.180110][ T5027] max_ino=32 [ 59.181203][ T5027] i_nlink=0 [ 59.182703][ T5027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.233: bg 0: block 161: padding at end of block bitmap is not set [ 59.185403][ T5027] EXT4-fs (loop4): Remounting filesystem read-only [ 59.186557][ T5027] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 59.188328][ T5027] EXT4-fs (loop4): Remounting filesystem read-only [ 59.189671][ T5027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.224552][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 60.483627][ T5018] bond1 (unregistering): (slave erspan1): Releasing active interface [ 60.485251][ T5018] device erspan1 left promiscuous mode [ 60.523955][ T5018] bond1 (unregistering): Released all slaves [ 60.645696][ T5037] netlink: 'syz.2.235': attribute type 12 has an invalid length. [ 60.646993][ T5037] netlink: 'syz.2.235': attribute type 29 has an invalid length. [ 60.648305][ T5037] netlink: 148 bytes leftover after parsing attributes in process `syz.2.235'. [ 60.649814][ T5037] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 60.653056][ T5037] netlink: 11 bytes leftover after parsing attributes in process `syz.2.235'. [ 60.828494][ T5072] binder: 5071:5072 tried to acquire reference to desc 0, got 1 instead [ 61.001902][ T5086] netlink: 'syz.3.248': attribute type 12 has an invalid length. [ 61.003284][ T5086] netlink: 'syz.3.248': attribute type 29 has an invalid length. [ 61.004639][ T5086] netlink: 148 bytes leftover after parsing attributes in process `syz.3.248'. [ 61.006280][ T5086] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 61.007656][ T5086] netlink: 11 bytes leftover after parsing attributes in process `syz.3.248'. [ 61.994740][ T5082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.999139][ T5082] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.019733][ T5082] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 62.028446][ T5082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.034068][ T5082] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.043626][ T5082] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 62.049491][ T5082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.056345][ T5082] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.061683][ T5082] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 62.067756][ T5082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.072720][ T5082] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.076953][ T5082] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 62.084304][ T5082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 62.088525][ T5082] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 62.095671][ T5082] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 62.329155][ T5124] netlink: 'syz.4.261': attribute type 12 has an invalid length. [ 62.331010][ T5124] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 62.332557][ T5124] netlink: 148 bytes leftover after parsing attributes in process `syz.4.261'. [ 62.335397][ T5124] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 62.347746][ T5124] netlink: 11 bytes leftover after parsing attributes in process `syz.4.261'. [ 62.593279][ T5141] device syzkaller0 entered promiscuous mode [ 62.701994][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 63.901170][ T4333] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.979390][ T5166] netlink: 'syz.4.274': attribute type 12 has an invalid length. [ 63.990758][ T5166] netlink: 'syz.4.274': attribute type 29 has an invalid length. [ 63.992183][ T5166] netlink: 148 bytes leftover after parsing attributes in process `syz.4.274'. [ 63.993571][ T5166] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 63.995023][ T5166] netlink: 11 bytes leftover after parsing attributes in process `syz.4.274'. [ 64.090910][ T4333] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.091684][ T4340] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.091957][ T4333] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.093112][ T4340] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.116007][ T5182] device syzkaller0 entered promiscuous mode [ 64.263221][ T5194] netlink: 'syz.2.287': attribute type 12 has an invalid length. [ 64.265638][ T5194] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 64.267005][ T5194] netlink: 148 bytes leftover after parsing attributes in process `syz.2.287'. [ 64.269059][ T5194] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 64.270380][ T5194] netlink: 11 bytes leftover after parsing attributes in process `syz.2.287'. [ 64.492038][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.930788][ T4340] Bluetooth: hci0: command 0x0406 tx timeout [ 66.170608][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 66.170706][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 66.171688][ T4340] Bluetooth: hci3: command 0x0406 tx timeout [ 66.172826][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 69.612913][ T24] cfg80211: failed to load regulatory.db [ 77.106679][ T5290] netlink: 'syz.4.307': attribute type 12 has an invalid length. [ 77.111573][ T5290] netlink: 'syz.4.307': attribute type 29 has an invalid length. [ 77.112962][ T5290] netlink: 148 bytes leftover after parsing attributes in process `syz.4.307'. [ 77.114495][ T5290] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 77.115793][ T5290] netlink: 11 bytes leftover after parsing attributes in process `syz.4.307'. [ 77.197618][ T5300] process 'syz.4.310' launched './file0' with NULL argv: empty string added [ 77.493225][ T5319] device syzkaller1 entered promiscuous mode [ 77.629369][ T5327] netlink: 'syz.3.323': attribute type 12 has an invalid length. [ 77.635614][ T5327] netlink: 'syz.3.323': attribute type 29 has an invalid length. [ 77.636863][ T5327] netlink: 148 bytes leftover after parsing attributes in process `syz.3.323'. [ 77.638546][ T5327] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 77.639777][ T5327] netlink: 11 bytes leftover after parsing attributes in process `syz.3.323'. [ 77.648105][ T5327] netlink: 'syz.3.323': attribute type 12 has an invalid length. [ 77.649551][ T5327] netlink: 'syz.3.323': attribute type 29 has an invalid length. [ 77.654443][ T5327] netlink: 148 bytes leftover after parsing attributes in process `syz.3.323'. [ 77.655952][ T5327] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 77.657131][ T5327] netlink: 11 bytes leftover after parsing attributes in process `syz.3.323'. [ 78.125895][ T5362] netlink: 'syz.0.337': attribute type 12 has an invalid length. [ 78.128468][ T5362] netlink: 148 bytes leftover after parsing attributes in process `syz.0.337'. [ 78.131463][ T5362] netlink: 11 bytes leftover after parsing attributes in process `syz.0.337'. [ 78.210861][ T5362] netlink: 148 bytes leftover after parsing attributes in process `syz.0.337'. [ 78.210887][ T5362] netlink: 11 bytes leftover after parsing attributes in process `syz.0.337'. [ 78.703066][ T5410] device syzkaller1 entered promiscuous mode [ 79.396674][ T5439] device syzkaller1 entered promiscuous mode [ 79.763944][ T5488] device syzkaller1 entered promiscuous mode [ 80.728051][ T5521] device syzkaller1 entered promiscuous mode [ 82.056205][ T5591] raw_sendmsg: syz.4.435 forgot to set AF_INET. Fix it! [ 82.173135][ T5597] __nla_validate_parse: 28 callbacks suppressed [ 82.173146][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 83.107351][ T5626] validate_nla: 50 callbacks suppressed [ 83.107364][ T5626] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 83.118238][ T5626] device syz_tun entered promiscuous mode [ 83.155372][ T5626] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 83.568503][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 83.598758][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 83.810454][ T5671] device macvlan2 entered promiscuous mode [ 83.834242][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 84.486644][ T5704] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 84.533060][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 84.602583][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 84.724523][ T5728] netlink: 'syz.4.485': attribute type 16 has an invalid length. [ 84.726037][ T5728] netlink: 'syz.4.485': attribute type 3 has an invalid length. [ 84.727238][ T5728] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 84.728371][ T5728] netlink: 112 bytes leftover after parsing attributes in process `syz.4.485'. [ 84.827049][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.489'. [ 84.899876][ T5741] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 85.868665][ T5778] netlink: 'syz.2.505': attribute type 12 has an invalid length. [ 85.870185][ T5778] netlink: 'syz.2.505': attribute type 29 has an invalid length. [ 85.871872][ T5778] netlink: 148 bytes leftover after parsing attributes in process `syz.2.505'. [ 85.873490][ T5778] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 85.874922][ T5778] netlink: 11 bytes leftover after parsing attributes in process `syz.2.505'. [ 85.878331][ T5778] netlink: 'syz.2.505': attribute type 12 has an invalid length. [ 87.204050][ T5832] __nla_validate_parse: 7 callbacks suppressed [ 87.204064][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'. [ 88.320667][ T5842] validate_nla: 12 callbacks suppressed [ 88.320686][ T5842] netlink: 'syz.4.529': attribute type 12 has an invalid length. [ 88.323181][ T5842] netlink: 'syz.4.529': attribute type 29 has an invalid length. [ 88.330344][ T5842] netlink: 148 bytes leftover after parsing attributes in process `syz.4.529'. [ 88.338921][ T5842] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 88.340496][ T5842] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 88.346282][ T5842] netlink: 11 bytes leftover after parsing attributes in process `syz.4.529'. [ 88.361286][ T5845] netlink: 'syz.4.529': attribute type 12 has an invalid length. [ 88.362565][ T5845] netlink: 'syz.4.529': attribute type 29 has an invalid length. [ 88.363710][ T5845] netlink: 148 bytes leftover after parsing attributes in process `syz.4.529'. [ 88.365187][ T5845] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 88.366381][ T5845] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 88.367600][ T5845] netlink: 11 bytes leftover after parsing attributes in process `syz.4.529'. [ 89.500261][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 89.551046][ T5874] netlink: 'syz.4.541': attribute type 12 has an invalid length. [ 89.553024][ T5874] netlink: 'syz.4.541': attribute type 29 has an invalid length. [ 89.554211][ T5874] netlink: 148 bytes leftover after parsing attributes in process `syz.4.541'. [ 89.555636][ T5874] netlink: 11 bytes leftover after parsing attributes in process `syz.4.541'. [ 89.624592][ T5874] netlink: 148 bytes leftover after parsing attributes in process `syz.4.541'. [ 89.626115][ T5874] netlink: 11 bytes leftover after parsing attributes in process `syz.4.541'. [ 101.607820][ T5925] validate_nla: 6 callbacks suppressed [ 101.607830][ T5925] netlink: 'syz.3.553': attribute type 12 has an invalid length. [ 101.610050][ T5925] netlink: 'syz.3.553': attribute type 29 has an invalid length. [ 101.616017][ T5925] netlink: 148 bytes leftover after parsing attributes in process `syz.3.553'. [ 101.617526][ T5925] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 101.618815][ T5925] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 101.625578][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'. [ 101.629104][ T5925] netlink: 11 bytes leftover after parsing attributes in process `syz.3.553'. [ 101.631573][ T5925] netlink: 'syz.3.553': attribute type 12 has an invalid length. [ 101.632810][ T5925] netlink: 'syz.3.553': attribute type 29 has an invalid length. [ 101.634009][ T5925] netlink: 148 bytes leftover after parsing attributes in process `syz.3.553'. [ 101.639149][ T5925] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 101.640423][ T5925] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 101.645932][ T5925] netlink: 11 bytes leftover after parsing attributes in process `syz.3.553'. [ 101.698111][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 101.701983][ T5942] device vlan2 entered promiscuous mode [ 101.702881][ T5942] device batadv0 entered promiscuous mode [ 101.794589][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 101.798741][ T5947] device vlan2 entered promiscuous mode [ 112.677414][ T5978] netlink: 'syz.4.571': attribute type 12 has an invalid length. [ 112.678735][ T5978] netlink: 'syz.4.571': attribute type 29 has an invalid length. [ 112.679916][ T5978] netlink: 148 bytes leftover after parsing attributes in process `syz.4.571'. [ 112.681529][ T5978] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 112.682804][ T5978] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 112.684019][ T5978] netlink: 11 bytes leftover after parsing attributes in process `syz.4.571'. [ 112.685793][ T5983] netlink: 'syz.4.571': attribute type 12 has an invalid length. [ 112.687039][ T5983] netlink: 'syz.4.571': attribute type 29 has an invalid length. [ 112.688227][ T5983] netlink: 148 bytes leftover after parsing attributes in process `syz.4.571'. [ 112.689602][ T5983] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 112.691003][ T5983] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 112.692294][ T5983] netlink: 11 bytes leftover after parsing attributes in process `syz.4.571'. [ 112.777069][ T6001] device syzkaller0 entered promiscuous mode [ 112.959481][ T6022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.585'. [ 113.752873][ T6048] device syzkaller0 entered promiscuous mode [ 113.819599][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 113.863733][ T6057] netlink: 'syz.4.599': attribute type 16 has an invalid length. [ 113.865609][ T6057] netlink: 'syz.4.599': attribute type 3 has an invalid length. [ 113.866782][ T6057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.599'. [ 114.295745][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 114.317173][ T6090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.610'. [ 114.353498][ T6092] device syzkaller0 entered promiscuous mode [ 114.541596][ T6096] tipc: Started in network mode [ 114.542758][ T6096] tipc: Node identity , cluster identity 4711 [ 114.879744][ T6116] device syzkaller0 entered promiscuous mode [ 114.909625][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 117.810548][ C0] sched: RT throttling activated [ 118.376657][ T6207] __nla_validate_parse: 3 callbacks suppressed [ 118.376667][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 118.393238][ T6200] device syzkaller0 entered promiscuous mode [ 118.478538][ T6219] validate_nla: 8 callbacks suppressed [ 118.478548][ T6219] netlink: 'syz.3.653': attribute type 27 has an invalid length. [ 125.930925][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.284371][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 131.918769][ T6277] netlink: 64 bytes leftover after parsing attributes in process `syz.1.668'. [ 133.472178][ T6312] device syzkaller0 entered promiscuous mode [ 133.512540][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 144.670891][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 144.775008][ T6359] netlink: 64 bytes leftover after parsing attributes in process `syz.4.685'. [ 144.812323][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 147.149051][ T6407] tipc: Started in network mode [ 147.149877][ T6407] tipc: Node identity 4, cluster identity 4711 [ 147.161411][ T6407] tipc: Node number set to 4 [ 147.664201][ T6419] random: crng reseeded on system resumption [ 147.769842][ T6445] device syzkaller0 entered promiscuous mode [ 153.610719][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 153.611745][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 153.612683][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 153.613631][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 153.614569][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 159.944997][ T6471] netlink: 64 bytes leftover after parsing attributes in process `syz.4.707'. [ 161.468694][ T6542] device syzkaller0 entered promiscuous mode [ 172.311557][ T6566] netlink: 64 bytes leftover after parsing attributes in process `syz.1.727'. [ 173.586587][ T6605] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[6606] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[6605] [ 173.878985][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 174.043914][ T6626] device syzkaller0 entered promiscuous mode [ 174.064476][ T6634] netlink: 64 bytes leftover after parsing attributes in process `syz.2.743'. [ 174.068621][ T6634] device syzkaller1 entered promiscuous mode [ 185.884909][ T6663] netlink: 'syz.3.751': attribute type 16 has an invalid length. [ 185.886243][ T6663] netlink: 'syz.3.751': attribute type 3 has an invalid length. [ 185.887549][ T6663] netlink: 124 bytes leftover after parsing attributes in process `syz.3.751'. [ 186.007590][ T6675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.755'. [ 186.031624][ T6675] device syzkaller1 entered promiscuous mode [ 187.628076][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.669040][ T6699] netlink: 'syz.4.761': attribute type 12 has an invalid length. [ 187.680781][ T6699] netlink: 'syz.4.761': attribute type 29 has an invalid length. [ 187.682153][ T6699] netlink: 148 bytes leftover after parsing attributes in process `syz.4.761'. [ 187.683726][ T6699] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 187.687831][ T6699] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 187.689073][ T6699] netlink: 11 bytes leftover after parsing attributes in process `syz.4.761'. [ 187.700633][ T6701] netlink: 'syz.0.760': attribute type 12 has an invalid length. [ 187.701914][ T6701] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 187.703180][ T6701] netlink: 148 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.708518][ T6701] netlink: 59 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.714620][ T6701] netlink: 'syz.0.760': attribute type 12 has an invalid length. [ 187.719235][ T6701] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 187.720535][ T6701] netlink: 148 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.738823][ T6701] netlink: 59 bytes leftover after parsing attributes in process `syz.0.760'. [ 188.089015][ T6729] netlink: 64 bytes leftover after parsing attributes in process `syz.4.774'. [ 188.103471][ T6729] device syzkaller1 entered promiscuous mode [ 189.298462][ T6747] netlink: 148 bytes leftover after parsing attributes in process `syz.3.778'. [ 189.425926][ T6753] device syzkaller0 entered promiscuous mode [ 200.989641][ T6785] __nla_validate_parse: 5 callbacks suppressed [ 200.989650][ T6785] netlink: 64 bytes leftover after parsing attributes in process `syz.0.785'. [ 201.134733][ T6799] validate_nla: 8 callbacks suppressed [ 201.134747][ T6799] netlink: 'syz.0.790': attribute type 12 has an invalid length. [ 201.137101][ T6799] netlink: 'syz.0.790': attribute type 29 has an invalid length. [ 201.138448][ T6799] netlink: 148 bytes leftover after parsing attributes in process `syz.0.790'. [ 201.139992][ T6799] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 201.141792][ T6799] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 201.143181][ T6799] netlink: 11 bytes leftover after parsing attributes in process `syz.0.790'. [ 201.144707][ T6801] netlink: 'syz.3.791': attribute type 12 has an invalid length. [ 201.146024][ T6801] netlink: 'syz.3.791': attribute type 29 has an invalid length. [ 201.147387][ T6801] netlink: 148 bytes leftover after parsing attributes in process `syz.3.791'. [ 201.152850][ T6801] netlink: 59 bytes leftover after parsing attributes in process `syz.3.791'. [ 201.154463][ T6803] netlink: 'syz.3.791': attribute type 12 has an invalid length. [ 201.155783][ T6803] netlink: 'syz.3.791': attribute type 29 has an invalid length. [ 201.157570][ T6803] netlink: 148 bytes leftover after parsing attributes in process `syz.3.791'. [ 201.160818][ T6803] netlink: 59 bytes leftover after parsing attributes in process `syz.3.791'. [ 204.313965][ T6826] device syzkaller0 entered promiscuous mode [ 215.318216][ T6840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.801'. [ 215.418955][ T6873] netlink: 'syz.3.804': attribute type 12 has an invalid length. [ 215.424534][ T6873] netlink: 'syz.3.804': attribute type 29 has an invalid length. [ 215.425758][ T6873] netlink: 148 bytes leftover after parsing attributes in process `syz.3.804'. [ 215.432350][ T6873] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 215.433638][ T6873] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 215.434778][ T6873] netlink: 11 bytes leftover after parsing attributes in process `syz.3.804'. [ 215.574359][ T6884] netlink: 'syz.2.809': attribute type 12 has an invalid length. [ 215.575722][ T6884] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 215.577082][ T6884] netlink: 148 bytes leftover after parsing attributes in process `syz.2.809'. [ 215.578590][ T6884] netlink: 59 bytes leftover after parsing attributes in process `syz.2.809'. [ 215.580172][ T6888] netlink: 'syz.2.809': attribute type 12 has an invalid length. [ 215.582839][ T6888] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 215.584271][ T6888] netlink: 148 bytes leftover after parsing attributes in process `syz.2.809'. [ 215.585889][ T6888] netlink: 59 bytes leftover after parsing attributes in process `syz.2.809'. [ 216.723839][ T6904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.815'. [ 216.731586][ T6904] device syzkaller1 entered promiscuous mode [ 217.693379][ T6923] device syzkaller0 entered promiscuous mode [ 217.922766][ T6927] netlink: 'syz.2.820': attribute type 12 has an invalid length. [ 217.924106][ T6927] netlink: 'syz.2.820': attribute type 29 has an invalid length. [ 217.925555][ T6927] netlink: 148 bytes leftover after parsing attributes in process `syz.2.820'. [ 217.927275][ T6927] netlink: 11 bytes leftover after parsing attributes in process `syz.2.820'. [ 218.898650][ T6945] device syzkaller1 entered promiscuous mode [ 220.326274][ T6965] __nla_validate_parse: 5 callbacks suppressed [ 220.326291][ T6965] netlink: 148 bytes leftover after parsing attributes in process `syz.3.833'. [ 220.328960][ T6965] netlink: 59 bytes leftover after parsing attributes in process `syz.3.833'. [ 220.331698][ T6965] netlink: 148 bytes leftover after parsing attributes in process `syz.3.833'. [ 220.333131][ T6965] netlink: 59 bytes leftover after parsing attributes in process `syz.3.833'. [ 220.407476][ T6969] netlink: 148 bytes leftover after parsing attributes in process `syz.1.834'. [ 220.409234][ T6969] netlink: 59 bytes leftover after parsing attributes in process `syz.1.834'. [ 220.418038][ T6968] device syzkaller0 entered promiscuous mode [ 220.567202][ T6980] loop1: detected capacity change from 0 to 16 [ 220.576920][ T6980] erofs: (device loop1): mounted with root inode @ nid 36. [ 221.387371][ T6978] netlink: 64 bytes leftover after parsing attributes in process `syz.0.839'. [ 221.475854][ T6981] device syzkaller1 entered promiscuous mode [ 233.546375][ T7004] validate_nla: 12 callbacks suppressed [ 233.546392][ T7004] netlink: 'syz.2.847': attribute type 12 has an invalid length. [ 233.548544][ T7004] netlink: 'syz.2.847': attribute type 29 has an invalid length. [ 233.549799][ T7004] netlink: 148 bytes leftover after parsing attributes in process `syz.2.847'. [ 233.553181][ T7004] netlink: 59 bytes leftover after parsing attributes in process `syz.2.847'. [ 233.554645][ T7008] netlink: 'syz.2.847': attribute type 12 has an invalid length. [ 233.556024][ T7008] netlink: 'syz.2.847': attribute type 29 has an invalid length. [ 233.557238][ T7008] netlink: 148 bytes leftover after parsing attributes in process `syz.2.847'. [ 233.558681][ T7008] netlink: 59 bytes leftover after parsing attributes in process `syz.2.847'. [ 233.560296][ T7010] netlink: 'syz.4.849': attribute type 12 has an invalid length. [ 233.561692][ T7010] netlink: 'syz.4.849': attribute type 29 has an invalid length. [ 233.562898][ T7010] netlink: 148 bytes leftover after parsing attributes in process `syz.4.849'. [ 233.564431][ T7010] netlink: 59 bytes leftover after parsing attributes in process `syz.4.849'. [ 233.669677][ T7029] netlink: 64 bytes leftover after parsing attributes in process `syz.0.854'. [ 233.673273][ T7029] device syzkaller1 entered promiscuous mode [ 234.604650][ T7042] device syzkaller0 entered promiscuous mode [ 235.063298][ T7060] netlink: 'syz.4.862': attribute type 12 has an invalid length. [ 235.064819][ T7060] netlink: 'syz.4.862': attribute type 29 has an invalid length. [ 235.066181][ T7060] netlink: 148 bytes leftover after parsing attributes in process `syz.4.862'. [ 235.067792][ T7060] netlink: 59 bytes leftover after parsing attributes in process `syz.4.862'. [ 235.995563][ T7074] netlink: 64 bytes leftover after parsing attributes in process `syz.2.866'. [ 236.007406][ T7074] device syzkaller1 entered promiscuous mode [ 237.721304][ T7112] netlink: 'syz.4.875': attribute type 12 has an invalid length. [ 237.722672][ T7112] netlink: 'syz.4.875': attribute type 29 has an invalid length. [ 237.787666][ T7116] device syzkaller0 entered promiscuous mode [ 238.237020][ T7129] device syzkaller1 entered promiscuous mode [ 238.918906][ T7151] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 239.803914][ T7158] netlink: 'syz.0.888': attribute type 12 has an invalid length. [ 239.805214][ T7158] netlink: 'syz.0.888': attribute type 29 has an invalid length. [ 239.819497][ T7158] __nla_validate_parse: 3 callbacks suppressed [ 239.819513][ T7158] netlink: 148 bytes leftover after parsing attributes in process `syz.0.888'. [ 239.824612][ T7158] netlink: 59 bytes leftover after parsing attributes in process `syz.0.888'. [ 239.989281][ T7169] device syzkaller0 entered promiscuous mode [ 240.180933][ T7176] netlink: 64 bytes leftover after parsing attributes in process `syz.3.893'. [ 240.184904][ T7176] device syzkaller1 entered promiscuous mode [ 241.056788][ T7196] netlink: 'syz.1.900': attribute type 12 has an invalid length. [ 241.063569][ T7196] netlink: 'syz.1.900': attribute type 29 has an invalid length. [ 241.064861][ T7196] netlink: 148 bytes leftover after parsing attributes in process `syz.1.900'. [ 241.066193][ T7196] netlink: 59 bytes leftover after parsing attributes in process `syz.1.900'. [ 241.173949][ T7199] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 243.328095][ T7222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.907'. [ 243.331620][ T7222] device syzkaller1 entered promiscuous mode [ 243.377791][ T7224] device syzkaller0 entered promiscuous mode [ 244.646232][ T7247] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 244.792482][ T7249] netlink: 'syz.2.916': attribute type 12 has an invalid length. [ 244.793923][ T7249] netlink: 'syz.2.916': attribute type 29 has an invalid length. [ 244.795196][ T7249] netlink: 148 bytes leftover after parsing attributes in process `syz.2.916'. [ 244.796793][ T7249] netlink: 59 bytes leftover after parsing attributes in process `syz.2.916'. [ 245.185249][ T7268] netlink: 64 bytes leftover after parsing attributes in process `syz.1.921'. [ 245.188849][ T7268] device syzkaller1 entered promiscuous mode [ 245.381734][ T7272] device syzkaller0 entered promiscuous mode [ 246.826050][ T7294] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 246.912656][ T7292] netlink: 'syz.3.927': attribute type 12 has an invalid length. [ 246.914037][ T7292] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 246.915339][ T7292] netlink: 148 bytes leftover after parsing attributes in process `syz.3.927'. [ 246.916839][ T7292] netlink: 59 bytes leftover after parsing attributes in process `syz.3.927'. [ 247.069103][ T7312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.933'. [ 247.082621][ T7312] device syzkaller1 entered promiscuous mode [ 248.154559][ T7321] loop0: detected capacity change from 0 to 512 [ 248.190663][ T7321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.210331][ T7321] EXT4-fs (loop0): 1 truncate cleaned up [ 248.214552][ T7321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 248.812790][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.295660][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 249.534302][ T7334] device syzkaller0 entered promiscuous mode [ 249.638271][ T7337] loop0: detected capacity change from 0 to 16 [ 249.647193][ T7337] erofs: (device loop0): mounted with root inode @ nid 36. [ 250.106298][ T7340] netlink: 'syz.1.940': attribute type 12 has an invalid length. [ 250.107886][ T7340] netlink: 'syz.1.940': attribute type 29 has an invalid length. [ 250.109535][ T7340] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 250.111637][ T7340] netlink: 59 bytes leftover after parsing attributes in process `syz.1.940'. [ 250.180138][ T7344] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 251.356440][ T7371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.948'. [ 251.383968][ T7368] device syzkaller1 entered promiscuous mode [ 251.629831][ T7378] netlink: 'syz.4.952': attribute type 12 has an invalid length. [ 251.632247][ T7378] netlink: 'syz.4.952': attribute type 29 has an invalid length. [ 251.633650][ T7378] netlink: 148 bytes leftover after parsing attributes in process `syz.4.952'. [ 251.635218][ T7378] netlink: 59 bytes leftover after parsing attributes in process `syz.4.952'. [ 251.662144][ T7381] device syzkaller0 entered promiscuous mode [ 251.902579][ T7389] loop0: detected capacity change from 0 to 512 [ 252.058048][ T7389] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 252.847729][ T7389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 252.849352][ T7389] EXT4-fs (loop0): orphan cleanup on readonly fs [ 252.850338][ T7389] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.951: bad orphan inode 3 [ 252.853060][ T7389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.296790][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 253.356250][ T7402] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 253.607133][ T7410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.960'. [ 253.617413][ T7410] device syzkaller1 entered promiscuous mode [ 254.537921][ T7421] netlink: 'syz.0.963': attribute type 12 has an invalid length. [ 254.539275][ T7421] netlink: 'syz.0.963': attribute type 29 has an invalid length. [ 254.540458][ T7421] netlink: 148 bytes leftover after parsing attributes in process `syz.0.963'. [ 254.573273][ T7421] netlink: 59 bytes leftover after parsing attributes in process `syz.0.963'. [ 254.933654][ T7434] device syzkaller0 entered promiscuous mode [ 256.055079][ T7445] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 257.043608][ T7465] netlink: 'syz.4.975': attribute type 12 has an invalid length. [ 257.044871][ T7465] netlink: 'syz.4.975': attribute type 29 has an invalid length. [ 257.046012][ T7465] netlink: 148 bytes leftover after parsing attributes in process `syz.4.975'. [ 257.047407][ T7465] netlink: 59 bytes leftover after parsing attributes in process `syz.4.975'. [ 258.102850][ T7475] loop1: detected capacity change from 0 to 512 [ 258.125073][ T7475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.308738][ T7475] EXT4-fs (loop1): 1 truncate cleaned up [ 258.309761][ T7475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 258.388417][ T7479] device syzkaller0 entered promiscuous mode [ 258.449049][ T7484] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 258.966755][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 258.987992][ T7501] netlink: 'syz.4.987': attribute type 12 has an invalid length. [ 258.989395][ T7501] netlink: 'syz.4.987': attribute type 29 has an invalid length. [ 259.022550][ T7501] netlink: 148 bytes leftover after parsing attributes in process `syz.4.987'. [ 259.024149][ T7501] netlink: 59 bytes leftover after parsing attributes in process `syz.4.987'. [ 260.703895][ T7533] device syzkaller0 entered promiscuous mode [ 260.753637][ T7531] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 262.507362][ T7563] netlink: 'syz.4.1007': attribute type 12 has an invalid length. [ 262.508697][ T7563] netlink: 'syz.4.1007': attribute type 29 has an invalid length. [ 262.510008][ T7563] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1007'. [ 262.536066][ T7563] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1007'. [ 262.800505][ T7570] device syzkaller0 entered promiscuous mode [ 262.931485][ T7577] qfq: no options [ 262.932734][ T7577] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 264.053870][ T7598] netlink: 'syz.0.1019': attribute type 12 has an invalid length. [ 264.055328][ T7598] netlink: 'syz.0.1019': attribute type 29 has an invalid length. [ 264.056758][ T7598] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1019'. [ 264.058281][ T7598] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1019'. [ 264.335383][ T7614] qfq: no options [ 264.336731][ T7614] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 264.416323][ T7620] device syzkaller0 entered promiscuous mode [ 265.124687][ T7646] netlink: 'syz.2.1034': attribute type 12 has an invalid length. [ 265.126277][ T7646] netlink: 'syz.2.1034': attribute type 29 has an invalid length. [ 265.127645][ T7646] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1034'. [ 265.129338][ T7646] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1034'. [ 265.620101][ T7659] qfq: no options [ 265.621314][ T7659] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 265.776269][ T7670] device syzkaller0 entered promiscuous mode [ 267.700164][ T7682] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1047'. [ 268.347325][ T7700] device syzkaller0 entered promiscuous mode [ 268.854532][ T7715] device macvlan2 entered promiscuous mode [ 269.042736][ T7723] tipc: Started in network mode [ 269.043744][ T7723] tipc: Node identity 4, cluster identity 4711 [ 269.044797][ T7723] tipc: Node number set to 4 [ 269.115765][ T7728] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1063'. [ 270.977401][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 272.569079][ T7765] device syzkaller0 entered promiscuous mode [ 272.625301][ T7768] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1074'. [ 272.841745][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 273.787298][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1081'. [ 273.815943][ T7787] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 273.900420][ T7790] netlink: 'syz.2.1083': attribute type 12 has an invalid length. [ 273.902653][ T7790] netlink: 'syz.2.1083': attribute type 29 has an invalid length. [ 273.903967][ T7790] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1083'. [ 273.905513][ T7790] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 273.935452][ T7790] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1083'. [ 274.117233][ T7804] loop0: detected capacity change from 0 to 16 [ 274.153411][ T7804] erofs: (device loop0): mounted with root inode @ nid 36. [ 274.475391][ T7813] capability: warning: `syz.1.1088' uses 32-bit capabilities (legacy support in use) [ 274.488661][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 274.538071][ T7819] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1091'. [ 274.555997][ T7817] device syzkaller0 entered promiscuous mode [ 274.613570][ T7826] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 274.615050][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'. [ 274.620653][ T7824] IPVS: Unknown mcast interface: vcan0 [ 274.783298][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 276.757205][ T7871] device syzkaller1 entered promiscuous mode [ 276.838922][ T7873] loop0: detected capacity change from 0 to 512 [ 276.901093][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1107'. [ 276.902604][ T7875] IPVS: Unknown mcast interface: vcan0 [ 276.944210][ T7881] xt_hashlimit: size too large, truncated to 1048576 [ 276.984596][ T7884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1110'. [ 279.095079][ T7914] __nla_validate_parse: 1 callbacks suppressed [ 279.095091][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'. [ 279.204821][ T7914] IPVS: Unknown mcast interface: vcan0 [ 279.281208][ T7926] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1123'. [ 279.285492][ T7924] device dummy0 entered promiscuous mode [ 279.313801][ T7928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1124'. [ 279.371874][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 279.428277][ T7939] netlink: 'syz.0.1130': attribute type 12 has an invalid length. [ 279.435407][ T7939] netlink: 'syz.0.1130': attribute type 29 has an invalid length. [ 279.436729][ T7939] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1130'. [ 279.438291][ T7939] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 279.439577][ T7939] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 279.451410][ T7939] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1130'. [ 279.458215][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 279.459752][ T7943] IPVS: Unknown mcast interface: vcan0 [ 279.674737][ T7964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1138'. [ 279.688996][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 279.728978][ T27] audit: type=1326 audit(535.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.740745][ T27] audit: type=1326 audit(535.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.744630][ T27] audit: type=1326 audit(535.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.748470][ T27] audit: type=1326 audit(535.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.776615][ T27] audit: type=1326 audit(535.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=273 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.785359][ T7973] netlink: 'syz.2.1143': attribute type 12 has an invalid length. [ 279.786647][ T27] audit: type=1326 audit(535.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.790369][ T7973] netlink: 'syz.2.1143': attribute type 29 has an invalid length. [ 279.794418][ T7973] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1143'. [ 279.796022][ T27] audit: type=1326 audit(535.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.799806][ T7973] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 279.807311][ T7973] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 279.810338][ T27] audit: type=1326 audit(535.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.819954][ T27] audit: type=1326 audit(535.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.0.1141" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffadf77aa8 code=0x7ffc0000 [ 279.821214][ T7977] device vlan2 entered promiscuous mode [ 279.831235][ T7977] device batadv0 entered promiscuous mode [ 279.835385][ T7975] IPVS: Unknown mcast interface: vcan0 [ 279.866370][ T7981] netlink: 'syz.0.1148': attribute type 12 has an invalid length. [ 279.867824][ T7981] netlink: 'syz.0.1148': attribute type 29 has an invalid length. [ 280.225556][ T7996] loop0: detected capacity change from 0 to 128 [ 280.539999][ T8015] device vlan2 entered promiscuous mode [ 280.907041][ T8041] IPVS: Unknown mcast interface: vcan0 [ 281.031957][ T8038] binder: BINDER_SET_CONTEXT_MGR already set [ 281.033303][ T8038] binder: 8037:8038 ioctl 4018620d 20000080 returned -16 [ 282.193222][ T8151] device syzkaller0 entered promiscuous mode [ 283.373521][ T8224] loop0: detected capacity change from 0 to 512 [ 283.620070][ T8224] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 283.769223][ T8224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 283.773197][ T8224] EXT4-fs (loop0): orphan cleanup on readonly fs [ 283.774242][ T8224] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1219: bad orphan inode 3 [ 283.779016][ T8224] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.797524][ T8224] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1219: dx entry: limit 0 != root limit 125 [ 283.799482][ T8224] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1219: Corrupt directory, running e2fsck is recommended [ 284.329830][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 284.389499][ T8238] __nla_validate_parse: 41 callbacks suppressed [ 284.389510][ T8238] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1224'. [ 284.393802][ T8238] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1224'. [ 284.395799][ T8238] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1224'. [ 284.397338][ T8238] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1224'. [ 284.503220][ T8257] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1231'. [ 284.576623][ T8266] loop0: detected capacity change from 0 to 512 [ 284.596253][ T8266] EXT4-fs: Ignoring removed bh option [ 284.952609][ T8266] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1233: corrupted in-inode xattr [ 284.955564][ T8266] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1233: couldn't read orphan inode 15 (err -117) [ 284.960657][ T8266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.993402][ T8266] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1233: Unrecognised inode hash code 4 [ 285.008023][ T8266] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1233: Corrupt directory, running e2fsck is recommended [ 285.042676][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 285.584992][ T8287] validate_nla: 46 callbacks suppressed [ 285.585005][ T8287] netlink: 'syz.2.1239': attribute type 12 has an invalid length. [ 285.587387][ T8287] netlink: 'syz.2.1239': attribute type 29 has an invalid length. [ 285.588712][ T8287] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1239'. [ 285.590359][ T8287] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1239'. [ 285.596070][ T8287] netlink: 'syz.2.1239': attribute type 12 has an invalid length. [ 285.598520][ T8287] netlink: 'syz.2.1239': attribute type 29 has an invalid length. [ 285.599899][ T8287] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1239'. [ 285.603452][ T8287] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1239'. [ 285.650600][ T8293] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1242'. [ 286.338716][ T8321] device vlan2 entered promiscuous mode [ 286.339879][ T8321] device batadv0 entered promiscuous mode [ 286.348091][ T8319] qfq: no options [ 286.442530][ T8325] netlink: 'syz.3.1251': attribute type 12 has an invalid length. [ 286.445039][ T8325] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 286.447940][ T8328] netlink: 'syz.3.1251': attribute type 12 has an invalid length. [ 286.449591][ T8328] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 287.099391][ T8362] netlink: 'syz.3.1263': attribute type 12 has an invalid length. [ 287.106229][ T8362] netlink: 'syz.3.1263': attribute type 29 has an invalid length. [ 287.134300][ T8366] qfq: no options [ 287.779002][ T8401] loop0: detected capacity change from 0 to 512 [ 287.809884][ T8405] qfq: no options [ 287.852039][ T8401] ext4: Unknown parameter 'noacl' [ 289.814295][ T8452] __nla_validate_parse: 22 callbacks suppressed [ 289.814309][ T8452] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1301'. [ 289.817093][ T8452] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1301'. [ 289.819226][ T8452] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1301'. [ 289.821099][ T8452] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1301'. [ 289.847617][ T8455] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1302'. [ 291.038098][ T8484] validate_nla: 25 callbacks suppressed [ 291.038108][ T8484] netlink: 'syz.0.1313': attribute type 12 has an invalid length. [ 291.066709][ T8484] netlink: 'syz.0.1313': attribute type 29 has an invalid length. [ 291.069613][ T8484] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1313'. [ 291.077376][ T8484] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 291.085539][ T8484] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 291.086895][ T8484] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1313'. [ 291.106359][ T8488] netlink: 'syz.0.1313': attribute type 12 has an invalid length. [ 291.121742][ T8488] netlink: 'syz.0.1313': attribute type 29 has an invalid length. [ 291.123196][ T8488] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1313'. [ 291.140409][ T8488] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 291.150044][ T8488] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 291.161633][ T8488] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1313'. [ 293.761099][ T8533] netlink: 'syz.2.1331': attribute type 12 has an invalid length. [ 293.762498][ T8533] netlink: 'syz.2.1331': attribute type 29 has an invalid length. [ 293.767919][ T8533] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1331'. [ 293.794968][ T8539] loop0: detected capacity change from 0 to 512 [ 293.797436][ T8539] EXT4-fs: Ignoring removed bh option [ 293.820272][ T8539] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1333: corrupted in-inode xattr [ 293.824101][ T8539] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1333: couldn't read orphan inode 15 (err -117) [ 293.831426][ T8539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 293.879674][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 295.906528][ T8582] __nla_validate_parse: 3 callbacks suppressed [ 295.906543][ T8582] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1346'. [ 295.909146][ T8582] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1346'. [ 295.917507][ T8582] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1346'. [ 295.920251][ T8582] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1346'. [ 296.225390][ T8603] validate_nla: 15 callbacks suppressed [ 296.225401][ T8603] netlink: 'syz.4.1358': attribute type 12 has an invalid length. [ 296.227709][ T8603] netlink: 'syz.4.1358': attribute type 29 has an invalid length. [ 296.229015][ T8603] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1358'. [ 296.230465][ T8603] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 296.232143][ T8603] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 296.233490][ T8603] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1358'. [ 296.236176][ T8603] netlink: 'syz.4.1358': attribute type 12 has an invalid length. [ 296.237481][ T8603] netlink: 'syz.4.1358': attribute type 29 has an invalid length. [ 296.238750][ T8603] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1358'. [ 296.240212][ T8603] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 296.248429][ T8603] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 296.251403][ T8603] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1358'. [ 299.436356][ T8644] netlink: 'syz.3.1370': attribute type 12 has an invalid length. [ 299.438540][ T8644] netlink: 'syz.3.1370': attribute type 29 has an invalid length. [ 299.439981][ T8644] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1370'. [ 299.468712][ T8644] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1370'. [ 302.670102][ T8693] validate_nla: 6 callbacks suppressed [ 302.670112][ T8693] netlink: 'syz.0.1385': attribute type 12 has an invalid length. [ 302.681822][ T8693] netlink: 'syz.0.1385': attribute type 29 has an invalid length. [ 302.683188][ T8693] __nla_validate_parse: 2 callbacks suppressed [ 302.683200][ T8693] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1385'. [ 302.695981][ T8693] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 302.697412][ T8693] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 302.702052][ T8693] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1385'. [ 302.715334][ T8693] netlink: 'syz.0.1385': attribute type 12 has an invalid length. [ 302.717951][ T8693] netlink: 'syz.0.1385': attribute type 29 has an invalid length. [ 302.720992][ T8693] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1385'. [ 302.724819][ T8693] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 302.727376][ T8693] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 302.733195][ T8693] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1385'. [ 304.316372][ T8725] capability: warning: `syz.0.1396' uses deprecated v2 capabilities in a way that may be insecure [ 304.408476][ T8729] netlink: 'syz.0.1398': attribute type 12 has an invalid length. [ 304.409883][ T8729] netlink: 'syz.0.1398': attribute type 29 has an invalid length. [ 304.431145][ T8729] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1398'. [ 304.432711][ T8729] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1398'. [ 304.440039][ T8729] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1398'. [ 304.452152][ T8729] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1398'. [ 305.897765][ T8740] loop1: detected capacity change from 0 to 2048 [ 306.153562][ T8758] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1411'. [ 306.155373][ T8758] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1411'. [ 306.473193][ T8773] loop1: detected capacity change from 0 to 8192 [ 307.753022][ T8794] validate_nla: 14 callbacks suppressed [ 307.753039][ T8794] netlink: 'syz.2.1424': attribute type 12 has an invalid length. [ 307.763302][ T8794] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 307.764631][ T8794] __nla_validate_parse: 3 callbacks suppressed [ 307.764643][ T8794] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1424'. [ 307.776398][ T8794] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 307.787881][ T8794] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 307.789206][ T8794] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1424'. [ 307.818026][ T8795] netlink: 'syz.2.1424': attribute type 12 has an invalid length. [ 307.819396][ T8795] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 307.833247][ T8795] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1424'. [ 307.834788][ T8795] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 307.836142][ T8795] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 307.837379][ T8795] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1424'. [ 308.128461][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 308.301010][ T8834] 9pnet_fd: Insufficient options for proto=fd [ 308.602364][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 308.703234][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1459'. [ 308.773300][ T8878] loop1: detected capacity change from 0 to 512 [ 308.782561][ T8878] EXT4-fs: Ignoring removed bh option [ 308.800531][ T8878] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 308.811677][ T8878] EXT4-fs (loop1): 1 truncate cleaned up [ 308.812677][ T8878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 308.817782][ T8878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1463: bg 0: block 465: padding at end of block bitmap is not set [ 308.839867][ T8878] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 308.852558][ T8878] EXT4-fs (loop1): This should not happen!! Data will be lost [ 308.852558][ T8878] [ 308.856410][ T8878] EXT4-fs (loop1): Total free blocks count 0 [ 308.858584][ T8878] EXT4-fs (loop1): Free/Dirty block details [ 308.863947][ T8878] EXT4-fs (loop1): free_blocks=0 [ 308.867082][ T8878] EXT4-fs (loop1): dirty_blocks=2 [ 308.867954][ T8878] EXT4-fs (loop1): Block reservation details [ 308.873828][ T8878] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 308.916419][ T516] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 308.921735][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 309.116198][ T8909] loop1: detected capacity change from 0 to 512 [ 309.121942][ T8909] EXT4-fs: Ignoring removed bh option [ 309.134500][ T8909] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1477: corrupted in-inode xattr [ 309.141723][ T8909] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1477: couldn't read orphan inode 15 (err -117) [ 309.161959][ T8909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 309.189350][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 309.208098][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 309.231777][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 309.675128][ T8968] 9pnet_fd: Insufficient options for proto=fd [ 309.679412][ T8970] loop0: detected capacity change from 0 to 512 [ 309.686044][ T8970] EXT4-fs: Ignoring removed bh option [ 309.706429][ T8970] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1506: corrupted in-inode xattr [ 309.710078][ T8970] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1506: couldn't read orphan inode 15 (err -117) [ 309.723688][ T8970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.794112][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 310.253438][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.725562][ T8998] 9pnet_fd: Insufficient options for proto=fd [ 311.149309][ T9042] 9pnet_fd: Insufficient options for proto=fd [ 312.519933][ T9086] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 312.545103][ T9086] qfq: no options [ 313.824505][ T9138] 9pnet_fd: Insufficient options for proto=fd [ 313.864208][ T9139] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 313.877190][ T9139] qfq: no options [ 315.108803][ T9186] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 315.133414][ T9186] qfq: no options [ 315.348909][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.350774][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.427574][ T9274] __nla_validate_parse: 6 callbacks suppressed [ 317.427589][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1638'. [ 317.663786][ T9298] xt_hashlimit: size too large, truncated to 1048576 [ 317.699988][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 317.701634][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 318.030861][ T9328] netlink: 'syz.0.1660': attribute type 12 has an invalid length. [ 318.032190][ T9328] netlink: 'syz.0.1660': attribute type 29 has an invalid length. [ 318.033516][ T9328] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1660'. [ 318.744386][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.748959][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.802234][ T9361] netlink: 'syz.4.1672': attribute type 12 has an invalid length. [ 318.803655][ T9361] netlink: 'syz.4.1672': attribute type 29 has an invalid length. [ 318.807101][ T9361] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1672'. [ 318.833721][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1673'. [ 318.835225][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 318.955112][ T27] audit: type=1326 audit(574.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.1.1671" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f577aa8 code=0x0 [ 318.972690][ T9372] device syzkaller0 entered promiscuous mode [ 319.215072][ T9391] netlink: 'syz.0.1683': attribute type 12 has an invalid length. [ 319.221250][ T9391] netlink: 'syz.0.1683': attribute type 29 has an invalid length. [ 319.222549][ T9391] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1683'. [ 320.040218][ T9395] device geneve2 entered promiscuous mode [ 320.061108][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 320.666856][ T9422] netlink: 'syz.4.1694': attribute type 12 has an invalid length. [ 320.668342][ T9422] netlink: 'syz.4.1694': attribute type 29 has an invalid length. [ 320.669778][ T9422] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1694'. [ 321.457580][ T9417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.459390][ T9417] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.460414][ T9417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.462303][ T9417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.464057][ T9417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.514929][ T9444] netlink: 'syz.2.1700': attribute type 12 has an invalid length. [ 321.516157][ T9444] netlink: 'syz.2.1700': attribute type 29 has an invalid length. [ 321.517886][ T9444] netlink: 'syz.2.1700': attribute type 12 has an invalid length. [ 321.519329][ T9444] netlink: 'syz.2.1700': attribute type 29 has an invalid length. [ 321.558596][ T9446] xt_hashlimit: size too large, truncated to 1048576 [ 321.669176][ T9456] device geneve2 entered promiscuous mode [ 322.699007][ T9471] netlink: 'syz.3.1706': attribute type 12 has an invalid length. [ 322.702921][ T9471] netlink: 'syz.3.1706': attribute type 29 has an invalid length. [ 322.704124][ T9471] __nla_validate_parse: 3 callbacks suppressed [ 322.704136][ T9471] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1706'. [ 322.730761][ T4333] Bluetooth: hci0: command 0x0c1a tx timeout [ 323.633588][ T4333] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.633757][ T4340] Bluetooth: hci3: command 0x0c1a tx timeout [ 323.633776][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.636978][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 323.836684][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 323.837311][ T9484] IPv6: sit2: Disabled Multicast RS [ 323.858783][ T9486] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1711'. [ 323.861634][ T9486] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1711'. [ 323.888360][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1712'. [ 323.908574][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.910014][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.979339][ T9499] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1717'. [ 324.146138][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.148689][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.129862][ T9513] validate_nla: 6 callbacks suppressed [ 325.129873][ T9513] netlink: 'syz.4.1722': attribute type 12 has an invalid length. [ 325.137573][ T9513] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 325.143482][ T9513] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1722'. [ 325.145606][ T9513] netlink: 'syz.4.1722': attribute type 12 has an invalid length. [ 325.146943][ T9513] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 325.158523][ T9513] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1722'. [ 325.395260][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 325.475999][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1724'. [ 325.568596][ T9524] netlink: 'syz.3.1728': attribute type 12 has an invalid length. [ 325.569958][ T9524] netlink: 'syz.3.1728': attribute type 29 has an invalid length. [ 325.944945][ T9537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.947637][ T9537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.993881][ T9539] netlink: 'syz.3.1733': attribute type 12 has an invalid length. [ 325.995320][ T9539] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 325.997257][ T9539] netlink: 'syz.3.1733': attribute type 12 has an invalid length. [ 325.998743][ T9539] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 326.020799][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 326.022530][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 326.956389][ T9557] xt_hashlimit: size too large, truncated to 1048576 [ 327.333953][ T4377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 327.540588][ T4377] usb 1-1: Using ep0 maxpacket: 16 [ 327.545330][ T4377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 327.548231][ T4377] usb 1-1: config 5 has an invalid interface number: 41 but max is 0 [ 327.549657][ T4377] usb 1-1: config 5 has no interface number 0 [ 327.550702][ T4377] usb 1-1: config 5 interface 41 has no altsetting 0 [ 327.553359][ T4377] usb 1-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=18.80 [ 327.554918][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.556178][ T4377] usb 1-1: Product: syz [ 327.556851][ T4377] usb 1-1: Manufacturer: syz [ 327.557725][ T4377] usb 1-1: SerialNumber: syz [ 327.780198][ T4377] usb 1-1: bad CDC descriptors [ 327.784848][ T4377] usb 1-1: bad CDC descriptors [ 327.786408][ T4377] cdc_acm 1-1:5.41: Zero length descriptor references [ 327.787626][ T4377] cdc_acm: probe of 1-1:5.41 failed with error -22 [ 327.794005][ T4377] usb 1-1: USB disconnect, device number 2 [ 328.590626][ T4378] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 328.790638][ T4378] usb 1-1: Using ep0 maxpacket: 32 [ 328.794152][ T4378] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 328.795571][ T4378] usb 1-1: config 0 has no interface number 0 [ 328.796630][ T4378] usb 1-1: config 0 interface 184 has no altsetting 0 [ 328.799663][ T4378] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 328.801121][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.802327][ T4378] usb 1-1: Product: syz [ 328.803004][ T4378] usb 1-1: Manufacturer: syz [ 328.803679][ T4378] usb 1-1: SerialNumber: syz [ 328.806102][ T4378] usb 1-1: config 0 descriptor?? [ 328.809197][ T4378] smsc75xx v1.0.0 [ 330.027635][ T4378] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 330.029446][ T4378] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 330.031288][ T4378] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 330.033038][ T4378] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 330.034512][ T4378] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 330.036408][ T4378] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 330.038284][ T4378] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 330.044659][ T4378] usb 1-1: USB disconnect, device number 3 [ 338.110166][ T9576] __nla_validate_parse: 7 callbacks suppressed [ 338.110181][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 338.162531][ T9585] validate_nla: 6 callbacks suppressed [ 338.162548][ T9585] netlink: 'syz.0.1750': attribute type 12 has an invalid length. [ 338.164867][ T9585] netlink: 'syz.0.1750': attribute type 29 has an invalid length. [ 338.166102][ T9585] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1750'. [ 338.314020][ T9602] netlink: 'syz.1.1757': attribute type 12 has an invalid length. [ 338.315312][ T9602] netlink: 'syz.1.1757': attribute type 29 has an invalid length. [ 338.316677][ T9602] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1757'. [ 338.329476][ T9607] netlink: 'syz.1.1757': attribute type 12 has an invalid length. [ 338.331237][ T9607] netlink: 'syz.1.1757': attribute type 29 has an invalid length. [ 338.332483][ T9607] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1757'. [ 338.344694][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 339.128867][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.149117][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.159267][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.183591][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.264962][ T9625] netlink: 'syz.4.1764': attribute type 12 has an invalid length. [ 339.272097][ T9625] netlink: 'syz.4.1764': attribute type 29 has an invalid length. [ 339.273484][ T9625] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1764'. [ 339.329565][ T9631] xt_hashlimit: size too large, truncated to 1048576 [ 339.684865][ T9644] device syzkaller0 entered promiscuous mode [ 339.772762][ T9646] netlink: 'syz.3.1773': attribute type 12 has an invalid length. [ 339.774356][ T9646] netlink: 'syz.3.1773': attribute type 29 has an invalid length. [ 339.775679][ T9646] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1773'. [ 339.800643][ T4378] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 339.873223][ T9646] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1773'. [ 339.982500][ T4378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.984500][ T4378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.986145][ T4378] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 339.987665][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.003295][ T4378] usb 1-1: config 0 descriptor?? [ 340.006508][ T9652] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1776'. [ 341.187388][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1783'. [ 341.239177][ T4378] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 341.263526][ T9687] device syzkaller0 entered promiscuous mode [ 341.429188][ T4378] cp2112 0003:10C4:EA90.0001: error requesting version [ 341.438525][ T4378] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 341.448605][ T4378] usb 1-1: USB disconnect, device number 4 [ 341.487817][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.491948][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.518269][ T9706] fido_id[9706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 341.594548][ T9711] device syzkaller0 entered promiscuous mode [ 342.814805][ T9742] xt_hashlimit: size too large, truncated to 1048576 [ 342.821331][ T9741] device syzkaller0 entered promiscuous mode [ 343.008425][ T9755] device syzkaller0 entered promiscuous mode [ 343.278560][ T9775] __nla_validate_parse: 11 callbacks suppressed [ 343.278572][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1817'. [ 344.245715][ T9787] device syzkaller0 entered promiscuous mode [ 344.294562][ T9789] validate_nla: 22 callbacks suppressed [ 344.294573][ T9789] netlink: 'syz.1.1823': attribute type 12 has an invalid length. [ 344.300281][ T9789] netlink: 'syz.1.1823': attribute type 29 has an invalid length. [ 344.310441][ T9789] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1823'. [ 344.452824][ T9789] netlink: 'syz.1.1823': attribute type 12 has an invalid length. [ 344.454225][ T9789] netlink: 'syz.1.1823': attribute type 29 has an invalid length. [ 344.455745][ T9789] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1823'. [ 344.527960][ T9791] netlink: 'syz.1.1824': attribute type 12 has an invalid length. [ 344.529363][ T9791] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 344.550642][ T9791] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1824'. [ 344.560196][ T9793] device syzkaller0 entered promiscuous mode [ 355.333716][ T9819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1830'. [ 355.358056][ T9821] binder: 9820:9821 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 355.359671][ T9821] binder: 9820:9821 BC_FREE_BUFFER u0000000000000000 no match [ 355.361566][ T9821] binder: 9820:9821 got reply transaction with no transaction stack [ 355.362947][ T9821] binder: 9820:9821 transaction reply to 0:0 failed 30/29201/-71, size 80-0 line 2946 [ 355.429596][ T9830] device syzkaller0 entered promiscuous mode [ 355.454241][ T9828] netlink: 'syz.4.1834': attribute type 12 has an invalid length. [ 355.455657][ T9828] netlink: 'syz.4.1834': attribute type 29 has an invalid length. [ 355.456812][ T9828] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1834'. [ 355.458690][ T9828] netlink: 'syz.4.1834': attribute type 12 has an invalid length. [ 355.459887][ T9828] netlink: 'syz.4.1834': attribute type 29 has an invalid length. [ 355.461704][ T9828] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1834'. [ 355.480190][ T9836] netlink: 'syz.3.1837': attribute type 12 has an invalid length. [ 355.482186][ T9836] netlink: 'syz.3.1837': attribute type 29 has an invalid length. [ 355.483656][ T9836] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1837'. [ 355.501996][ T9834] xt_hashlimit: size too large, truncated to 1048576 [ 355.531873][ T9839] input: syz1 as /devices/virtual/input/input3 [ 356.688197][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1841'. [ 356.784655][ T9859] device syzkaller0 entered promiscuous mode [ 367.597518][ T9873] netlink: 'syz.0.1849': attribute type 12 has an invalid length. [ 367.598865][ T9873] netlink: 'syz.0.1849': attribute type 29 has an invalid length. [ 367.600141][ T9873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1849'. [ 367.608074][ T9874] netlink: 'syz.0.1849': attribute type 12 has an invalid length. [ 367.609416][ T9874] netlink: 'syz.0.1849': attribute type 29 has an invalid length. [ 367.610805][ T9874] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1849'. [ 367.615781][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.620880][ T9884] netlink: 'syz.2.1850': attribute type 12 has an invalid length. [ 367.621314][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.622211][ T9884] netlink: 'syz.2.1850': attribute type 29 has an invalid length. [ 367.624690][ T9884] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1850'. [ 367.666269][ T9891] device syzkaller0 entered promiscuous mode [ 367.671379][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.673963][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.918325][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.919959][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.923824][ T27] audit: type=1326 audit(623.900:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9908 comm="syz.2.1861" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffba377aa8 code=0x0 [ 367.950664][ T4379] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 368.144093][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.145964][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.149418][ T4379] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 368.151185][ T4379] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 368.152584][ T4379] usb 1-1: Manufacturer: syz [ 368.180149][ T4379] usb 1-1: config 0 descriptor?? [ 369.553988][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.557022][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.922360][ T4379] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 369.924061][ T4379] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 369.928674][ T4379] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 369.931181][ T4379] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 369.932518][ T4379] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 369.936011][ T4379] usb 1-1: USB disconnect, device number 5 [ 370.007588][ T9934] device syzkaller0 entered promiscuous mode [ 370.609386][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 370.950626][ T4379] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 370.976139][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.977924][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.152008][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.154041][ T4379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.155526][ T4379] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.157880][ T4379] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.161695][ T4379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.169619][ T4379] usb 1-1: config 0 descriptor?? [ 371.295158][ T9962] loop1: detected capacity change from 0 to 128 [ 371.296867][ T9962] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 371.315064][ T9962] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 371.327004][ T9964] device syzkaller0 entered promiscuous mode [ 371.531477][ T9966] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 371.533226][ T9966] FAT-fs (loop1): Filesystem has been set read-only [ 371.701024][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.721692][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.723771][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.725565][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.726956][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.728874][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.734391][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.738826][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.742248][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.746459][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.749779][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.751615][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.752997][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.754194][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.755439][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.756770][ T4379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 371.758846][ T4379] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 371.774308][ T4379] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 371.826421][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.827933][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.309979][ T3900] usb 1-1: USB disconnect, device number 6 [ 372.425945][ T9989] device syzkaller0 entered promiscuous mode [ 372.586767][ T9996] device syzkaller0 entered promiscuous mode [ 372.589647][T10001] IPv6: sit3: Disabled Multicast RS [ 372.984203][T10032] loop1: detected capacity change from 0 to 512 [ 373.081021][T10032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 374.105007][T10032] EXT4-fs (loop1): 1 truncate cleaned up [ 374.106104][T10032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 374.187114][T10044] device syzkaller0 entered promiscuous mode [ 374.308833][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 374.327472][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 374.437972][T10053] loop1: detected capacity change from 0 to 1024 [ 374.551673][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 374.573905][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.575436][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.995337][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.012820][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.653748][T10050] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.655318][T10050] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.656923][T10050] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.658340][T10050] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.725977][T10061] netlink: 'syz.2.1921': attribute type 12 has an invalid length. [ 375.727425][T10061] netlink: 'syz.2.1921': attribute type 29 has an invalid length. [ 375.728718][T10061] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1921'. [ 375.730289][T10065] netlink: 'syz.2.1921': attribute type 12 has an invalid length. [ 375.731655][T10065] netlink: 'syz.2.1921': attribute type 29 has an invalid length. [ 375.732959][T10065] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1921'. [ 375.740381][T10072] IPv6: sit3: Disabled Multicast RS [ 375.744271][T10082] device syzkaller0 entered promiscuous mode [ 375.746429][T10091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1929'. [ 375.789840][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 375.803874][T10095] device syzkaller0 entered promiscuous mode [ 376.049098][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.051773][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.956018][T10125] netlink: 'syz.0.1941': attribute type 12 has an invalid length. [ 376.967458][T10125] netlink: 'syz.0.1941': attribute type 29 has an invalid length. [ 376.968751][T10125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1941'. [ 376.983331][T10125] netlink: 'syz.0.1941': attribute type 12 has an invalid length. [ 376.984842][T10125] netlink: 'syz.0.1941': attribute type 29 has an invalid length. [ 376.986169][T10125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1941'. [ 377.128231][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 377.132073][T10130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1943'. [ 377.170193][T10133] device syzkaller0 entered promiscuous mode [ 377.229686][T10140] Bluetooth: MGMT ver 1.22 [ 377.352703][T10147] netlink: 'syz.4.1952': attribute type 12 has an invalid length. [ 377.354109][T10147] netlink: 'syz.4.1952': attribute type 29 has an invalid length. [ 377.447723][T10155] tipc: Started in network mode [ 377.448478][T10155] tipc: Node identity 4, cluster identity 4711 [ 377.449400][T10155] tipc: Node number set to 4 [ 377.481313][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.489731][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.510442][T10162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.516180][T10162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.024110][T10181] device syzkaller0 entered promiscuous mode [ 379.203763][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.207947][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.300699][ T4333] Bluetooth: hci0: command 0x0c20 tx timeout [ 379.427045][T10204] __nla_validate_parse: 7 callbacks suppressed [ 379.427068][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 380.619467][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 380.672361][T10207] device bond1 entered promiscuous mode [ 380.675541][T10207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.717166][T10207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.718449][T10207] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 380.720026][T10207] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 380.729605][T10207] bond1: (slave gre1): making interface the new active one [ 380.731599][T10207] device gre1 entered promiscuous mode [ 380.733220][T10207] ------------[ cut here ]------------ [ 380.734066][T10207] kernel BUG at net/core/skbuff.c:1840! [ 380.735105][T10207] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 380.736274][T10207] Modules linked in: [ 380.736903][T10207] CPU: 0 PID: 10207 Comm: syz.2.1977 Not tainted syzkaller #0 [ 380.738126][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.739890][T10207] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 380.741305][T10207] pc : pskb_expand_head+0xfd4/0x1030 [ 380.742225][T10207] lr : pskb_expand_head+0xfd4/0x1030 [ 380.743068][T10207] sp : ffff800021146580 [ 380.743752][T10207] x29: ffff8000211465e0 x28: 00000000000000c0 x27: 0000000000000000 [ 380.745055][T10207] x26: dfff800000000000 x25: 0000000000000a20 x24: 789a8000106bc1fc [ 380.746420][T10207] x23: ffff0000c9b4c000 x22: ffff0000f463f928 x21: 00000000ffff7fe0 [ 380.747943][T10207] x20: ffff0000cbefbe8c x19: ffff0000cbefbdc0 x18: ffff800011babf60 [ 380.749398][T10207] x17: 0000000000000000 x16: ffff800011a529a8 x15: ffff80000fd5ca4c [ 380.750779][T10207] x14: 0000000000000001 x13: 1fffe0001e94cf9c x12: 0000000000080000 [ 380.752127][T10207] x11: 000000000007ffff x10: ffff800028e7e000 x9 : ffff80000fd8b678 [ 380.753517][T10207] x8 : 0000000000080000 x7 : 0000000000000000 x6 : 000000000000003f [ 380.754941][T10207] x5 : 0000000000000018 x4 : ffff0000f463f928 x3 : 0000000000000a20 [ 380.756383][T10207] x2 : 0000000000000000 x1 : 00000000ffff7fe0 x0 : 0000000000000000 [ 380.757741][T10207] Call trace: [ 380.758291][T10207] pskb_expand_head+0xfd4/0x1030 [ 380.759130][T10207] ipgre_header+0xd8/0x4bc [ 380.759939][T10207] arp_create+0x2b8/0x7ec [ 380.760759][T10207] arp_send+0xa8/0x11c [ 380.761466][T10207] inetdev_event+0xdb0/0x12d8 [ 380.762323][T10207] raw_notifier_call_chain+0xd4/0x164 [ 380.763325][T10207] call_netdevice_notifiers+0x110/0x198 [ 380.764247][T10207] bond_change_active_slave+0x1ef8/0x2fa0 [ 380.765116][T10207] bond_select_active_slave+0x724/0xa78 [ 380.766060][T10207] bond_enslave+0x1df0/0x310c [ 380.766896][T10207] rtnl_newlink+0x1760/0x1a54 [ 380.767770][T10207] rtnetlink_rcv_msg+0x698/0xcdc [ 380.768682][T10207] netlink_rcv_skb+0x218/0x3e8 [ 380.769513][T10207] rtnetlink_rcv+0x28/0x38 [ 380.770238][T10207] netlink_unicast+0x60c/0x814 [ 380.771032][T10207] netlink_sendmsg+0x6f4/0x9c0 [ 380.771778][T10207] ____sys_sendmsg+0x5c8/0x938 [ 380.772644][T10207] __sys_sendmsg+0x288/0x374 [ 380.773416][T10207] __arm64_sys_sendmsg+0x80/0x94 [ 380.774259][T10207] invoke_syscall+0x98/0x290 [ 380.775011][T10207] el0_svc_common+0x138/0x258 [ 380.775809][T10207] do_el0_svc+0x58/0x130 [ 380.776516][T10207] el0_svc+0x58/0x128 [ 380.777181][T10207] el0t_64_sync_handler+0x84/0xf0 [ 380.778032][T10207] el0t_64_sync+0x18c/0x190 [ 380.778789][T10207] Code: aa1c03e0 9628ca83 d4210000 961c831c (d4210000) [ 380.779967][T10207] ---[ end trace 0000000000000000 ]--- [ 381.036157][T10207] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 381.037253][T10207] SMP: stopping secondary CPUs [ 381.038036][T10207] Kernel Offset: disabled [ 381.038715][T10207] CPU features: 0x080000,000f0097,a65bfea7 [ 381.039602][T10207] Memory Limit: none [ 381.293425][T10207] Rebooting in 86400 seconds..