last executing test programs: 51.265773338s ago: executing program 32 (id=388): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x0, @desc2}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 41.369036044s ago: executing program 33 (id=611): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 39.413162142s ago: executing program 6 (id=647): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r2, 0xffffc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 39.408893045s ago: executing program 6 (id=648): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 39.333140168s ago: executing program 6 (id=650): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 39.281685985s ago: executing program 6 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 39.227775777s ago: executing program 6 (id=654): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 37.081123483s ago: executing program 6 (id=679): r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 37.080925538s ago: executing program 34 (id=679): r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 37.015205627s ago: executing program 4 (id=682): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.954876475s ago: executing program 4 (id=683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x10, 0x0, &(0x7f0000000940)=[@release, @increfs], 0x0, 0x0, 0x0}) 36.874242892s ago: executing program 4 (id=685): unshare(0x6020400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r0, r2, 0x3, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 36.8732308s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 36.784408615s ago: executing program 4 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9806", @ANYRES32=0x41424344], 0xfce) 36.545021936s ago: executing program 4 (id=690): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 36.539677235s ago: executing program 35 (id=690): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 21.951501681s ago: executing program 7 (id=1082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)='Y', 0x1}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@iv={0x28, 0x117, 0x2, 0x10, "9e4a20529f77fbe6e60ff2913c653829"}], 0x28, 0x8000}, 0x40000d0) 21.906119626s ago: executing program 7 (id=1084): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid-', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=winnt,utf8=1,usefree,utf8=0,uni_xlate=0,sys_immutable,shortname=winnt,allow_utime=00000000000000000002462,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2b4, &(0x7f0000000e40)="$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") syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 21.866485775s ago: executing program 7 (id=1086): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xa000001c}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000240)=0x2, 0x4) 21.837696561s ago: executing program 7 (id=1088): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002940)={[{@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@fat=@tz_utc}, {@rodir}, {@utf8}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@utf8no}, {@shortname_lower}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 21.746343784s ago: executing program 7 (id=1095): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86"], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0}) ptrace$setregset(0x4205, r0, 0x402, &(0x7f0000000000)={0x0}) 21.267900938s ago: executing program 7 (id=1109): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 21.169124386s ago: executing program 36 (id=1109): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 19.090645879s ago: executing program 3 (id=1155): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000e40)={[{@auto_da_alloc_val}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) fchown(r4, 0xffffffffffffffff, 0xee01) 18.905136879s ago: executing program 3 (id=1161): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x80000010}) 18.757260337s ago: executing program 3 (id=1168): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18.650333266s ago: executing program 3 (id=1172): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002940)={[{@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@fat=@tz_utc}, {@rodir}, {@utf8}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@utf8no}, {@shortname_lower}]}, 0x0, 0x2ad, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsH3ehmaOMnCNKCGFBqI+pCmNqJhoxJyMRIRGx3bv0cxaUrBfULdOPOvbgpguCmC3GkyUybpgHTapza/H9Q5u05886c4cyEdwYy2b75/EG56FlFu6FY0igmbWhHyuxGgbFgGWvHk+q2oQvTXz/8f/3W7Su5fH5x2Zil3MrFrDFm9sybR09enH3XmL7xcvZ1QluZO9tfsh+3/tn6d/v7Srj1qmSb1Wq1Ya+6jlkreWXLmGuuY3uOKVU8p94wXf1Ft1qrtYxdWZtJ1eqO5xm70jJlp2UaVdOot4x9zy5VjGVZZialURM/ckZhc3nZzg1lMIjCVL/Gej1nx/t2Fjb/xKAAAMDJElX9f7/kmZJnKtUD9f3h+j+mI9T/0kjX/8dVi3oAGKrd+j8VXL8HUf8DAAAAAAAAAAAAAAAAAAAAAPA32PH9tO/76XAZ/iUkJSWF/0c9TgwH8z/aur64l5TcZ81Cs9BZdvpzRZXkytH8hPStfT4EOvHS5fzivGnL6K27HuSvNwtxJcL8UKZ//kIn33Tnr2tCqe79Z5XWXP/8bJ/8ZmFS58/5iWDPjiyl9f6uqnK11j6v9/OfLhhz6Wq+J3+qvR4AAAAAAKeBZfYcun9v91smfG1IT3+ncf/5gNI/eT7Qc389rv/GoztuAAAAAABGiTepsu26Tt1rPT7tQfj7B79lg1LUh5McdOVxSUHLq5MyF4MEMUm9XROHWvoH8V+b5c/SwetiLvLpPnbgx/fO1U8PO1fAIOlRfioBAAAAGIaw6B+LeiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQd8iFq5/nJeQde0uHs1RAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDjwAAAP//5JwTUw==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 18.546318075s ago: executing program 3 (id=1176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="080008000600060008001400000045110fc000640000072f"], 0xfce) 18.04499462s ago: executing program 3 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r2, r0}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000200)=0x6, 0x4) 18.044683371s ago: executing program 37 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r2, r0}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000200)=0x6, 0x4) 6.172837657s ago: executing program 0 (id=1451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x1a, 0x0, "080c9aadb74d66ca69693fbb3d41d75b02a591c129e9738d7d8aa4e61e89a9a9bf24f97f622e69d81567b0c16ba81869ec105ab635c609beb79a79c833f4734ac34b246e6cbc9ce5d2fb8d8f9cb01a52"}, 0xd8) 6.064980999s ago: executing program 0 (id=1454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 6.025751518s ago: executing program 0 (id=1457): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) 5.989158544s ago: executing program 0 (id=1458): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFxGkCCIWxD/Au8fiP+BfIWihSAl68BKZzWy7TXa7yXZrUufzgWnfm5nkO2/fvJfvzOyyARTWWPZPKeLliPg6iTjYtm048o1ja/utPLg2nS1JrK5+8mcSSb6utX+S/78/r7wUEb98EXG8tDFufWl5rlKtpgt5fbwxf3m8vrR84uJ8ZTadTS9NTk2demtq8t133h5YW18/9/d3H9/94NSXR1e+/eneodtJnIkD+bb2djyFG+2VsRjLX5OROLNux4kBBNtJkl47dDgH2H5D+TgfiWwOOBhD+agH/v+uR8QqUFCJ8Q8F1coDWtf2A7oOfm7cf3/tAqi9/V81b4IMr90biT3Na6N9K8ljV0bZ9e7oAOJnMX7+487tbIke9yGuDyAeQMuNmxFxcnh44/yf5PNf/05u4q7f+hhF+/sD2+lulv+80Sn/Kz3Mf6JD/rO/w9jtR+/xX7o3gDBdZfnfex3z34dT1+hQXnuhmfONJBcuVtOTEfFiRByLkd1Zvd/nOe35X7Zk8Vu5YH4c94Z3P/4zM5VGpc9wG9y/GfHKo/w3iQ3z/55mrru+/7PX49wmYxxJ77zabVvv9rcbfAa8+mPEax37/9ETreTJzyfHm+fDeOus2OivW0d+7RZ/a+0fvKz/9z25/aNJ+/Pa+tZj/LDnn7Tbtn7P/13Jp83yrnzd1UqjsTARsSv5aOP6yUc/26q39s/af+zok+e/Tuf/3oj4bJPtv3W4exq0E/p/Zkv9v/XCbx9+/n23+Jvr/zebpWP5ms3Mf5s9wKd57QAAAAAAAGCnKUXEgUhK5YflUqlcXnt/x+HYV6rW6o3jF2qLl2ai+VnZ0RgptZ50H2x7P8RE/n7YVn1yXX0qIg5FxDdDe5v18nStOrPdjQcAAAAAAAAAAAAAAAAAAIAdYn+Xz/9nfh/a7qMDnjlf+Q3F1XP8D+KbnoAdyd9/KC7jH4rL+IfiMv6huIx/KC7jH4rL+IfiMv4BAAAAAAAAAAAAAAAAAAAAAAAAAABgoM6dPZstqysPrk1n9ZkrS4tztSsnZtL6XHl+cbo8XVu4XJ6t1WaraXm6Nt/r91VrtcsTk7F4dbyR1hvj9aXl8/O1xUuN8xfnK7Pp+XTkP2kVAAAAAAAAAAAAAAAAAAAAPF/qS8tzlWo1XVDoWjgdO+Iw+i4kvXr5dH4y9BViePsbqPAMCts8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAm38DAAD//wC8MHI=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300000d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 5.875062913s ago: executing program 0 (id=1460): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 5.353060882s ago: executing program 0 (id=1474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 5.3518351s ago: executing program 38 (id=1474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.509890963s ago: executing program 5 (id=1556): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x14, 0x529, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = openat(r0, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r3, 0x265, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xe6, r2, &(0x7f0000000000)='p', 0x8200, 0x600}]) 1.321015616s ago: executing program 1 (id=1561): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) 1.295345774s ago: executing program 8 (id=1564): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'hsr0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.23493717s ago: executing program 1 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) chdir(&(0x7f00000003c0)='./bus\x00') truncate(&(0x7f0000000480)='./file1\x00', 0xf) 1.227868316s ago: executing program 2 (id=1567): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 1.191595585s ago: executing program 5 (id=1568): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x491}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8, 0x0, 0x0, 0x101, 0x42, 0x5a, 0x42, 0x4}) 1.191386989s ago: executing program 8 (id=1569): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="400d04", @ANYRES64=r1], 0x7) 1.166635607s ago: executing program 2 (id=1571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) read$FUSE(r1, 0x0, 0x11) 1.142041979s ago: executing program 1 (id=1572): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='syscall\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.088619853s ago: executing program 5 (id=1574): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000000100000008"], 0x50) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f00000002c0), 0x44) 924.826317ms ago: executing program 5 (id=1577): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0xfffffffe, 0x0, '\x00', {0x7ff, 0x7ff, 0xadb, 0x10, r2, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x1, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x2810901}}, 0x50) 743.581797ms ago: executing program 5 (id=1580): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1, 0x0, 0x7e, 0x10) 689.748138ms ago: executing program 9 (id=1581): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@inlinecrypt}, {@block_validity}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, 0x0, 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r0, r0, 0x0, 0x7a67fffe) 652.658266ms ago: executing program 5 (id=1582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 575.076954ms ago: executing program 9 (id=1583): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fd", 0x42, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 442.585371ms ago: executing program 9 (id=1584): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 315.542599ms ago: executing program 8 (id=1585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 258.166718ms ago: executing program 2 (id=1586): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}}, 0xe4) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @mcast2, 0x17fff}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) 209.50272ms ago: executing program 9 (id=1587): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81082, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) 209.082426ms ago: executing program 8 (id=1588): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="e64c"], &(0x7f0000000400)=""/108, 0x6c) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 198.507896ms ago: executing program 2 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105000, 0x111) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) 194.191477ms ago: executing program 1 (id=1590): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 154.705245ms ago: executing program 9 (id=1591): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f089021bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 131.299204ms ago: executing program 2 (id=1592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "1000", 0x44, 0x2f, 0xe78c6d029ffc7582, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 68.502383ms ago: executing program 1 (id=1593): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @multicast1}], 0x10) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 67.659096ms ago: executing program 8 (id=1603): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x93, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000023f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 49.694246ms ago: executing program 2 (id=1594): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 14.958036ms ago: executing program 9 (id=1595): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 14.74478ms ago: executing program 8 (id=1596): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) 0s ago: executing program 1 (id=1597): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000) kernel console output (not intermixed with test programs): 803][ T4478] kernel read not supported for file /184/net/if_inet6 (pid: 4478 comm: kworker/0:3) [ 46.909597][ T1117] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.931213][ T1117] usb 1-1: device descriptor read/8, error -71 [ 47.039807][ T1117] usb usb1-port1: unable to enumerate USB device [ 47.212845][ T4724] Bluetooth: hci3: command tx timeout [ 47.456371][ T6090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 47.587900][ T6097] fuse: root generation should be zero [ 47.745193][ T6121] loop1: detected capacity change from 0 to 512 [ 47.745817][ T6121] EXT4-fs: Ignoring removed nobh option [ 47.780305][ T6121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.810370][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.024932][ T6142] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 48.024960][ T6142] netlink: 'syz.1.485': attribute type 4 has an invalid length. [ 48.024969][ T6142] __nla_validate_parse: 7 callbacks suppressed [ 48.024977][ T6142] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.485'. [ 48.186636][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.188543][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.190149][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.190679][ T6154] loop1: detected capacity change from 0 to 512 [ 48.190981][ T6154] EXT4-fs: Ignoring removed i_version option [ 48.190990][ T6154] EXT4-fs: Ignoring removed nobh option [ 48.192960][ T6154] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.197886][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.201649][ T6154] EXT4-fs (loop1): 1 truncate cleaned up [ 48.202109][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.206814][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.224880][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.241989][ T6159] loop1: detected capacity change from 0 to 1024 [ 48.255725][ T6159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.317050][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.388380][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.389100][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.389205][ T6152] bridge_slave_0: entered allmulticast mode [ 48.389701][ T6152] bridge_slave_0: entered promiscuous mode [ 48.390495][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.390516][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.390573][ T6152] bridge_slave_1: entered allmulticast mode [ 48.390969][ T6152] bridge_slave_1: entered promiscuous mode [ 48.400033][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.401131][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.408016][ T6152] team0: Port device team_slave_0 added [ 48.408855][ T6152] team0: Port device team_slave_1 added [ 48.415966][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.415989][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.416016][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.416612][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.416618][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.416696][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.427780][ T6152] hsr_slave_0: entered promiscuous mode [ 48.428082][ T6152] hsr_slave_1: entered promiscuous mode [ 48.504262][ T6152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.582896][ T6152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.682913][ T6152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.724362][ T6205] overlayfs: failed to verify origin (94/file1, ino=526, err=-61) [ 48.758795][ T6152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.935525][ T6152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.938403][ T6152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.940553][ T6152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.946595][ T6152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.948850][ T6152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.955222][ T6152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.956134][ T6152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.959983][ T6152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.987424][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.001444][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.010705][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.010746][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.029612][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.029655][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.038128][ T6225] loop1: detected capacity change from 0 to 2048 [ 49.058499][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.091144][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.205677][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.300720][ T4721] Bluetooth: hci3: command tx timeout [ 49.317862][ T6152] veth0_vlan: entered promiscuous mode [ 49.321308][ T6152] veth1_vlan: entered promiscuous mode [ 49.332681][ T6152] veth0_macvtap: entered promiscuous mode [ 49.340891][ T6152] veth1_macvtap: entered promiscuous mode [ 49.355625][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.358826][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.366576][ T1919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.366657][ T1919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.366714][ T1919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.366809][ T1919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.414269][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.414296][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.432041][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.432068][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.620323][ T6266] syzkaller0: entered promiscuous mode [ 49.620357][ T6266] syzkaller0: entered allmulticast mode [ 49.801317][ T6283] loop1: detected capacity change from 0 to 128 [ 49.815251][ T6283] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.825893][ T6279] syzkaller0: entered promiscuous mode [ 49.829358][ T6279] syzkaller0: entered allmulticast mode [ 49.848289][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.002246][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 50.056192][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 50.056222][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 50.251485][ T4721] Bluetooth: hci4: command tx timeout [ 50.671779][ T6349] loop0: detected capacity change from 0 to 128 [ 50.687909][ T6349] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.721371][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.788941][ T6360] loop6: detected capacity change from 0 to 7 [ 50.923532][ T6360] Dev loop6: unable to read RDB block 7 [ 50.923571][ T6360] loop6: unable to read partition table [ 50.923653][ T6360] loop6: partition table beyond EOD, truncated [ 50.923673][ T6360] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 51.158087][ T6382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 51.161344][ T6382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 51.164589][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 51.164630][ T6382] netlink: 'syz.0.567': attribute type 26 has an invalid length. [ 51.311145][ T6388] loop0: detected capacity change from 0 to 8192 [ 51.316944][ T6388] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.369711][ T4721] Bluetooth: hci3: command tx timeout [ 51.514546][ T6393] loop3: detected capacity change from 0 to 8192 [ 51.535538][ T6393] syz.3.572: attempt to access beyond end of device [ 51.535538][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.535583][ T6393] buffer_io_error: 23 callbacks suppressed [ 51.535590][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.536438][ T6393] syz.3.572: attempt to access beyond end of device [ 51.536438][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.536473][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.536505][ T6393] syz.3.572: attempt to access beyond end of device [ 51.536505][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.536895][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.536923][ T6393] syz.3.572: attempt to access beyond end of device [ 51.536923][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.536943][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.536962][ T6393] syz.3.572: attempt to access beyond end of device [ 51.536962][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.536981][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.537000][ T6393] syz.3.572: attempt to access beyond end of device [ 51.537000][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.537019][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.537037][ T6393] syz.3.572: attempt to access beyond end of device [ 51.537037][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.537056][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.537074][ T6393] syz.3.572: attempt to access beyond end of device [ 51.537074][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.537092][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.537110][ T6393] syz.3.572: attempt to access beyond end of device [ 51.537110][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.537128][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.537146][ T6393] syz.3.572: attempt to access beyond end of device [ 51.537146][ T6393] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 51.537164][ T6393] Buffer I/O error on dev loop3, logical block 57847, async page read [ 51.588389][ T6399] use of bytesused == 0 is deprecated and will be removed in the future, [ 51.588419][ T6399] use the actual size instead. [ 51.677668][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a5b259c4: rx timeout, send abort [ 51.678125][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a5b259c4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.678889][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000d4b7fef5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.062921][ T30] audit: type=1326 audit(52.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.4.589" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e578f68 code=0x0 [ 52.339602][ T4721] Bluetooth: hci4: command tx timeout [ 52.467353][ T6453] loop3: detected capacity change from 0 to 1024 [ 52.475170][ T6453] EXT4-fs: Ignoring removed bh option [ 52.487152][ T6453] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.517022][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.546914][ T6464] EXT4-fs: Ignoring removed orlov option [ 52.594279][ T6464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.603173][ T6453] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.596: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 52.604422][ T6453] EXT4-fs (loop3): Remounting filesystem read-only [ 52.620777][ T6464] EXT4-fs (loop5): shut down requested (2) [ 52.621873][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.622604][ T6464] overlayfs: failed to get metacopy (-5) [ 52.891608][ T5809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.977851][ T6494] set_capacity_and_notify: 1 callbacks suppressed [ 52.977890][ T6494] loop1: detected capacity change from 0 to 4096 [ 53.002984][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.006374][ T6494] EXT4-fs (loop1): shut down requested (1) [ 53.009825][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.011943][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.014133][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.015594][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.082542][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 53.087317][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 53.195496][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.195648][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.195717][ T6496] bridge_slave_0: entered allmulticast mode [ 53.196162][ T6496] bridge_slave_0: entered promiscuous mode [ 53.197083][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.197134][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.197189][ T6496] bridge_slave_1: entered allmulticast mode [ 53.197624][ T6496] bridge_slave_1: entered promiscuous mode [ 53.205972][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.207133][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.216820][ T6496] team0: Port device team_slave_0 added [ 53.217723][ T6496] team0: Port device team_slave_1 added [ 53.224545][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.224564][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.224580][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.225180][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.225187][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.225202][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.235787][ T6496] hsr_slave_0: entered promiscuous mode [ 53.236191][ T6496] hsr_slave_1: entered promiscuous mode [ 53.236403][ T6496] debugfs: 'hsr0' already exists in 'hsr' [ 53.236413][ T6496] Cannot create hsr debugfs directory [ 53.292984][ T6496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.293948][ T6496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.294270][ T6496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.295469][ T6496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.295747][ T6496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.297155][ T6496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.297429][ T6496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.298243][ T6496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.305969][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.306005][ T6496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.306077][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.306105][ T6496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.320466][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.325796][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.327514][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.332322][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.334669][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.334718][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.341189][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.341232][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.438644][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.498496][ T6496] veth0_vlan: entered promiscuous mode [ 53.502203][ T6496] veth1_vlan: entered promiscuous mode [ 53.515407][ T6496] veth0_macvtap: entered promiscuous mode [ 53.518306][ T6496] veth1_macvtap: entered promiscuous mode [ 53.525551][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.532178][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.536496][ T15] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.536585][ T15] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.536617][ T15] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.536636][ T15] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.574089][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.574114][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.588544][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.588571][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.409585][ T4721] Bluetooth: hci4: command tx timeout [ 54.652356][ T6598] ubi0: attaching mtd0 [ 54.652392][ T6598] ubi0 error: ubi_attach_mtd_dev: bad VID header (2228560) or data offsets (2228624) [ 54.941040][ T3251] Bluetooth: (null): Invalid header checksum [ 55.026490][ T6629] binder: 6628:6629 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 55.026518][ T6629] binder: 6629 RLIMIT_NICE not set [ 55.049646][ T4721] Bluetooth: hci3: command tx timeout [ 55.052293][ T1922] Bluetooth: (null): Invalid header checksum [ 55.077369][ T6629] binder: 6628:6629 ioctl c0306201 20000040 returned -14 [ 55.111736][ T6636] binder: 6635:6636 ioctl c0306201 20000080 returned -14 [ 55.113448][ T6636] binder: 6635:6636 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 55.161244][ T1118] Bluetooth: (null): Invalid header checksum [ 55.269823][ T1922] Bluetooth: (null): Invalid header checksum [ 55.379625][ T1922] Bluetooth: (null): Invalid header checksum [ 55.489766][ T1922] Bluetooth: (null): Invalid header checksum [ 55.490538][ T6656] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 55.501398][ T6656] bond1: (slave bridge1): making interface the new active one [ 55.502708][ T6656] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 55.600007][ T1922] Bluetooth: (null): Invalid header checksum [ 55.709627][ T15] Bluetooth: (null): Invalid header checksum [ 55.817273][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 55.820739][ T39] Bluetooth: (null): Invalid header checksum [ 55.929620][ T1922] Bluetooth: (null): Invalid header checksum [ 56.041247][ T1922] Bluetooth: (null): Invalid header checksum [ 56.099710][ T1922] Bluetooth: (null): Invalid header checksum [ 56.150322][ T1922] Bluetooth: (null): Invalid header checksum [ 56.209633][ T3251] Bluetooth: (null): Invalid header checksum [ 56.260552][ T3251] Bluetooth: (null): Invalid header checksum [ 56.371206][ T3251] Bluetooth: (null): Invalid header checksum [ 56.480258][ T1118] Bluetooth: (null): Invalid header checksum [ 56.489588][ T4715] Bluetooth: hci4: command tx timeout [ 56.589607][ T15] Bluetooth: (null): Invalid header checksum [ 56.709905][ T1922] Bluetooth: (null): Invalid header checksum [ 56.820246][ T3251] Bluetooth: (null): Invalid header checksum [ 56.939838][ T15] Bluetooth: (null): Invalid header checksum [ 57.049687][ T1118] Bluetooth: (null): Invalid header checksum [ 57.162482][ T3251] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.260119][ T4720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.261448][ T4720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.262519][ T4720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.262839][ T4720] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.263076][ T4720] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.368932][ T6770] binder: 6769:6770 ioctl c0306201 20000080 returned -14 [ 57.370315][ T6770] binder: 6769:6770 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 57.370420][ T4721] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 57.379103][ T3251] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.455458][ T3251] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.474432][ T6782] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 57.500075][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.501470][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.503012][ T6753] bridge_slave_0: entered allmulticast mode [ 57.504821][ T6753] bridge_slave_0: entered promiscuous mode [ 57.506663][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.506701][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.506837][ T6753] bridge_slave_1: entered allmulticast mode [ 57.507470][ T6753] bridge_slave_1: entered promiscuous mode [ 57.513004][ T6782] bond1: (slave bridge1): making interface the new active one [ 57.514156][ T6782] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 57.523883][ T3251] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.538467][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.544209][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.555129][ T6753] team0: Port device team_slave_0 added [ 57.557053][ T6753] team0: Port device team_slave_1 added [ 57.564638][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.565898][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.574564][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.579352][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.581561][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.581593][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.608080][ T6753] hsr_slave_0: entered promiscuous mode [ 57.609375][ T6753] hsr_slave_1: entered promiscuous mode [ 57.611073][ T6753] debugfs: 'hsr0' already exists in 'hsr' [ 57.612339][ T6753] Cannot create hsr debugfs directory [ 57.675232][ T3251] bridge_slave_1: left allmulticast mode [ 57.676323][ T3251] bridge_slave_1: left promiscuous mode [ 57.677872][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.680822][ T3251] bridge_slave_0: left allmulticast mode [ 57.682091][ T3251] bridge_slave_0: left promiscuous mode [ 57.683260][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.755276][ T3251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.765654][ T3251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.800696][ T3251] bond0 (unregistering): Released all slaves [ 57.806054][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.808642][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.813120][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.818042][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.819794][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.847975][ T6753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 57.849731][ T4724] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 57.857613][ T6753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.858181][ T6753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 57.861621][ T6753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.917762][ T6753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 57.920036][ T6753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.920356][ T6753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 57.921217][ T6753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.983950][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.026651][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 58.035592][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.042349][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.042391][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.047501][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.047543][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.078726][ T3251] hsr_slave_0: left promiscuous mode [ 58.081948][ T3251] hsr_slave_1: left promiscuous mode [ 58.082314][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.082325][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.083375][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.083385][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.088819][ T3251] veth1_macvtap: left promiscuous mode [ 58.088866][ T3251] veth0_macvtap: left promiscuous mode [ 58.088911][ T3251] veth1_vlan: left promiscuous mode [ 58.088944][ T3251] veth0_vlan: left promiscuous mode [ 58.217377][ T3251] team0 (unregistering): Port device team_slave_1 removed [ 58.225484][ T3251] team0 (unregistering): Port device team_slave_0 removed [ 58.283496][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 58.295974][ T6753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.298550][ T6753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.428134][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.428201][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.428273][ T6794] bridge_slave_0: entered allmulticast mode [ 58.430369][ T6794] bridge_slave_0: entered promiscuous mode [ 58.432641][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.432666][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.432730][ T6794] bridge_slave_1: entered allmulticast mode [ 58.433363][ T6794] bridge_slave_1: entered promiscuous mode [ 58.454775][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.456020][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.478949][ T6794] team0: Port device team_slave_0 added [ 58.481898][ T6794] team0: Port device team_slave_1 added [ 58.482999][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.495149][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.495172][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.495200][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.495813][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.495827][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.495859][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.523777][ T6794] hsr_slave_0: entered promiscuous mode [ 58.525151][ T6794] hsr_slave_1: entered promiscuous mode [ 58.525374][ T6794] debugfs: 'hsr0' already exists in 'hsr' [ 58.525385][ T6794] Cannot create hsr debugfs directory [ 58.528429][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.611329][ T6884] binder: 6882:6884 ioctl c0306201 20000080 returned -14 [ 58.612124][ T6884] binder: 6882:6884 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 58.630199][ T3251] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.679056][ T6753] veth0_vlan: entered promiscuous mode [ 58.699871][ T3251] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.705916][ T6794] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 58.709455][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.713906][ T6794] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 58.716665][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.718747][ T6794] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 58.724374][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.725987][ T6794] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 58.733553][ T6794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.737289][ T6753] veth1_vlan: entered promiscuous mode [ 58.786755][ T3251] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.791727][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 58.814232][ T6753] veth0_macvtap: entered promiscuous mode [ 58.817949][ T6753] veth1_macvtap: entered promiscuous mode [ 58.835560][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.837949][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.859073][ T3251] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.864064][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.866188][ T1410] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866801][ T1410] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866823][ T1410] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866840][ T1410] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.891836][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.898570][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.898613][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.916832][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.916887][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.926353][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.926388][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.946913][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.946939][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.066618][ T3251] bridge_slave_1: left allmulticast mode [ 59.066655][ T3251] bridge_slave_1: left promiscuous mode [ 59.066747][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.081099][ T3251] bridge_slave_0: left allmulticast mode [ 59.082258][ T3251] bridge_slave_0: left promiscuous mode [ 59.083402][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.169898][ T3251] bond1 (unregistering): (slave bridge1): Releasing active interface [ 59.174412][ T6941] binder: 6940:6941 ioctl c0306201 20000080 returned -14 [ 59.175156][ T6941] binder: 6940:6941 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 59.191933][ T3251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.201096][ T6943] binder: 6942:6943 ioctl c0306201 20000080 returned -14 [ 59.201517][ T6943] binder: 6942:6943 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.201529][ T6943] binder: 6943 RLIMIT_NICE not set [ 59.201613][ T6943] binder: 6942:6943 BC_DEAD_BINDER_DONE 00000000000000fc not found [ 59.221861][ T3251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.240992][ T3251] bond0 (unregistering): Released all slaves [ 59.246982][ T3251] bond1 (unregistering): Released all slaves [ 59.284960][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.299604][ T4720] Bluetooth: hci6: command tx timeout [ 59.393257][ T6970] loop7: detected capacity change from 0 to 512 [ 59.461766][ T6794] veth0_vlan: entered promiscuous mode [ 59.465781][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 59.466307][ T6794] veth1_vlan: entered promiscuous mode [ 59.475071][ T6794] veth0_macvtap: entered promiscuous mode [ 59.518046][ T6794] veth1_macvtap: entered promiscuous mode [ 59.530084][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.531099][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.534536][ T1410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.541747][ T1410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.562368][ T1410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.562421][ T1410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.589367][ T3251] hsr_slave_0: left promiscuous mode [ 59.594382][ T3251] hsr_slave_1: left promiscuous mode [ 59.595767][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.597251][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.598891][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.600630][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.605719][ T3251] veth1_macvtap: left promiscuous mode [ 59.606819][ T3251] veth0_macvtap: left promiscuous mode [ 59.607822][ T3251] veth1_vlan: left promiscuous mode [ 59.608864][ T3251] veth0_vlan: left promiscuous mode [ 59.713216][ T3251] team0 (unregistering): Port device team_slave_1 removed [ 59.718594][ T3251] team0 (unregistering): Port device team_slave_0 removed [ 59.770530][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 59.803846][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.803874][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.821029][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.821058][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.849770][ T4720] Bluetooth: hci3: command tx timeout [ 59.898589][ T7005] loop7: detected capacity change from 0 to 1024 [ 59.899047][ T7005] EXT4-fs: Ignoring removed nobh option [ 59.901602][ T7009] loop8: detected capacity change from 0 to 512 [ 59.904156][ T7005] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.936748][ T7009] EXT4-fs (loop8): 1 truncate cleaned up [ 59.938544][ T7005] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.724: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.938623][ T7005] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.941757][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 59.941771][ C0] EXT4-fs (loop7): initial error at time 59: ext4_map_blocks:833: inode 3: block 1 [ 59.941794][ C0] EXT4-fs (loop7): last error at time 59: ext4_map_blocks:833: inode 3: block 1 [ 59.957900][ T7005] Quota error (device loop7): write_blk: dquota write failed [ 59.957944][ T7005] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 59.957986][ T7005] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.724: Failed to acquire dquot type 0 [ 59.958004][ T7005] loop7: lost filesystem error report for type 5 error -117 [ 59.964357][ T7005] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.724: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.964385][ T7005] loop7: lost filesystem error report for type 5 error -117 [ 59.972969][ T7005] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.724: Invalid inode bitmap blk 0 in block_group 0 [ 59.973006][ T7005] loop7: lost filesystem error report for type 5 error -117 [ 59.979360][ T7005] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 59.979398][ T7005] loop7: lost filesystem error report for type 5 error -117 [ 59.982445][ T1922] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.982472][ T1922] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.989156][ T1922] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 59.989233][ T1922] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0 [ 59.989257][ T1922] loop7: lost filesystem error report for type 5 error -117 [ 59.990618][ T7005] EXT4-fs (loop7): 1 orphan inode deleted [ 60.018844][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 60.153736][ T7038] input: syz0 as /devices/virtual/input/input10 [ 60.197174][ T3251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.197217][ T3251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.266053][ T3251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.267533][ T7059] loop3: detected capacity change from 0 to 512 [ 60.272227][ T3251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.292403][ T7059] EXT4-fs (loop3): 1 truncate cleaned up [ 60.329441][ T3251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.332753][ T3251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.392034][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 60.422581][ T3251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.424900][ T3251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.540586][ T3251] bridge_slave_1: left allmulticast mode [ 60.541656][ T3251] bridge_slave_1: left promiscuous mode [ 60.542998][ T3251] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.550125][ T3251] bridge_slave_0: left allmulticast mode [ 60.551294][ T3251] bridge_slave_0: left promiscuous mode [ 60.552845][ T3251] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.560687][ T40] nci: nci_rsp_packet: unknown rsp opcode 0xd [ 60.637122][ T3251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.663464][ T3251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.690852][ T3251] bond0 (unregistering): Released all slaves [ 60.729580][ T4724] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.791604][ T7094] input: syz0 as /devices/virtual/input/input11 [ 60.865614][ T7096] loop1: detected capacity change from 0 to 256 [ 60.874915][ T7096] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 60.874942][ T7096] FAT-fs (loop1): Filesystem has been set read-only [ 61.017045][ T3251] hsr_slave_0: left promiscuous mode [ 61.018708][ T3251] hsr_slave_1: left promiscuous mode [ 61.021141][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.022709][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.024616][ T3251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.025943][ T3251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.039385][ T3251] veth1_macvtap: left promiscuous mode [ 61.039433][ T3251] veth0_macvtap: left promiscuous mode [ 61.039519][ T3251] veth1_vlan: left promiscuous mode [ 61.039555][ T3251] veth0_vlan: left promiscuous mode [ 61.222007][ T3251] team0 (unregistering): Port device team_slave_1 removed [ 61.229908][ T3251] team0 (unregistering): Port device team_slave_0 removed [ 61.336777][ T7088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.368722][ T1118] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.370017][ T4724] Bluetooth: hci6: command tx timeout [ 61.931109][ T4724] Bluetooth: hci3: command tx timeout [ 61.996920][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 62.147559][ T7153] loop0: detected capacity change from 0 to 256 [ 62.154919][ T7153] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 62.154952][ T7153] FAT-fs (loop0): Filesystem has been set read-only [ 62.166363][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 62.253766][ T7166] batadv_slave_1: entered promiscuous mode [ 62.254592][ T7165] batadv_slave_1: left promiscuous mode [ 62.495760][ T7209] Bluetooth: hci0: invalid len left 7, exp >= 115 [ 62.555510][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 62.711675][ T7234] loop8: detected capacity change from 0 to 2048 [ 62.784045][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 62.885738][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 62.918402][ T7260] Bluetooth: hci0: invalid len left 7, exp >= 115 [ 63.018603][ T7278] loop1: detected capacity change from 0 to 512 [ 63.022113][ T7278] EXT4-fs (loop1): Test dummy encryption mode enabled [ 63.022138][ T7278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.039020][ T7278] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.790: bad orphan inode 131083 [ 63.039054][ T7278] loop1: lost filesystem error report for type 5 error -117 [ 63.052546][ T7278] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 63.058823][ T7278] overlayfs: upper fs needs to support d_type. [ 63.110721][ T7289] loop8: detected capacity change from 0 to 128 [ 63.167682][ T7292] loop7: detected capacity change from 0 to 2048 [ 63.288071][ T30] audit: type=1326 audit(63.260:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.289263][ T30] audit: type=1326 audit(63.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.291590][ T30] audit: type=1326 audit(63.260:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.291693][ T30] audit: type=1326 audit(63.260:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.291764][ T30] audit: type=1326 audit(63.260:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.291832][ T30] audit: type=1326 audit(63.260:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.291919][ T30] audit: type=1326 audit(63.260:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7299 comm="syz.8.798" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x7ffc0000 [ 63.369800][ T4720] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.450216][ T4724] Bluetooth: hci6: command tx timeout [ 63.682901][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.685182][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.690750][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.695893][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.697457][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.816875][ T7348] netlink: 'syz.8.816': attribute type 1 has an invalid length. [ 63.842890][ T7348] gretap1: entered allmulticast mode [ 63.849048][ T7348] bond1: (slave gretap1): making interface the new active one [ 63.854806][ T7348] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 63.894843][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.823'. [ 63.911492][ T7359] bond0: Unable to set down delay as MII monitoring is disabled [ 64.010180][ T4724] Bluetooth: hci3: command tx timeout [ 64.076631][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.079098][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.081335][ T7326] bridge_slave_0: entered allmulticast mode [ 64.085254][ T7326] bridge_slave_0: entered promiscuous mode [ 64.092625][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.092683][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.092784][ T7326] bridge_slave_1: entered allmulticast mode [ 64.093240][ T7326] bridge_slave_1: entered promiscuous mode [ 64.116845][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.118229][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.125206][ T7326] team0: Port device team_slave_0 added [ 64.125980][ T7326] team0: Port device team_slave_1 added [ 64.131695][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.131717][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.131729][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.132288][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.132295][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.132310][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.142326][ T7326] hsr_slave_0: entered promiscuous mode [ 64.142662][ T7326] hsr_slave_1: entered promiscuous mode [ 64.230199][ T7326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.232417][ T7326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.306507][ T7326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.306548][ T7326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.392850][ T7326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.392890][ T7326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.481062][ T7326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.481105][ T7326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.491297][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491345][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.495783][ T10] cfg80211: failed to load regulatory.db [ 64.626141][ T7326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.629174][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.631061][ T7326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.633140][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.633799][ T7326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.636135][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.636563][ T7326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.638321][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.646100][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.646145][ T7326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.646219][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.646247][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.661602][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.664746][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.666529][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.674201][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.676188][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.676229][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.680595][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.680635][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.703056][ T7326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.748116][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 64.748159][ T7411] bond0: Unable to set down delay as MII monitoring is disabled [ 64.846164][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.882168][ T7326] veth0_vlan: entered promiscuous mode [ 64.907474][ T7326] veth1_vlan: entered promiscuous mode [ 64.941929][ T7326] veth0_macvtap: entered promiscuous mode [ 64.947440][ T7326] veth1_macvtap: entered promiscuous mode [ 64.975051][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.976100][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.987162][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987207][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987237][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987255][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.092453][ T3251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.092482][ T3251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.114608][ T3251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.114637][ T3251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.527991][ T7473] loop3: detected capacity change from 0 to 512 [ 65.529579][ T4724] Bluetooth: hci6: command tx timeout [ 65.533954][ T7473] EXT4-fs (loop3): Test dummy encryption mode enabled [ 65.536889][ T7473] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.858: inode has both inline data and extents flags [ 65.536928][ T7473] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.537423][ T7473] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.858: couldn't read orphan inode 15 (err -117) [ 65.537444][ T7473] loop3: lost filesystem error report for type 5 error -117 [ 65.537968][ T7473] EXT4-fs mount: 18 callbacks suppressed [ 65.537976][ T7473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.612742][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.624512][ T7483] loop1: detected capacity change from 0 to 2048 [ 65.634311][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.636178][ T7485] loop8: detected capacity change from 0 to 1024 [ 65.636496][ T7485] EXT4-fs: Invalid want_extra_isize 3 [ 65.692196][ T7326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.779625][ T4724] Bluetooth: hci0: command tx timeout [ 65.854415][ T7501] loop3: detected capacity change from 0 to 32768 [ 65.877752][ T7512] loop8: detected capacity change from 0 to 128 [ 65.887413][ T7501] loop3: p1 p3 < > [ 65.899350][ T7510] loop0: detected capacity change from 0 to 4096 [ 65.903366][ T7512] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.908013][ T7510] EXT4-fs: inline encryption not supported [ 65.919023][ T7510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.920739][ T7510] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.923055][ T6794] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.944601][ T7510] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 65.944681][ T7510] System zones: 0-5 [ 65.949812][ T7510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.072573][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 66.074101][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.089593][ T4724] Bluetooth: hci3: command tx timeout [ 66.113098][ T7525] bridge0: port 3(syz_tun) entered blocking state [ 66.114892][ T7525] bridge0: port 3(syz_tun) entered disabled state [ 66.116280][ T7525] syz_tun: entered allmulticast mode [ 66.117916][ T7525] syz_tun: entered promiscuous mode [ 66.119366][ T7525] bridge0: port 3(syz_tun) entered blocking state [ 66.119432][ T7525] bridge0: port 3(syz_tun) entered forwarding state [ 66.236776][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.8.883'. [ 66.236811][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.8.883'. [ 66.310974][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.316534][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.883'. [ 66.316565][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.883'. [ 66.594135][ T7553] loop7: detected capacity change from 0 to 512 [ 66.596698][ T7553] EXT4-fs: Ignoring removed bh option [ 66.599189][ T7553] EXT4-fs: Ignoring removed nobh option [ 66.601465][ T7553] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.605167][ T7553] EXT4-fs (loop7): 1 truncate cleaned up [ 66.608738][ T7553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.644225][ T6753] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.056103][ T7588] loop1: detected capacity change from 0 to 512 [ 67.057594][ T7588] EXT4-fs: Ignoring removed bh option [ 67.058602][ T7588] EXT4-fs: Ignoring removed nobh option [ 67.060052][ T7588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.062368][ T7586] binder: 7585:7586 got transaction to invalid handle, 1 [ 67.062400][ T7586] binder: 7585:7586 cannot find target node [ 67.062439][ T7586] binder: 7585:7586 transaction call to 0:0 failed 19/29201/-22, code 0 size 0-0 line 3252 [ 67.071316][ T7588] EXT4-fs (loop1): 1 truncate cleaned up [ 67.074648][ T7588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.111074][ T7326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.126550][ T1117] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.378361][ T7614] loop1: detected capacity change from 0 to 256 [ 67.378687][ T7614] vfat: Unknown parameter 'shoiǨme' [ 67.398480][ T7614] loop1: detected capacity change from 0 to 512 [ 67.414399][ T7614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.479301][ T7326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.540504][ T7627] binder: 7626:7627 got transaction to invalid handle, 1 [ 67.540536][ T7627] binder: 7626:7627 cannot find target node [ 67.540564][ T7627] binder: 7626:7627 transaction call to 0:0 failed 20/29201/-22, code 0 size 0-0 line 3252 [ 67.576974][ T7629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.580470][ T4805] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.609630][ T7629] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 67.614859][ T7629] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 67.617366][ T7629] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.617366][ T7629] [ 67.621399][ T7629] EXT4-fs (loop0): Total free blocks count 0 [ 67.622469][ T7629] EXT4-fs (loop0): Free/Dirty block details [ 67.623993][ T7629] EXT4-fs (loop0): free_blocks=2415919504 [ 67.624020][ T7629] EXT4-fs (loop0): dirty_blocks=32 [ 67.624033][ T7629] EXT4-fs (loop0): Block reservation details [ 67.624046][ T7629] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 67.641886][ T7629] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 67.645016][ T7645] netlink: 'syz.8.928': attribute type 3 has an invalid length. [ 67.645051][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.8.928'. [ 67.674861][ T4717] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 67.686515][ C1] Unknown status report in ack skb [ 67.761398][ T7655] vfat: Unknown parameter 'shoiǨme' [ 67.793376][ T7655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.822596][ T6753] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.849633][ T4724] Bluetooth: hci0: command tx timeout [ 67.980313][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 68.018749][ T7677] netlink: 'syz.0.941': attribute type 3 has an invalid length. [ 68.018779][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 68.084762][ T7682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.088783][ T7682] EXT4-fs (loop0): 1 truncate cleaned up [ 68.090099][ T7682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.178185][ C0] Unknown status report in ack skb [ 68.201770][ T7685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.240639][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.244494][ T7685] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 68.244598][ T7685] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 68.244611][ T7685] EXT4-fs (loop7): This should not happen!! Data will be lost [ 68.244611][ T7685] [ 68.244619][ T7685] EXT4-fs (loop7): Total free blocks count 0 [ 68.244626][ T7685] EXT4-fs (loop7): Free/Dirty block details [ 68.244634][ T7685] EXT4-fs (loop7): free_blocks=2415919504 [ 68.244642][ T7685] EXT4-fs (loop7): dirty_blocks=32 [ 68.244648][ T7685] EXT4-fs (loop7): Block reservation details [ 68.244654][ T7685] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 68.261029][ T7685] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 68.304168][ T6753] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.448095][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 68.474768][ T7719] Injecting memory failure for pfn 0x13cc62 at process virtual address 0x20ffc000 [ 68.494025][ T7719] Memory failure: 0x13cc62: Sending SIGBUS to syz.8.956:7719 due to hardware memory corruption [ 68.494093][ T7719] Memory failure: 0x13cc62: recovery action for dirty LRU page: Recovered [ 68.494110][ T7719] Injecting memory failure for pfn 0x13cc61 at process virtual address 0x20ffd000 [ 68.494190][ T7719] Memory failure: 0x13cc61: Sending SIGBUS to syz.8.956:7719 due to hardware memory corruption [ 68.494209][ T7719] Memory failure: 0x13cc61: recovery action for dirty LRU page: Recovered [ 68.494217][ T7719] Injecting memory failure for pfn 0x13cc60 at process virtual address 0x20ffe000 [ 68.494248][ T7719] Memory failure: 0x13cc60: Sending SIGBUS to syz.8.956:7719 due to hardware memory corruption [ 68.494266][ T7719] Memory failure: 0x13cc60: recovery action for dirty LRU page: Recovered [ 68.557321][ T7726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.579318][ T7726] EXT4-fs (loop3): 1 truncate cleaned up [ 68.579814][ T7726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.584025][ T7733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.605410][ T7733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.661594][ T6753] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.720510][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.754062][ T7747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.774902][ T7747] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.970: corrupted xattr block 33: overlapping e_value [ 68.776270][ T7747] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.970: corrupted xattr block 33: overlapping e_value [ 68.779680][ T7747] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.970: corrupted xattr block 33: overlapping e_value [ 68.789198][ T7747] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.970: corrupted xattr block 33: overlapping e_value [ 68.899034][ T7761] Injecting memory failure for pfn 0x121537 at process virtual address 0x20ffc000 [ 68.904621][ T7761] Memory failure: 0x121537: Sending SIGBUS to syz.3.973:7761 due to hardware memory corruption [ 68.904674][ T7761] Memory failure: 0x121537: recovery action for dirty LRU page: Recovered [ 68.904692][ T7761] Injecting memory failure for pfn 0x121536 at process virtual address 0x20ffd000 [ 68.904738][ T7761] Memory failure: 0x121536: Sending SIGBUS to syz.3.973:7761 due to hardware memory corruption [ 68.904761][ T7761] Memory failure: 0x121536: recovery action for dirty LRU page: Recovered [ 68.904774][ T7761] Injecting memory failure for pfn 0x121535 at process virtual address 0x20ffe000 [ 68.904806][ T7761] Memory failure: 0x121535: Sending SIGBUS to syz.3.973:7761 due to hardware memory corruption [ 68.904827][ T7761] Memory failure: 0x121535: recovery action for dirty LRU page: Recovered [ 68.924901][ T6753] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.001622][ T7769] EXT4-fs (loop0): Test dummy encryption mode enabled [ 69.007607][ T7769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.094174][ T7782] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.111850][ T7782] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.142061][ T7326] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.145185][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.282007][ T7794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.286769][ T7802] EXT4-fs: inline encryption not supported [ 69.289662][ T7794] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.986: corrupted xattr block 33: overlapping e_value [ 69.294901][ T7794] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.986: corrupted xattr block 33: overlapping e_value [ 69.299032][ T7794] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.986: corrupted xattr block 33: overlapping e_value [ 69.303717][ T7794] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.986: corrupted xattr block 33: overlapping e_value [ 69.314609][ T7802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.314637][ T7802] EXT4-fs (loop8): Test dummy encryption mode enabled [ 69.318711][ T7802] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 69.318761][ T7802] System zones: 0-5 [ 69.342163][ T7802] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.395012][ T6794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.442992][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.470153][ T7818] vfat: Unknown parameter 'uid-0x000000000000ee00' [ 69.568106][ T7834] EXT4-fs (loop7): Test dummy encryption mode enabled [ 69.585191][ T7834] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.720885][ T6753] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.768414][ T7853] EXT4-fs: inline encryption not supported [ 69.778798][ T7853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.778823][ T7853] EXT4-fs (loop3): Test dummy encryption mode enabled [ 69.793234][ T7853] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 69.793282][ T7853] System zones: 0-5 [ 69.794115][ T7853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.874911][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.929840][ T4724] Bluetooth: hci0: command tx timeout [ 70.517354][ T7944] Bluetooth: MGMT ver 1.23 [ 70.517404][ T7944] Bluetooth: hci0: unsupported parameter 255 [ 70.517430][ T7944] Bluetooth: hci0: unsupported parameter 128 [ 70.517444][ T7944] Bluetooth: hci0: unsupported parameter 255 [ 70.517456][ T7944] Bluetooth: hci0: unsupported parameter 128 [ 70.591992][ T7954] set_capacity_and_notify: 19 callbacks suppressed [ 70.592036][ T7954] loop9: detected capacity change from 0 to 524287998 [ 70.626494][ T7960] input: syz0 as /devices/virtual/input/input14 [ 70.626531][ T7960] input: failed to attach handler leds to device input14, error: -6 [ 70.679189][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 70.679224][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 70.680305][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 70.680320][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 70.734964][ T7971] input: syz1 as /devices/virtual/input/input15 [ 70.760399][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 70.829680][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 70.829713][ T7974] nbd: device at index 64 is going down [ 70.897715][ T5324] udevd[5324]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 70.916578][ T5337] udevd[5337]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 71.257178][ T8011] Injecting memory failure for pfn 0x137a03 at process virtual address 0x20003000 [ 71.263244][ T8011] Memory failure: 0x137a03: recovery action for dirty LRU page: Recovered [ 71.325685][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1068'. [ 71.396037][ T8064] loop3: detected capacity change from 0 to 1024 [ 71.415422][ T8064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.422722][ T8064] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1074: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.425470][ T8064] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 71.427889][ T8064] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.427889][ T8064] [ 71.433185][ T8049] nbd: device at index 64 is going down [ 71.445346][ T8076] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm iou-wrk-8064: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.464980][ T5337] udevd[5337]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 71.479134][ T4713] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 71.485566][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.019521][ T4724] Bluetooth: hci0: command tx timeout [ 72.213384][ T8102] loop1: detected capacity change from 0 to 1024 [ 72.219120][ T8101] loop8: detected capacity change from 0 to 512 [ 72.228660][ T8100] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 72.235519][ T8102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.241470][ T8100] team0: Port device geneve1 added [ 72.257843][ T8102] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1090: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.261213][ T8102] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 72.261253][ T8102] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.261253][ T8102] [ 72.277264][ T8112] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm iou-wrk-8102: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.277769][ T8101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.301988][ T8101] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1079: corrupted xattr block 33: overlapping e_value [ 72.304445][ T8101] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1079: corrupted xattr block 33: overlapping e_value [ 72.304656][ T8101] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1079: corrupted xattr block 33: overlapping e_value [ 72.306972][ T8101] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1079: corrupted xattr block 33: overlapping e_value [ 72.331831][ T7326] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 72.332527][ T7326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.431430][ T8131] loop7: detected capacity change from 0 to 128 [ 72.432951][ T8131] vfat: Unknown parameter 'uid-0x000000000000ee00' [ 72.487108][ T8141] loop7: detected capacity change from 0 to 128 [ 72.497403][ T6794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.575687][ T6753] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 72.575796][ T6753] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 72.661070][ T8144] VFS: Mount too revealing [ 73.123486][ T1922] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.172234][ T8203] input: syz1 as /devices/virtual/input/input16 [ 73.227589][ T8211] loop8: detected capacity change from 0 to 1024 [ 73.230694][ T8211] EXT4-fs: Ignoring removed orlov option [ 73.232659][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.233607][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.233915][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.234260][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.234491][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.255350][ T8211] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.258845][ T1922] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.271926][ T8211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.292364][ T8211] EXT4-fs (loop8): shut down requested (1) [ 73.349715][ T6794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.384265][ T8212] __nla_validate_parse: 2 callbacks suppressed [ 73.390278][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 73.390305][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 73.406329][ T1922] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.416467][ T1118] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.416692][ T3251] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.416718][ T3251] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.416734][ T3251] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.424172][ T8235] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.426150][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 73.426163][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 73.438792][ T8237] Bluetooth: hci0: unsupported parameter 255 [ 73.441105][ T8237] Bluetooth: hci0: unsupported parameter 128 [ 73.442195][ T8237] Bluetooth: hci0: unsupported parameter 255 [ 73.443219][ T8237] Bluetooth: hci0: unsupported parameter 128 [ 73.505792][ T1922] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.598746][ T8256] loop9: detected capacity change from 0 to 524287998 [ 73.628001][ T8262] input: syz0 as /devices/virtual/input/input17 [ 73.628034][ T8262] input: failed to attach handler leds to device input17, error: -6 [ 73.727991][ T8267] input: syz1 as /devices/virtual/input/input18 [ 73.732279][ T1922] bridge_slave_1: left allmulticast mode [ 73.732312][ T1922] bridge_slave_1: left promiscuous mode [ 73.732422][ T1922] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.739064][ T1922] bridge_slave_0: left allmulticast mode [ 73.739097][ T1922] bridge_slave_0: left promiscuous mode [ 73.739187][ T1922] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.750308][ T8258] Injecting memory failure for pfn 0x13c403 at process virtual address 0x20003000 [ 73.755176][ T8258] Memory failure: 0x13c403: recovery action for dirty LRU page: Recovered [ 73.846898][ T8271] loop0: detected capacity change from 0 to 4096 [ 73.848413][ T8271] EXT4-fs: inline encryption not supported [ 73.852592][ T8271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.852625][ T8271] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.871446][ T8271] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 73.871510][ T8271] System zones: 0-5 [ 73.875026][ T8271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.898729][ T1922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.906204][ T1922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.930764][ T1922] bond0 (unregistering): Released all slaves [ 73.960953][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.018820][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.018864][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.018971][ T8208] bridge_slave_0: entered allmulticast mode [ 74.019460][ T8208] bridge_slave_0: entered promiscuous mode [ 74.020470][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.020492][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.020552][ T8208] bridge_slave_1: entered allmulticast mode [ 74.020976][ T8208] bridge_slave_1: entered promiscuous mode [ 74.027557][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.028500][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.035256][ T8208] team0: Port device team_slave_0 added [ 74.036011][ T8208] team0: Port device team_slave_1 added [ 74.080300][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.080329][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.080345][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.166323][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.166352][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.166368][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.179674][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 74.215480][ T8208] hsr_slave_0: entered promiscuous mode [ 74.221378][ T8208] hsr_slave_1: entered promiscuous mode [ 74.221639][ T8208] debugfs: 'hsr0' already exists in 'hsr' [ 74.221649][ T8208] Cannot create hsr debugfs directory [ 74.229936][ T8310] netlink: 'syz.8.1139': attribute type 10 has an invalid length. [ 74.229967][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1139'. [ 74.245950][ T8310] team0: Port device geneve1 added [ 74.352023][ T8323] input: syz1 as /devices/virtual/input/input19 [ 74.377747][ T8327] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1154'. [ 74.438264][ T1922] hsr_slave_0: left promiscuous mode [ 74.439974][ T1922] hsr_slave_1: left promiscuous mode [ 74.441024][ T1922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.441310][ T1922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.443684][ T1922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.444341][ T1922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.454917][ T1922] veth1_macvtap: left promiscuous mode [ 74.454959][ T1922] veth0_macvtap: left promiscuous mode [ 74.455007][ T1922] veth1_vlan: left promiscuous mode [ 74.455048][ T1922] veth0_vlan: left promiscuous mode [ 74.617518][ T1922] team0 (unregistering): Port device team_slave_1 removed [ 74.621609][ T1922] team0 (unregistering): Port device team_slave_0 removed [ 74.667920][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 74.683193][ T8208] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 74.685600][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.686011][ T8208] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 74.687735][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.688026][ T8208] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 74.688991][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.689280][ T8208] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 74.690670][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.732641][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.738308][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.741699][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.741740][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.746605][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.746649][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.866835][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 74.898321][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.966861][ T8208] veth0_vlan: entered promiscuous mode [ 74.982069][ T8208] veth1_vlan: entered promiscuous mode [ 74.992322][ T8208] veth0_macvtap: entered promiscuous mode [ 74.994837][ T8208] veth1_macvtap: entered promiscuous mode [ 75.000607][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.005265][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.009287][ T3251] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.009329][ T3251] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.009348][ T3251] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.009362][ T3251] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043855][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 75.049011][ T3251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.049038][ T3251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.062149][ T1922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.062174][ T1922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.140435][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 75.140469][ T30] audit: type=1400 audit(75.120:61): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8411 comm="syz.1.1162" src=1 netif=wpan0 [ 75.276860][ T8436] loop3: detected capacity change from 0 to 4096 [ 75.293821][ T4720] Bluetooth: hci4: command tx timeout [ 75.318299][ T8436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.325971][ T8438] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 75.325996][ T8438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'. [ 75.328639][ T8438] team0: Port device geneve1 added [ 75.451561][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.499286][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1165'. [ 75.500722][ T8444] VFS: Mount too revealing [ 75.692149][ T8484] loop3: detected capacity change from 0 to 128 [ 75.778515][ T4713] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 75.778625][ T4713] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 75.829930][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 75.829965][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 76.060742][ T8511] netlink: 'syz.9.1184': attribute type 18 has an invalid length. [ 76.082869][ T1410] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.082968][ T1410] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.082996][ T1410] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.083011][ T1410] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.083083][ T8511] netlink: 'syz.9.1184': attribute type 18 has an invalid length. [ 76.274923][ T1410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.277021][ T1410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.319169][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.321695][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.323314][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.325033][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.326513][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.343292][ T8527] loop9: detected capacity change from 0 to 1024 [ 76.345247][ T8527] EXT4-fs: Ignoring removed orlov option [ 76.348232][ T1410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.348327][ T1410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.353471][ T8527] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.367602][ T8527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.378776][ T8527] EXT4-fs (loop9): shut down requested (1) [ 76.392807][ T8208] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.403275][ T1410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.403308][ T1410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.487360][ T1410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.487400][ T1410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.491152][ T8401] atkbd serio4: keyboard reset failed on [ 76.601542][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.601592][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.601662][ T8524] bridge_slave_0: entered allmulticast mode [ 76.602230][ T8524] bridge_slave_0: entered promiscuous mode [ 76.602909][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.602930][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.602984][ T8524] bridge_slave_1: entered allmulticast mode [ 76.604914][ T8524] bridge_slave_1: entered promiscuous mode [ 76.637912][ T1410] bridge_slave_1: left allmulticast mode [ 76.637942][ T1410] bridge_slave_1: left promiscuous mode [ 76.638013][ T1410] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.642536][ T1410] bridge_slave_0: left allmulticast mode [ 76.642563][ T1410] bridge_slave_0: left promiscuous mode [ 76.642866][ T1410] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.716178][ T1410] team0: Port device geneve1 removed [ 76.726740][ T1410] bond1 (unregistering): (slave bridge1): Releasing active interface [ 76.756662][ T1410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.781538][ T1410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.793318][ T1410] bond0 (unregistering): Released all slaves [ 76.795629][ T1410] bond1 (unregistering): Released all slaves [ 76.806443][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.812224][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.812855][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20 [ 76.819286][ T8524] team0: Port device team_slave_0 added [ 76.828387][ T8524] team0: Port device team_slave_1 added [ 76.845600][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.845625][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.845641][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.848017][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.848027][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.848042][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.863112][ T8524] hsr_slave_0: entered promiscuous mode [ 76.863470][ T8524] hsr_slave_1: entered promiscuous mode [ 76.863695][ T8524] debugfs: 'hsr0' already exists in 'hsr' [ 76.863704][ T8524] Cannot create hsr debugfs directory [ 77.009039][ T8588] loop8: detected capacity change from 0 to 4096 [ 77.012291][ T8588] EXT4-fs: inline encryption not supported [ 77.014112][ T8588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.015720][ T8588] EXT4-fs (loop8): Test dummy encryption mode enabled [ 77.018004][ T8588] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 77.020472][ T8588] System zones: 0-5 [ 77.022288][ T8588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.137941][ T6794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.144701][ T8598] syzkaller1: entered promiscuous mode [ 77.145840][ T8598] syzkaller1: entered allmulticast mode [ 77.216903][ T1410] hsr_slave_0: left promiscuous mode [ 77.218233][ T1410] hsr_slave_1: left promiscuous mode [ 77.218504][ T1410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.218514][ T1410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.224752][ T1410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.224786][ T1410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.239997][ T1410] veth1_macvtap: left promiscuous mode [ 77.240038][ T1410] veth0_macvtap: left promiscuous mode [ 77.240094][ T1410] veth1_vlan: left promiscuous mode [ 77.240130][ T1410] veth0_vlan: left promiscuous mode [ 77.380140][ T4724] Bluetooth: hci4: command tx timeout [ 77.411441][ T1410] team0 (unregistering): Port device team_slave_1 removed [ 77.416566][ T1410] team0 (unregistering): Port device team_slave_0 removed [ 77.494442][ T8631] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.494473][ T8631] overlayfs: failed to set xattr on upper [ 77.494479][ T8631] overlayfs: ...falling back to redirect_dir=nofollow. [ 77.494484][ T8631] overlayfs: ...falling back to index=off. [ 77.494489][ T8631] overlayfs: ...falling back to uuid=null. [ 77.494494][ T8631] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 77.544931][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 77.670193][ T8646] loop8: detected capacity change from 0 to 4096 [ 77.695271][ T8646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.767438][ T6794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.815425][ T1410] IPVS: stop unused estimator thread 0... [ 77.877414][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 78.329552][ T4724] Bluetooth: hci2: command tx timeout [ 78.563894][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 78.659034][ T8524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.660983][ T1117] atkbd serio5: keyboard reset failed on [ 78.670502][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.671339][ T8524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.680305][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.680627][ T8524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.691797][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.694077][ T8524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.704869][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.756545][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.763561][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.767741][ T1922] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.767785][ T1922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.777763][ T1922] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.777807][ T1922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.964952][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.989839][ T8524] veth0_vlan: entered promiscuous mode [ 78.995450][ T8524] veth1_vlan: entered promiscuous mode [ 79.022398][ T8524] veth0_macvtap: entered promiscuous mode [ 79.024842][ T8524] veth1_macvtap: entered promiscuous mode [ 79.034886][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.041409][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.048387][ T1410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.048482][ T1410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.048508][ T1410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.048523][ T1410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.077088][ T1919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.077120][ T1919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.104350][ T1922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.104376][ T1922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.129717][ T8774] __nla_validate_parse: 11 callbacks suppressed [ 79.129748][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1240'. [ 79.129766][ T8774] netlink: 'syz.8.1240': attribute type 18 has an invalid length. [ 79.129775][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1240'. [ 79.132413][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1240'. [ 79.132438][ T8774] netlink: 'syz.8.1240': attribute type 18 has an invalid length. [ 79.132447][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1240'. [ 79.133351][ T1410] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.136498][ T1922] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.136529][ T1922] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.136544][ T1922] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.333756][ T8808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.333784][ T8808] overlayfs: failed to set xattr on upper [ 79.334442][ T8808] overlayfs: ...falling back to redirect_dir=nofollow. [ 79.334602][ T8808] overlayfs: ...falling back to index=off. [ 79.334757][ T8808] overlayfs: ...falling back to uuid=null. [ 79.335317][ T8808] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 79.453622][ T4724] Bluetooth: hci4: command tx timeout [ 79.747433][ T8875] loop9: detected capacity change from 0 to 1024 [ 79.754790][ T8875] EXT4-fs: Ignoring removed bh option [ 79.758081][ T8875] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.784108][ T8875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.831689][ T8888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24 [ 79.860364][ T8208] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.867475][ T8208] EXT4-fs (loop9): Remounting filesystem read-only [ 79.873335][ T8208] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.410604][ T4724] Bluetooth: hci2: command tx timeout [ 80.773289][ T9021] loop0: detected capacity change from 0 to 512 [ 80.775675][ T9021] EXT4-fs: Ignoring removed nobh option [ 80.794453][ T9021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.828119][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.156098][ T9054] netlink: 'syz.9.1294': attribute type 1 has an invalid length. [ 81.156130][ T9054] netlink: 'syz.9.1294': attribute type 4 has an invalid length. [ 81.156155][ T9054] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.1294'. [ 81.172179][ T30] audit: type=1326 audit(81.150:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9051 comm="syz.1.1304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab178f68 code=0x0 [ 81.284091][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.286189][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.287850][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.291526][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.293076][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.445747][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.445834][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.445897][ T9061] bridge_slave_0: entered allmulticast mode [ 81.446363][ T9061] bridge_slave_0: entered promiscuous mode [ 81.447571][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.447622][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.447679][ T9061] bridge_slave_1: entered allmulticast mode [ 81.448112][ T9061] bridge_slave_1: entered promiscuous mode [ 81.455892][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.456837][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.481103][ T9061] team0: Port device team_slave_0 added [ 81.482441][ T9061] team0: Port device team_slave_1 added [ 81.492683][ T9082] loop8: detected capacity change from 0 to 1024 [ 81.494460][ T9082] EXT4-fs: Ignoring removed bh option [ 81.501041][ T9082] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 81.506918][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.508191][ T9083] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25 [ 81.508384][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.508406][ T9061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.511351][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.511361][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.511376][ T9061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.520065][ T9082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.530867][ T9061] hsr_slave_0: entered promiscuous mode [ 81.531231][ T9061] hsr_slave_1: entered promiscuous mode [ 81.531447][ T9061] debugfs: 'hsr0' already exists in 'hsr' [ 81.531463][ T9061] Cannot create hsr debugfs directory [ 81.538189][ T4724] Bluetooth: hci4: command tx timeout [ 81.611580][ T6794] EXT4-fs error (device loop8): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /151/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 81.616225][ T6794] EXT4-fs (loop8): Remounting filesystem read-only [ 81.619131][ T6794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.662688][ T9061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.665064][ T9061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.732392][ T9061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.734145][ T9061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.788897][ T9061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.789002][ T9061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.852099][ T9061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.852136][ T9061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.957670][ T9061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.960016][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.961682][ T9061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.963807][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.965349][ T9061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.967848][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.968311][ T9061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.970858][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.996081][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.002447][ T9061] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.005506][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.005549][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.010208][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.010245][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.135765][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.154354][ T9061] veth0_vlan: entered promiscuous mode [ 82.157428][ T9061] veth1_vlan: entered promiscuous mode [ 82.173716][ T9061] veth0_macvtap: entered promiscuous mode [ 82.176354][ T9061] veth1_macvtap: entered promiscuous mode [ 82.184592][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.189028][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.193783][ T1919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.193880][ T1919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.194094][ T1919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.194112][ T1919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.235714][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.235745][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.251490][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.251516][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.285608][ T9132] loop1: detected capacity change from 0 to 1024 [ 82.285950][ T9132] EXT4-fs: Ignoring removed bh option [ 82.287885][ T9132] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.336759][ T7326] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /98/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 82.341863][ T7326] EXT4-fs (loop1): Remounting filesystem read-only [ 82.489612][ T4724] Bluetooth: hci2: command tx timeout [ 82.761927][ T30] audit: type=1326 audit(82.740:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9165 comm="syz.8.1324" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7d78f68 code=0x0 [ 82.805169][ T9171] loop2: detected capacity change from 0 to 512 [ 82.805492][ T9171] EXT4-fs: Ignoring removed i_version option [ 82.805503][ T9171] EXT4-fs: Ignoring removed nobh option [ 82.813058][ T9171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.815686][ T9171] EXT4-fs (loop2): 1 truncate cleaned up [ 82.866742][ T9175] overlayfs: failed to verify origin (20/file1, ino=141, err=-61) [ 83.369656][ T4724] Bluetooth: hci1: command tx timeout [ 84.094023][ T9232] tipc: Started in network mode [ 84.095618][ T9232] tipc: Node identity 2007ff, cluster identity 4711 [ 84.095652][ T9232] tipc: Node number set to 2099199 [ 84.207836][ T9243] loop2: detected capacity change from 0 to 4096 [ 84.213023][ T9245] loop8: detected capacity change from 0 to 4096 [ 84.215615][ T9245] EXT4-fs: inline encryption not supported [ 84.260072][ T9243] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.283255][ T9243] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0103] [ 84.283323][ T9243] System zones: 0-5 [ 84.287902][ T9253] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.292777][ T9253] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.378562][ T9257] loop9: detected capacity change from 0 to 2048 [ 84.514711][ T9268] mmap: syz.2.1361 (9268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.569768][ T4724] Bluetooth: hci2: command tx timeout [ 84.715982][ T9274] loop1: detected capacity change from 0 to 8192 [ 84.723354][ T9274] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 84.725867][ T9274] FAT-fs (loop1): Filesystem has been set read-only [ 84.894853][ T9283] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.898131][ T9283] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 85.449744][ T4724] Bluetooth: hci1: command tx timeout [ 85.784886][ T9330] syzkaller0: entered promiscuous mode [ 85.786028][ T9330] syzkaller0: entered allmulticast mode [ 86.073295][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1402'. [ 86.074539][ T9357] loop8: detected capacity change from 0 to 2048 [ 86.127881][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1402'. [ 86.129789][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1402'. [ 86.204262][ T9377] loop9: detected capacity change from 0 to 512 [ 86.600060][ T9407] loop9: detected capacity change from 0 to 128 [ 86.612649][ T9405] syzkaller0: entered promiscuous mode [ 86.612676][ T9405] syzkaller0: entered allmulticast mode [ 86.674766][ T9410] loop6: detected capacity change from 0 to 7 [ 86.789234][ T9410] Dev loop6: unable to read RDB block 7 [ 86.789273][ T9410] loop6: unable to read partition table [ 86.789340][ T9410] loop6: partition table beyond EOD, truncated [ 86.789360][ T9410] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 86.859974][ T9416] loop2: detected capacity change from 0 to 8192 [ 86.867503][ T9416] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.078816][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1421'. [ 87.185447][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 87.187064][ T9426] netlink: 'syz.2.1421': attribute type 26 has an invalid length. [ 87.341502][ T9425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1421'. [ 87.519099][ T9454] loop2: detected capacity change from 0 to 512 [ 87.523041][ T9454] EXT4-fs: Ignoring removed nobh option [ 87.532543][ T4724] Bluetooth: hci1: command tx timeout [ 87.619012][ T9462] overlayfs: failed to verify origin (189/file1, ino=1072, err=-61) [ 87.746179][ T9483] loop0: detected capacity change from 0 to 2048 [ 88.336879][ T9553] loop0: detected capacity change from 0 to 1024 [ 88.339178][ T9553] EXT4-fs: Ignoring removed orlov option [ 88.405034][ T9553] EXT4-fs (loop0): shut down requested (2) [ 88.406748][ T9553] overlayfs: failed to get metacopy (-5) [ 88.471147][ T9559] loop9: detected capacity change from 0 to 2048 [ 88.514680][ T9563] loop8: detected capacity change from 0 to 4096 [ 88.575582][ T9563] EXT4-fs (loop8): shut down requested (1) [ 88.724190][ T9576] EXT4-fs: Ignoring removed bh option [ 88.724579][ T9576] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 88.758483][ T9576] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.1467: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 88.758933][ T9576] EXT4-fs (loop9): Remounting filesystem read-only [ 88.865920][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.873838][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1472'. [ 88.877019][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1472'. [ 88.932859][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.996102][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.999647][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.001212][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.007008][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.008527][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.025012][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.103970][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.107426][ T30] audit: type=1326 audit(89.080:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9609 comm="syz.9.1479" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef78f68 code=0x0 [ 89.276588][ T40] bridge_slave_1: left allmulticast mode [ 89.276912][ T40] bridge_slave_1: left promiscuous mode [ 89.276984][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.284708][ T40] bridge_slave_0: left allmulticast mode [ 89.284737][ T40] bridge_slave_0: left promiscuous mode [ 89.284811][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.401681][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.413038][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.453388][ T40] bond0 (unregistering): Released all slaves [ 89.505152][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.505224][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.505379][ T9599] bridge_slave_0: entered allmulticast mode [ 89.505916][ T9599] bridge_slave_0: entered promiscuous mode [ 89.506975][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.507024][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.507081][ T9599] bridge_slave_1: entered allmulticast mode [ 89.507665][ T9599] bridge_slave_1: entered promiscuous mode [ 89.519037][ T9599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.522908][ T9599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.567778][ T9599] team0: Port device team_slave_0 added [ 89.569154][ T9599] team0: Port device team_slave_1 added [ 89.583337][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.583364][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.583379][ T9599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.589675][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.589684][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.589695][ T9599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.644260][ T9658] bio_check_eod: 17472 callbacks suppressed [ 89.644381][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644381][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644411][ T9658] buffer_io_error: 17472 callbacks suppressed [ 89.644417][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644614][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644614][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644639][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644667][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644667][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644687][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644707][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644707][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644726][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644745][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644745][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644764][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644782][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644782][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644811][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644834][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644834][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644853][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644871][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644871][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644889][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644907][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644907][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644926][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.644944][ T9658] syz.8.1489: attempt to access beyond end of device [ 89.644944][ T9658] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 89.644963][ T9658] Buffer I/O error on dev loop8, logical block 57847, async page read [ 89.685626][ T9599] hsr_slave_0: entered promiscuous mode [ 89.686966][ T9599] hsr_slave_1: entered promiscuous mode [ 89.688343][ T9599] debugfs: 'hsr0' already exists in 'hsr' [ 89.688937][ T9599] Cannot create hsr debugfs directory [ 89.691564][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 89.837549][ T40] hsr_slave_0: left promiscuous mode [ 89.838268][ T40] hsr_slave_1: left promiscuous mode [ 89.840496][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.840513][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.850124][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.850150][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.864974][ T40] veth1_macvtap: left promiscuous mode [ 89.865022][ T40] veth0_macvtap: left promiscuous mode [ 89.865113][ T40] veth1_vlan: left promiscuous mode [ 89.865144][ T40] veth0_vlan: left promiscuous mode [ 90.064550][ T40] team0 (unregistering): Port device team_slave_1 removed [ 90.073302][ T40] team0 (unregistering): Port device team_slave_0 removed [ 90.174757][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 90.516493][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.812686][ T9599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.831399][ T9599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.831727][ T9599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.843853][ T9599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.844367][ T9599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.875423][ T9599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.875755][ T9599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.883224][ T9599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.940313][ T9775] binder: 9773:9775 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.940350][ T9775] binder: 9775 RLIMIT_NICE not set [ 90.954826][ T9599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.963657][ T9599] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.973127][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.973170][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.977116][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.977159][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.995965][ T9775] binder: 9773:9775 ioctl c0306201 20000040 returned -14 [ 91.049662][ T4724] Bluetooth: hci1: command tx timeout [ 91.065598][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.203680][ T9789] ubi0: attaching mtd0 [ 91.204873][ T9789] ubi0 error: ubi_attach_mtd_dev: bad VID header (2228560) or data offsets (2228624) [ 91.205619][ T9599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.298108][ T9825] set_capacity_and_notify: 3 callbacks suppressed [ 91.299444][ T9825] loop2: detected capacity change from 0 to 128 [ 91.319116][ T9825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 91.319180][ T9825] System zones: 1-3, 19-19, 35-36 [ 91.336864][ T9599] veth0_vlan: entered promiscuous mode [ 91.346668][ T9599] veth1_vlan: entered promiscuous mode [ 91.363197][ T9599] veth0_macvtap: entered promiscuous mode [ 91.365967][ T9599] veth1_macvtap: entered promiscuous mode [ 91.372753][ T9599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.373774][ T9599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.382713][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.382889][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.383093][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.383119][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.384248][ T9833] loop8: detected capacity change from 0 to 128 [ 91.384990][ T9833] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.385207][ T9833] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.468489][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.468520][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.495662][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.495693][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.776798][ T9881] loop2: detected capacity change from 0 to 4096 [ 91.798313][ T9881] EXT4-fs (loop2): shut down requested (1) [ 91.875299][ T9897] Bluetooth: hci0: unsupported parameter 255 [ 91.875337][ T9897] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 91.970344][ T9914] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1539'. [ 92.180185][ C0] vcan0: j1939_tp_rxtimer: 0x000000008579d7aa: rx timeout, send abort [ 92.180359][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000008579d7aa: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.180787][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000064ff9069: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.435188][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1545'. [ 92.443727][ T15] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.443750][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1545'. [ 92.443783][ T15] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.443803][ T15] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.443820][ T15] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.677004][ T9893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.780272][ T9996] input: syz1 as /devices/virtual/input/input26 [ 92.837544][T10002] loop5: detected capacity change from 0 to 512 [ 93.131249][ T4724] Bluetooth: hci1: command tx timeout [ 93.235179][ T1919] nci: nci_rsp_packet: unknown rsp opcode 0xd [ 93.285211][T10063] batadv_slave_1: entered promiscuous mode [ 93.290872][T10062] batadv_slave_1: left promiscuous mode [ 93.521721][T10091] loop9: detected capacity change from 0 to 1024 [ 93.529091][T10091] EXT4-fs: Ignoring removed nobh option [ 93.531823][T10091] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.535812][T10091] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 1: comm syz.9.1579: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.538770][T10091] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.538952][T10091] Quota error (device loop9): write_blk: dquota write failed [ 93.540639][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 93.540649][ C1] EXT4-fs (loop9): initial error at time 93: ext4_map_blocks:833: inode 3: block 1 [ 93.540671][ C1] EXT4-fs (loop9): last error at time 93: ext4_map_blocks:833: inode 3: block 1 [ 93.549566][T10091] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 93.551260][T10091] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1579: Failed to acquire dquot type 0 [ 93.552900][T10091] loop9: lost filesystem error report for type 5 error -117 [ 93.553678][T10091] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.1579: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.553706][T10091] loop9: lost filesystem error report for type 5 error -117 [ 93.560246][T10091] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.1579: Invalid inode bitmap blk 0 in block_group 0 [ 93.560285][T10091] loop9: lost filesystem error report for type 5 error -117 [ 93.564362][T10091] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 93.564401][T10091] loop9: lost filesystem error report for type 5 error -117 [ 93.567617][T10091] EXT4-fs (loop9): 1 orphan inode deleted [ 93.688507][T10106] loop9: detected capacity change from 0 to 4096 [ 93.692235][T10106] EXT4-fs: inline encryption not supported [ 93.971543][T10040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.086089][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 94.343286][T10175] ================================================================== [ 94.343301][T10175] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x374/0x414 [ 94.343326][T10175] Read of size 4 at addr ffff0000cbaf7e3c by task syz.9.1595/10175 [ 94.343337][T10175] [ 94.343344][T10175] CPU: 1 UID: 0 PID: 10175 Comm: syz.9.1595 Tainted: G L syzkaller #0 PREEMPT [ 94.343355][T10175] Tainted: [L]=SOFTLOCKUP [ 94.343359][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 94.343363][T10175] Call trace: [ 94.343366][T10175] show_stack+0x2c/0x3c (C) [ 94.343379][T10175] __dump_stack+0x30/0x40 [ 94.343389][T10175] dump_stack_lvl+0xd8/0x12c [ 94.343399][T10175] print_address_description+0xb0/0x238 [ 94.343407][T10175] print_report+0x68/0x84 [ 94.343413][T10175] kasan_report+0x8c/0xc4 [ 94.343423][T10175] __asan_report_load4_noabort+0x20/0x2c [ 94.343435][T10175] dvb_frontend_release+0x374/0x414 [ 94.343444][T10175] __fput+0x338/0x74c [ 94.343452][T10175] ____fput+0x20/0x30 [ 94.343459][T10175] task_work_run+0x1cc/0x25c [ 94.343469][T10175] get_signal+0xf30/0x1094 [ 94.343476][T10175] arch_do_signal_or_restart+0x288/0x444c [ 94.343486][T10175] exit_to_user_mode_loop+0x70/0x17c [ 94.343495][T10175] el0_svc+0x18c/0x260 [ 94.343505][T10175] el0t_64_sync_handler+0x48/0x148 [ 94.343514][T10175] el0t_64_sync+0x198/0x19c [ 94.343522][T10175] [ 94.343523][T10175] Allocated by task 1: [ 94.343527][T10175] kasan_save_track+0x40/0x78 [ 94.343534][T10175] kasan_save_alloc_info+0x44/0x54 [ 94.343542][T10175] __kasan_kmalloc+0x9c/0xb4 [ 94.343549][T10175] __kmalloc_cache_noprof+0x2e8/0x5ec [ 94.343556][T10175] dvb_register_device+0x1a4/0x16e0 [ 94.343565][T10175] dvb_register_frontend+0x474/0x6d0 [ 94.343572][T10175] vidtv_bridge_probe+0x5a4/0xa58 [ 94.343580][T10175] platform_probe+0x100/0x1a4 [ 94.343587][T10175] really_probe+0x29c/0x800 [ 94.343594][T10175] __driver_probe_device+0x1e0/0x350 [ 94.343602][T10175] driver_probe_device+0x6c/0x19c [ 94.343609][T10175] __driver_attach+0x168/0x384 [ 94.343616][T10175] bus_for_each_dev+0x128/0x1b4 [ 94.343623][T10175] driver_attach+0x50/0x60 [ 94.343630][T10175] bus_add_driver+0x208/0x500 [ 94.343636][T10175] driver_register+0x220/0x310 [ 94.343644][T10175] __platform_driver_register+0x90/0xa4 [ 94.343652][T10175] vidtv_bridge_init+0x4c/0x74 [ 94.343663][T10175] do_one_initcall+0x274/0xc38 [ 94.343671][T10175] do_initcall_level+0x12c/0x1c4 [ 94.343678][T10175] do_initcalls+0x70/0xd0 [ 94.343685][T10175] do_basic_setup+0x7c/0x90 [ 94.343691][T10175] kernel_init_freeable+0x268/0x3a8 [ 94.343698][T10175] kernel_init+0x24/0x1dc [ 94.343705][T10175] ret_from_fork+0x10/0x20 [ 94.343710][T10175] [ 94.343712][T10175] Freed by task 10175: [ 94.343715][T10175] kasan_save_track+0x40/0x78 [ 94.343721][T10175] kasan_save_free_info+0x58/0x70 [ 94.343729][T10175] __kasan_slab_free+0x74/0xa4 [ 94.343736][T10175] kfree+0x188/0x690 [ 94.343741][T10175] dvb_device_put+0x64/0xd0 [ 94.343749][T10175] dvb_generic_release+0xec/0x158 [ 94.343758][T10175] dvb_frontend_release+0x114/0x414 [ 94.343765][T10175] __fput+0x338/0x74c [ 94.343770][T10175] ____fput+0x20/0x30 [ 94.343776][T10175] task_work_run+0x1cc/0x25c [ 94.343783][T10175] get_signal+0xf30/0x1094 [ 94.343789][T10175] arch_do_signal_or_restart+0x288/0x444c [ 94.343797][T10175] exit_to_user_mode_loop+0x70/0x17c [ 94.343803][T10175] el0_svc+0x18c/0x260 [ 94.343810][T10175] el0t_64_sync_handler+0x48/0x148 [ 94.343818][T10175] el0t_64_sync+0x198/0x19c [ 94.343823][T10175] [ 94.343825][T10175] The buggy address belongs to the object at ffff0000cbaf7e00 [ 94.343825][T10175] which belongs to the cache kmalloc-256 of size 256 [ 94.343831][T10175] The buggy address is located 60 bytes inside of [ 94.343831][T10175] freed 256-byte region [ffff0000cbaf7e00, ffff0000cbaf7f00) [ 94.343838][T10175] [ 94.343840][T10175] The buggy address belongs to the physical page: [ 94.343843][T10175] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10baf6 [ 94.343850][T10175] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.343856][T10175] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 94.343864][T10175] page_type: f5(slab) [ 94.343870][T10175] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 94.343876][T10175] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 94.343882][T10175] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 94.343887][T10175] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 94.343893][T10175] head: 05ffc00000000001 fffffdffc32ebd81 00000000ffffffff 00000000ffffffff [ 94.343898][T10175] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 94.343902][T10175] page dumped because: kasan: bad access detected [ 94.343905][T10175] [ 94.343906][T10175] Memory state around the buggy address: [ 94.343910][T10175] ffff0000cbaf7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.343914][T10175] ffff0000cbaf7d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.343919][T10175] >ffff0000cbaf7e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.343922][T10175] ^ [ 94.343926][T10175] ffff0000cbaf7e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.343930][T10175] ffff0000cbaf7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.343933][T10175] ================================================================== [ 94.355870][T10180] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 94.379450][T10180] gretap1: entered allmulticast mode [ 94.381285][T10180] bond1: (slave gretap1): making interface the new active one [ 94.382515][T10180] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 94.429870][T10175] Disabling lock debugging due to kernel taint [ 94.483074][ T30] audit: type=1326 audit(94.460:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.483235][ T30] audit: type=1326 audit(94.460:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496285][ T30] audit: type=1326 audit(94.470:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496386][ T30] audit: type=1326 audit(94.470:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496465][ T30] audit: type=1326 audit(94.470:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496543][ T30] audit: type=1326 audit(94.470:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496703][ T30] audit: type=1326 audit(94.470:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496758][ T30] audit: type=1326 audit(94.470:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.496916][ T30] audit: type=1326 audit(94.470:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 94.497044][ T30] audit: type=1326 audit(94.470:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.2.1594" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f178f68 code=0x7ffc0000 [ 95.210365][ T4724] Bluetooth: hci1: command tx timeout [ 97.289528][ T4724] Bluetooth: hci1: command tx timeout