last executing test programs: 5m24.30213354s ago: executing program 3 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x8, 0x0, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='2G', 0x2}], 0x1}, 0x4) 5m12.606269342s ago: executing program 3 (id=463): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000200)={[{@nogrpid}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@dax_always}]}, 0xc2, 0x9606, &(0x7f0000012cc0)="$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") 5m11.478459712s ago: executing program 4 (id=469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb00000080000082760000000000", 0x24}, {&(0x7f0000000880)="f058050000647ba33a78", 0xa}], 0x2}, 0x5) 5m10.542663131s ago: executing program 3 (id=471): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1ff, 0x0, 0xfff, 0x4, 0xd218, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 4m59.020096304s ago: executing program 4 (id=478): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 4m58.982571576s ago: executing program 3 (id=479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fda={0x66646185, 0x5, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4m58.797386806s ago: executing program 4 (id=483): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x14022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x222020, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0) 4m58.321988231s ago: executing program 4 (id=484): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f", 0x69}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x2f8}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x40}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) 4m58.240241575s ago: executing program 4 (id=485): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 4m58.119522911s ago: executing program 3 (id=486): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a3, &(0x7f00000005c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x400000000000230, 0x2, 0x0) 4m57.240459347s ago: executing program 3 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb00000080000082760000000000", 0x24}, {&(0x7f0000000880)="f058050000647ba33a78", 0xa}], 0x2}, 0x5) 4m56.029913571s ago: executing program 4 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4m43.683436587s ago: executing program 32 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) 4m42.649464681s ago: executing program 33 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 4m42.635847452s ago: executing program 34 (id=488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009e40)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 4m42.182864746s ago: executing program 35 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb00000080000082760000000000", 0x24}, {&(0x7f0000000880)="f058050000647ba33a78", 0xa}], 0x2}, 0x5) 4m40.682151714s ago: executing program 36 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4m18.076341958s ago: executing program 6 (id=516): socket(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) getcwd(0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) 4m16.774409796s ago: executing program 6 (id=522): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2001045c, &(0x7f0000000080)=ANY=[], 0x1, 0x1540, &(0x7f0000001ec0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 4m14.652461477s ago: executing program 6 (id=533): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4m12.429712463s ago: executing program 6 (id=527): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000213000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r6, &(0x7f00000000c0), 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 4m11.54088938s ago: executing program 6 (id=528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fda={0x66646185, 0x5, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4m10.681270205s ago: executing program 6 (id=529): memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m55.548375977s ago: executing program 37 (id=529): memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m58.155109684s ago: executing program 5 (id=862): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}}}, 0x0) 1m55.839988675s ago: executing program 9 (id=874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x4, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m45.855854918s ago: executing program 9 (id=886): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m45.837408899s ago: executing program 5 (id=887): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x10) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) 1m45.346008784s ago: executing program 5 (id=889): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) tkill(0x0, 0xb) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 1m45.031921901s ago: executing program 9 (id=890): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) close(r4) pipe2$9p(&(0x7f0000000080), 0x800) r6 = timerfd_create(0x7, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x80000, 0x9) timerfd_gettime(r6, &(0x7f0000001200)) 1m44.114258779s ago: executing program 9 (id=897): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}}}, 0x0) 1m43.897752921s ago: executing program 5 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 1m31.993634964s ago: executing program 5 (id=913): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x10) socket$kcm(0x11, 0x2, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) 1m31.901671469s ago: executing program 9 (id=914): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 1m30.764206308s ago: executing program 5 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x4, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m30.341767581s ago: executing program 9 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m14.928719928s ago: executing program 38 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x4, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m14.883768579s ago: executing program 39 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4.845914677s ago: executing program 7 (id=1330): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001e40)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @f={0xfc, 0x0, 0x2, 0xe, {0x6, 0x30e, "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"}, 0x1}}, 0x318) 4.507863434s ago: executing program 8 (id=1332): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) close(r3) pipe2$9p(&(0x7f0000000080), 0x800) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x80000, 0x9) readv(r4, 0x0, 0x0) timerfd_gettime(r4, &(0x7f0000001200)) 4.253843417s ago: executing program 1 (id=1335): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}}}, 0x0) 4.229845598s ago: executing program 1 (id=1336): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) 3.558666364s ago: executing program 8 (id=1340): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x8, 0xff, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0) close(r1) 3.478119738s ago: executing program 2 (id=1342): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.477890638s ago: executing program 2 (id=1343): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x10) socket$kcm(0x11, 0x2, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) 3.336517455s ago: executing program 1 (id=1344): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x10) socket$kcm(0x11, 0x2, 0x0) 2.985349554s ago: executing program 0 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) semget(0x3, 0x0, 0x608) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) socket(0x10, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 2.532337968s ago: executing program 8 (id=1349): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) getresuid(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, 0x580, 0x800) 2.531379078s ago: executing program 2 (id=1350): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) close(r4) pipe2$9p(&(0x7f0000000080), 0x800) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x80000, 0x9) readv(r5, 0x0, 0x0) timerfd_gettime(r5, &(0x7f0000001200)) 2.369827296s ago: executing program 1 (id=1351): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.202881425s ago: executing program 2 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4080) sendmsg$nl_route_sched(r3, 0x0, 0x40408c4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x4, 0x0) 1.759371988s ago: executing program 0 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.331017591s ago: executing program 8 (id=1354): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) 1.330277911s ago: executing program 2 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1, &(0x7f0000000480)=""/44, 0x2c}, 0x10000) 1.325126551s ago: executing program 7 (id=1356): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/59, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 1.15000469s ago: executing program 0 (id=1357): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}}}, 0x0) 1.14977369s ago: executing program 7 (id=1358): socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003100)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4048885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.114465702s ago: executing program 0 (id=1359): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x8, 0xff, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0) close(r1) 1.076447004s ago: executing program 7 (id=1360): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x10) socket$kcm(0x11, 0x2, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) 475.124665ms ago: executing program 2 (id=1361): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x10) socket$kcm(0x11, 0x2, 0x0) 350.144762ms ago: executing program 8 (id=1362): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) close(r4) pipe2$9p(&(0x7f0000000080), 0x800) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x80000, 0x9) readv(r5, 0x0, 0x0) timerfd_gettime(r5, &(0x7f0000001200)) 244.457538ms ago: executing program 0 (id=1363): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') truncate(&(0x7f0000000140)='./file2\x00', 0xff) 111.053684ms ago: executing program 7 (id=1364): quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee01, 0x0) 108.068745ms ago: executing program 1 (id=1365): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 65.030847ms ago: executing program 8 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r3, &(0x7f0000003f00)={0x2020}, 0x2020) 1.22865ms ago: executing program 7 (id=1367): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(0x0, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r9, 0x0) 1.08575ms ago: executing program 1 (id=1368): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0xfffffffffffffcfd, 0xffffffffffffffff}) 0s ago: executing program 0 (id=1369): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2f, 0x14, 0x68, 0x0, 0x9, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback}}}}}, 0x0) kernel console output (not intermixed with test programs): 39.736578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.738064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.739526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.740979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.754180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.755876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.759036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.760688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.762227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.763732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.778243][ T6277] device veth0_macvtap entered promiscuous mode [ 239.783509][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.784850][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.790772][ T4748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.792055][ T4748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.793225][ T6277] device veth1_macvtap entered promiscuous mode [ 239.801619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.803269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.804876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.806656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.808370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.810041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.813326][ T6253] device veth0_vlan entered promiscuous mode [ 239.830188][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.831731][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.833235][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.834700][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.845926][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.847713][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.849316][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.851091][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.852873][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.854690][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.856617][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.858325][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.860960][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.862292][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.863929][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.866259][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.868087][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.874888][ T6253] device veth1_vlan entered promiscuous mode [ 239.883526][ T6272] device veth0_macvtap entered promiscuous mode [ 239.886864][ T6272] device veth1_macvtap entered promiscuous mode [ 239.892025][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.893650][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.895232][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.900760][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.902318][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.903991][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.905540][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.908376][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.909964][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.911614][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.913237][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.915019][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.917240][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.918987][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.921688][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.923629][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.925255][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.933961][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.935980][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.937493][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.939087][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.940556][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.942168][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.032054][ T1861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.038219][ T6253] device veth0_macvtap entered promiscuous mode [ 240.040625][ T6253] device veth1_macvtap entered promiscuous mode [ 240.089340][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.091218][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.093151][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.094921][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.109692][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.132455][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.242414][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.251424][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.280522][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.293556][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.367164][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.371872][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.373757][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.375393][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.377783][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.379856][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.390398][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.392341][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.395080][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.398341][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.400167][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.402098][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.404020][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.410839][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.412668][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.414498][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.418492][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.420528][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.423033][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.458022][ T6502] binder: 6501:6502 ioctl c0306201 0 returned -14 [ 240.460663][ T6502] binder: 6501:6502 got transaction to invalid handle, 1 [ 240.461885][ T6502] binder: 6502:6501 cannot find target node [ 240.462851][ T6502] binder: 6501:6502 transaction call to 0:0 failed 42/29201/-22, size 0-0 line 3045 [ 240.465234][ T6502] binder: 6501:6502 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 240.469443][ T1861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.472001][ T6502] binder: 6502 RLIMIT_NICE not set [ 240.473328][ T6277] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.474807][ T6277] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.478422][ T6277] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.479928][ T6277] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.482386][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.483990][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.487801][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.516405][ T6507] binder: 6501:6507 got reply transaction with no transaction stack [ 240.518023][ T6507] binder: 6501:6507 transaction reply to 0:0 failed 43/29201/-71, size 104-24 line 2946 [ 240.537063][ T1861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.547132][ T6272] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.548619][ T6272] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.550355][ T6272] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.554050][ T6272] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.627278][ T1861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.631747][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.633825][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.635513][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.638175][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.639885][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.641656][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.643389][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.645243][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.647649][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.649573][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.651274][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.653083][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.654869][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.656845][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.658549][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.660348][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.663217][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.675481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.679195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.710965][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.714167][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.717668][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.719599][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.721300][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.723071][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.724711][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.726939][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.728549][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.730415][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.732147][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.733941][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.735520][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.737991][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.740947][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.749139][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.751389][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.755059][ T6253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.756803][ T6253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.758457][ T6253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.759932][ T6253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.770459][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.771873][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.773150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.922095][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.923494][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.927399][ T4436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.928147][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.928665][ T4436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.929934][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.951707][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.955378][ T4748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.956885][ T4748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.958572][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.964127][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.053218][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.273719][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.275035][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.277726][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.318159][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.319311][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.427175][ T6543] device syzkaller0 entered promiscuous mode [ 241.431961][ T6539] device syzkaller0 entered promiscuous mode [ 241.562586][ T6540] loop7: detected capacity change from 0 to 32768 [ 241.589894][ T6540] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 241.591313][ T6540] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 241.603493][ T6540] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 241.605376][ T1515] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 241.606921][ T1515] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 241.623847][ T1515] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 16ms [ 241.628417][ T1515] gfs2: fsid=syz:syz.0: jid=0: Done [ 241.629275][ T6540] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 241.994252][ T6555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.097309][ T4326] Bluetooth: hci7: unknown advertising packet type: 0x75 [ 242.097770][ T4326] Bluetooth: hci7: Malformed LE Event: 0x02 [ 242.355395][ T91] Bluetooth: hci0: Frame reassembly failed (-84) [ 242.360895][ T91] Bluetooth: hci0: Frame reassembly failed (-84) [ 242.926702][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.928362][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.963798][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.965215][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.995852][ T6567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.291650][ T6590] loop5: detected capacity change from 0 to 32768 [ 243.297278][ T6590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.503 (6590) [ 243.349776][ T6590] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.352008][ T6590] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 243.353436][ T6590] BTRFS info (device loop5): using free space tree [ 243.494229][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.495947][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.816502][ T6590] BTRFS info (device loop5): enabling ssd optimizations [ 243.935152][ T6625] loop9: detected capacity change from 0 to 256 [ 244.010949][ T6626] Cannot find del_set index 0 as target [ 244.018981][ T6626] BTRFS error (device loop5: state M): unrecognized mount option '00000000000000000000005ÿÿÿ' [ 244.043956][ T6626] netlink: 34 bytes leftover after parsing attributes in process `syz.5.503'. [ 244.379746][ T6625] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe39e6da7, utbl_chksum : 0x7319d30d) [ 244.396418][ T4326] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 244.400549][ T6253] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.426141][ T6651] loop9: detected capacity change from 0 to 1024 [ 245.438448][ T6651] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 245.441907][ T6653] loop5: detected capacity change from 0 to 256 [ 245.444470][ T6653] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 245.496319][ T6653] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 245.498225][ T6653] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 245.499446][ T6653] UDF-fs: Scanning with blocksize 512 failed [ 245.524011][ T6653] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 245.532395][ T6653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.596115][ T4329] Bluetooth: hci9: command 0x0407 tx timeout [ 245.692429][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.693869][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.716917][ T6650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.079598][ T6649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.082821][ T6649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.763460][ T6660] loop8: detected capacity change from 0 to 32768 [ 247.033664][ T6677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 247.111320][ T4326] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 247.111776][ T4326] Bluetooth: hci5: Malformed LE Event: 0x02 [ 247.161567][ T6649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.354655][ T6660] XFS (loop8): Mounting V5 Filesystem [ 247.368475][ T6660] XFS (loop8): Ending clean mount [ 247.460977][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.516'. [ 247.473358][ T6694] netlink: 76 bytes leftover after parsing attributes in process `syz.9.518'. [ 247.510877][ T6272] XFS (loop8): Unmounting Filesystem [ 247.521854][ T6684] device syzkaller0 entered promiscuous mode [ 247.962227][ T6707] loop6: detected capacity change from 0 to 256 [ 247.970531][ T6707] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe39e6da7, utbl_chksum : 0x7319d30d) [ 248.796114][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.797276][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.005696][ T4329] Bluetooth: hci0: command 0xfc11 tx timeout [ 250.008012][ T4326] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 250.101398][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.102878][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.867618][ T6728] loop7: detected capacity change from 0 to 1024 [ 250.871843][ T6728] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 252.235722][ T4329] Bluetooth: hci0: command 0xfc11 tx timeout [ 252.237883][ T4326] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 253.181130][ T6738] binder: 6737:6738 got transaction to invalid handle, 1 [ 253.182376][ T6738] binder: 6738:6737 cannot find target node [ 253.183415][ T6738] binder: 6737:6738 transaction call to 0:0 failed 47/29201/-22, size 0-0 line 3045 [ 253.193410][ T6738] binder: 6737:6738 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 253.195532][ T6738] binder: 6738 RLIMIT_NICE not set [ 253.245486][ T6739] binder: 6737:6739 got reply transaction with no transaction stack [ 253.246940][ T6739] binder: 6737:6739 transaction reply to 0:0 failed 48/29201/-71, size 104-24 line 2946 [ 254.022326][ T6643] binder: undelivered TRANSACTION_ERROR: 29201 [ 254.023536][ T6643] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.663914][ T6756] loop8: detected capacity change from 0 to 256 [ 260.313351][ T6756] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 260.319544][ T6747] loop9: detected capacity change from 0 to 32768 [ 260.322742][ T6756] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 260.330435][ T6756] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 260.331714][ T6756] UDF-fs: Scanning with blocksize 512 failed [ 260.342816][ T6756] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 260.362625][ T6756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.374132][ T6747] XFS (loop9): Mounting V5 Filesystem [ 260.443367][ T6747] XFS (loop9): Ending clean mount [ 260.508806][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.546806][ T6760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.893969][ T6277] XFS (loop9): Unmounting Filesystem [ 260.930127][ T6786] loop5: detected capacity change from 0 to 1024 [ 260.936398][ T6786] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 261.146389][ T6795] netlink: 76 bytes leftover after parsing attributes in process `syz.5.541'. [ 261.152697][ T6795] device syzkaller0 entered promiscuous mode [ 261.229884][ T6804] binder: 6803:6804 got transaction to invalid handle, 1 [ 261.231259][ T6804] binder: 6804:6803 cannot find target node [ 261.232238][ T6804] binder: 6803:6804 transaction call to 0:0 failed 52/29201/-22, size 0-0 line 3045 [ 261.234898][ T6804] binder: 6803:6804 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 261.238053][ T6804] binder: 6804 RLIMIT_NICE not set [ 261.286629][ T6811] binder: 6803:6811 got reply transaction with no transaction stack [ 261.301421][ T6811] binder: 6803:6811 transaction reply to 0:0 failed 53/29201/-71, size 104-24 line 2946 [ 261.676188][ T1861] device hsr_slave_0 left promiscuous mode [ 261.707435][ T1861] device hsr_slave_1 left promiscuous mode [ 261.775965][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.777217][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.778902][ T1861] device bridge_slave_1 left promiscuous mode [ 261.781234][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.826752][ T1861] device bridge_slave_0 left promiscuous mode [ 261.827888][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.868033][ T1861] device hsr_slave_0 left promiscuous mode [ 261.905735][ T1861] device hsr_slave_1 left promiscuous mode [ 261.986647][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.988177][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.990631][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.991847][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.993215][ T1861] device bridge_slave_1 left promiscuous mode [ 261.994259][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.050741][ T1861] device bridge_slave_0 left promiscuous mode [ 262.051832][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.065969][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.067091][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.083520][ T6830] binder: 6829:6830 got transaction to invalid handle, 1 [ 262.084846][ T6830] binder: 6830:6829 cannot find target node [ 262.086087][ T6830] binder: 6829:6830 transaction call to 0:0 failed 57/29201/-22, size 0-0 line 3045 [ 262.089302][ T6830] binder: 6829:6830 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 262.091408][ T6830] binder: 6830 RLIMIT_NICE not set [ 262.156666][ T6835] binder: 6829:6835 got reply transaction with no transaction stack [ 262.158110][ T6835] binder: 6829:6835 transaction reply to 0:0 failed 58/29201/-71, size 104-24 line 2946 [ 262.187905][ T6832] loop8: detected capacity change from 0 to 32768 [ 262.190550][ T6832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.543 (6832) [ 262.197719][ T6832] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.199371][ T6832] BTRFS info (device loop8): using sha256 (sha256-ce) checksum algorithm [ 262.200668][ T6832] BTRFS info (device loop8): using free space tree [ 262.220564][ T6832] BTRFS info (device loop8): enabling ssd optimizations [ 262.226470][ T1861] device veth1_macvtap left promiscuous mode [ 262.227601][ T1861] device veth0_macvtap left promiscuous mode [ 262.228673][ T1861] device veth1_vlan left promiscuous mode [ 262.229670][ T1861] device veth0_vlan left promiscuous mode [ 262.316000][ T1861] device veth1_macvtap left promiscuous mode [ 262.317137][ T1861] device veth0_macvtap left promiscuous mode [ 262.318262][ T1861] device veth1_vlan left promiscuous mode [ 262.319238][ T1861] device veth0_vlan left promiscuous mode [ 262.436920][ T6860] Cannot find del_set index 0 as target [ 262.445478][ T6860] BTRFS error (device loop8: state M): unrecognized mount option '00000000000000000000005ÿÿÿ' [ 262.474856][ T6860] netlink: 34 bytes leftover after parsing attributes in process `syz.8.543'. [ 262.924754][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 262.925885][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.195689][ T4326] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 263.255163][ T6876] overlayfs: failed to resolve './file0': -2 [ 264.171057][ T6882] loop7: detected capacity change from 0 to 256 [ 264.182373][ T6882] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 264.184425][ T6882] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 264.186091][ T6882] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 264.187205][ T6882] UDF-fs: Scanning with blocksize 512 failed [ 264.195561][ T6882] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 264.210586][ T6882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.320952][ T6890] loop7: detected capacity change from 0 to 1024 [ 264.325070][ T6890] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 265.077784][ T1861] team0 (unregistering): Port device team_slave_1 removed [ 265.248221][ T1861] team0 (unregistering): Port device team_slave_0 removed [ 265.417067][ T6898] loop7: detected capacity change from 0 to 16 [ 265.422321][ T6898] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 265.770223][ T1861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.967207][ T1861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.117301][ T6900] binder: BINDER_SET_CONTEXT_MGR already set [ 266.118352][ T6900] binder: 6899:6900 ioctl 4018620d 20004a80 returned -16 [ 266.119851][ T6900] binder: 6899:6900 got transaction to invalid handle, 1 [ 266.121682][ T6900] binder: 6899:6900 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 266.955126][ T6292] binder_debug: 3 callbacks suppressed [ 266.955138][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.957400][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.437159][ T1861] bond0 (unregistering): Released all slaves [ 269.115711][ T47] Bluetooth: hci0: command 0xfc11 tx timeout [ 269.117772][ T4326] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 269.253054][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.256436][ T4329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.258217][ T4329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.260086][ T4329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.261389][ T4329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.262646][ T4329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.043630][ T6913] loop7: detected capacity change from 0 to 256 [ 270.054061][ T6913] FAT-fs (loop7): Directory bread(block 64) failed [ 270.055265][ T6913] FAT-fs (loop7): Directory bread(block 65) failed [ 270.057367][ T6913] FAT-fs (loop7): Directory bread(block 66) failed [ 270.058365][ T6913] FAT-fs (loop7): Directory bread(block 67) failed [ 270.061231][ T6913] FAT-fs (loop7): Directory bread(block 68) failed [ 270.062219][ T6913] FAT-fs (loop7): Directory bread(block 69) failed [ 270.063321][ T6913] FAT-fs (loop7): Directory bread(block 70) failed [ 270.064261][ T6913] FAT-fs (loop7): Directory bread(block 71) failed [ 270.065271][ T6913] FAT-fs (loop7): Directory bread(block 72) failed [ 270.067102][ T6913] FAT-fs (loop7): Directory bread(block 73) failed [ 270.098815][ T1861] team0 (unregistering): Port device team_slave_1 removed [ 270.267611][ T1861] team0 (unregistering): Port device team_slave_0 removed [ 270.426637][ T1861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.626599][ T1861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.355650][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 272.097796][ T1861] bond0 (unregistering): Released all slaves [ 272.466370][ T6272] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.751671][ T6938] binder: 6937:6938 ioctl 4018620d 0 returned -22 [ 273.066601][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 273.186545][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.187992][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.431226][ T6909] device bridge_slave_0 entered promiscuous mode [ 273.437103][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 273.581029][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.582330][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.647836][ T6909] device bridge_slave_1 entered promiscuous mode [ 273.655292][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.716695][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.089720][ T6909] team0: Port device team_slave_0 added [ 274.092012][ T6909] team0: Port device team_slave_1 added [ 274.099874][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.101076][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.106625][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.110177][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.111465][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.115999][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.529331][ T6909] device hsr_slave_0 entered promiscuous mode [ 274.587285][ T6909] device hsr_slave_1 entered promiscuous mode [ 274.620602][ T6977] loop9: detected capacity change from 0 to 32768 [ 274.622477][ T6977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.571 (6977) [ 274.629906][ T6977] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.631523][ T6977] BTRFS info (device loop9): using sha256 (sha256-ce) checksum algorithm [ 274.632966][ T6977] BTRFS info (device loop9): using free space tree [ 274.966233][ T6977] BTRFS info (device loop9): enabling ssd optimizations [ 274.982347][ T7013] device syzkaller0 entered promiscuous mode [ 275.207356][ T7026] Cannot find del_set index 0 as target [ 275.214168][ T7026] BTRFS error (device loop9: state M): unrecognized mount option '00000000000000000000005ÿÿÿ' [ 275.241314][ T7026] netlink: 34 bytes leftover after parsing attributes in process `syz.9.571'. [ 275.515748][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 275.602735][ T6277] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.755647][ T4329] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 276.854672][ T7067] loop9: detected capacity change from 0 to 32768 [ 276.923593][ T7076] random: crng reseeded on system resumption [ 276.953862][ T7067] XFS (loop9): Mounting V5 Filesystem [ 277.000860][ T7067] XFS (loop9): Ending clean mount [ 277.043210][ T6277] XFS (loop9): Unmounting Filesystem [ 277.062385][ T7075] device syzkaller0 entered promiscuous mode [ 277.298314][ T6909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.337080][ T6909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.366847][ T6909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.382566][ T7080] loop7: detected capacity change from 0 to 32768 [ 277.424934][ T7080] XFS (loop7): Mounting V5 Filesystem [ 277.453547][ T7080] XFS (loop7): Ending clean mount [ 277.511910][ T6263] XFS (loop7): Unmounting Filesystem [ 277.599766][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 277.828655][ T6909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.129637][ T1861] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.213667][ T1861] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.223385][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.235033][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.239513][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.244203][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.280495][ T6909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.297718][ T6909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.303473][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.305166][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.307362][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.308455][ T4780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.311234][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.312806][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.314336][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.315536][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.319572][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.321261][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.322975][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.326806][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.332045][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.334845][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.339902][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.341505][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.343360][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.344994][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.491147][ T7137] hub 8-0:1.0: USB hub found [ 278.493888][ T7137] hub 8-0:1.0: 8 ports detected [ 279.331589][ T1861] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.360688][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.362239][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.363749][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.522872][ T1861] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.755742][ T4326] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 279.871210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.872629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.880199][ T7157] loop7: detected capacity change from 0 to 32768 [ 279.916076][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.969014][ T7157] XFS (loop7): Mounting V5 Filesystem [ 279.982177][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.984078][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.993082][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.994706][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.001717][ T6909] device veth0_vlan entered promiscuous mode [ 280.007764][ T7157] XFS (loop7): Ending clean mount [ 280.008469][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.013456][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.038081][ T6909] device veth1_vlan entered promiscuous mode [ 280.049890][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.050492][ T6263] XFS (loop7): Unmounting Filesystem [ 280.051649][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.054087][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.056855][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.060665][ T6909] device veth0_macvtap entered promiscuous mode [ 280.063382][ T6909] device veth1_macvtap entered promiscuous mode [ 280.079750][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.082748][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.085377][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.090038][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.091783][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.101202][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.103022][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.105318][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.107512][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.111847][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.113524][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.115266][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.123319][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.125027][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.141573][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.155386][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.157216][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.158617][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.160154][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.170736][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.172857][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.180072][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.181760][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.183324][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.188367][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.189872][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.191631][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.197038][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.198635][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.200173][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.232770][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.234383][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.241946][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.252186][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.257394][ T6909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.258833][ T6909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.260266][ T6909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.261786][ T6909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.287418][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.289153][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.764651][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.765976][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.775010][ T7059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.783359][ T7059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.143177][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.144816][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.738213][ T7216] use of bytesused == 0 is deprecated and will be removed in the future, [ 281.739864][ T7216] use the actual size instead. [ 282.186348][ T7195] random: crng reseeded on system resumption [ 282.474955][ T7231] loop5: detected capacity change from 0 to 32768 [ 282.521691][ T7231] XFS (loop5): Mounting V5 Filesystem [ 282.575260][ T7231] XFS (loop5): Ending clean mount [ 282.633644][ T6253] XFS (loop5): Unmounting Filesystem [ 283.694641][ T7302] loop9: detected capacity change from 0 to 256 [ 283.735227][ T7302] FAT-fs (loop9): Directory bread(block 64) failed [ 283.738644][ T7302] FAT-fs (loop9): Directory bread(block 65) failed [ 283.740842][ T7302] FAT-fs (loop9): Directory bread(block 66) failed [ 283.743092][ T7302] FAT-fs (loop9): Directory bread(block 67) failed [ 283.748676][ T7302] FAT-fs (loop9): Directory bread(block 68) failed [ 283.751976][ T7302] FAT-fs (loop9): Directory bread(block 69) failed [ 283.754210][ T7302] FAT-fs (loop9): Directory bread(block 70) failed [ 283.759545][ T7302] FAT-fs (loop9): Directory bread(block 71) failed [ 283.763334][ T7302] FAT-fs (loop9): Directory bread(block 72) failed [ 284.406112][ T4329] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 284.407702][ T4326] Bluetooth: hci1: command 0xfc11 tx timeout [ 284.503741][ T7302] FAT-fs (loop9): Directory bread(block 73) failed [ 285.076068][ T7336] random: crng reseeded on system resumption [ 285.449142][ T7318] device syzkaller0 entered promiscuous mode [ 285.573416][ T7329] loop9: detected capacity change from 0 to 32768 [ 285.627841][ T7329] XFS (loop9): Mounting V5 Filesystem [ 285.658017][ T7329] XFS (loop9): Ending clean mount [ 285.674150][ T6277] XFS (loop9): Unmounting Filesystem [ 286.702395][ T7365] Bluetooth: MGMT ver 1.22 [ 288.354731][ T7381] random: crng reseeded on system resumption [ 288.621886][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.623905][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.457741][ T7395] loop5: detected capacity change from 0 to 32768 [ 290.493093][ T7395] XFS (loop5): Mounting V5 Filesystem [ 290.510195][ T7395] XFS (loop5): Ending clean mount [ 290.545275][ T6253] XFS (loop5): Unmounting Filesystem [ 291.962152][ T7412] hub 8-0:1.0: USB hub found [ 291.963684][ T7412] hub 8-0:1.0: 8 ports detected [ 298.281685][ T7422] random: crng reseeded on system resumption [ 298.677808][ T1861] device hsr_slave_0 left promiscuous mode [ 298.682374][ T7424] loop1: detected capacity change from 0 to 4096 [ 299.176284][ T1861] device hsr_slave_1 left promiscuous mode [ 299.336165][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.337945][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.345534][ T1861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.346968][ T1861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.394505][ T1861] device bridge_slave_1 left promiscuous mode [ 299.481176][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.111350][ T1861] device bridge_slave_0 left promiscuous mode [ 300.112657][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.181842][ T7430] loop5: detected capacity change from 0 to 32768 [ 300.190613][ T7430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.654 (7430) [ 300.204391][ T7430] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.207185][ T7430] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 300.210882][ T7430] BTRFS info (device loop5): setting nodatacow, compression disabled [ 300.212996][ T7430] BTRFS info (device loop5): enabling auto defrag [ 300.214521][ T7434] loop8: detected capacity change from 0 to 32768 [ 300.215426][ T7430] BTRFS info (device loop5): max_inline at 0 [ 300.217321][ T7430] BTRFS info (device loop5): using free space tree [ 300.253174][ T7434] XFS (loop8): Mounting V5 Filesystem [ 300.265817][ T1861] device veth1_macvtap left promiscuous mode [ 300.267549][ T1861] device veth0_macvtap left promiscuous mode [ 300.268761][ T1861] device veth1_vlan left promiscuous mode [ 300.269828][ T1861] device veth0_vlan left promiscuous mode [ 300.276587][ T7434] XFS (loop8): Ending clean mount [ 300.303836][ T6272] XFS (loop8): Unmounting Filesystem [ 300.467588][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.469125][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.556787][ T6253] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.255406][ T7487] loop7: detected capacity change from 0 to 40427 [ 301.319167][ T7487] F2FS-fs (loop7): Invalid segment/section count (24 != 24 * 3) [ 301.320552][ T7487] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 301.330618][ T7487] F2FS-fs (loop7): Unrecognized mount option "whint_mode=user-based" or missing value [ 301.884414][ T7435] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.125171][ T7499] random: crng reseeded on system resumption [ 303.799331][ T7522] loop9: detected capacity change from 0 to 32768 [ 303.858127][ T7522] XFS (loop9): Mounting V5 Filesystem [ 303.931557][ T7522] XFS (loop9): Ending clean mount [ 304.011362][ T6277] XFS (loop9): Unmounting Filesystem [ 304.046591][ T7524] loop8: detected capacity change from 0 to 32768 [ 304.381517][ T7524] XFS (loop8): Mounting V5 Filesystem [ 304.419904][ T7524] XFS (loop8): Ending clean mount [ 304.448148][ T6272] XFS (loop8): Unmounting Filesystem [ 305.236981][ T7553] trusted_key: encrypted_key: insufficient parameters specified [ 305.920994][ T7557] loop1: detected capacity change from 0 to 32768 [ 305.960474][ T1861] team0 (unregistering): Port device team_slave_1 removed [ 305.961909][ T7557] XFS (loop1): Mounting V5 Filesystem [ 305.990908][ T7557] XFS (loop1): Ending clean mount [ 306.013574][ T6909] XFS (loop1): Unmounting Filesystem [ 306.172413][ T1861] team0 (unregistering): Port device team_slave_0 removed [ 306.261110][ T7579] random: crng reseeded on system resumption [ 306.370857][ T1861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.747083][ T1861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.627547][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.630312][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.776378][ T7596] loop8: detected capacity change from 0 to 32768 [ 307.802943][ T7596] XFS (loop8): Mounting V5 Filesystem [ 307.831520][ T7596] XFS (loop8): Ending clean mount [ 307.865718][ T6272] XFS (loop8): Unmounting Filesystem [ 308.271914][ T7611] trusted_key: encrypted_key: insufficient parameters specified [ 308.914478][ T1861] bond0 (unregistering): Released all slaves [ 310.357853][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.359007][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.601409][ T7620] loop7: detected capacity change from 0 to 32768 [ 310.994794][ T7620] XFS (loop7): Mounting V5 Filesystem [ 311.236529][ T7620] XFS (loop7): Ending clean mount [ 311.489462][ T6263] XFS (loop7): Unmounting Filesystem [ 311.705142][ T7657] loop8: detected capacity change from 0 to 32768 [ 311.801799][ T7657] XFS (loop8): Mounting V5 Filesystem [ 311.846698][ T7657] XFS (loop8): Ending clean mount [ 311.907841][ T6272] XFS (loop8): Unmounting Filesystem [ 311.973258][ T7696] device syzkaller0 entered promiscuous mode [ 312.190915][ T7708] trusted_key: encrypted_key: insufficient parameters specified [ 313.027979][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.029815][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.391452][ T7748] loop5: detected capacity change from 0 to 4096 [ 314.431120][ T7435] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.548755][ T7763] random: crng reseeded on system resumption [ 316.212163][ T7767] trusted_key: encrypted_key: insufficient parameters specified [ 316.603650][ T7772] loop5: detected capacity change from 0 to 1024 [ 316.640767][ T7772] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.667888][ T6253] EXT4-fs (loop5): unmounting filesystem. [ 324.838327][ T7777] device bridge0 entered promiscuous mode [ 324.839469][ T7777] device macvtap1 entered promiscuous mode [ 325.868841][ T7810] loop9: detected capacity change from 0 to 40427 [ 325.984309][ T7810] F2FS-fs (loop9): Invalid segment/section count (24 != 24 * 3) [ 325.985623][ T7810] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 325.992399][ T7810] F2FS-fs (loop9): Unrecognized mount option "whint_mode=user-based" or missing value [ 326.820967][ T7818] trusted_key: encrypted_key: insufficient parameters specified [ 327.270082][ T7832] random: crng reseeded on system resumption [ 327.743645][ T7800] loop5: detected capacity change from 0 to 32768 [ 328.740814][ T7864] device syzkaller0 entered promiscuous mode [ 329.591036][ T7887] loop9: detected capacity change from 0 to 512 [ 329.953116][ T7891] loop9: detected capacity change from 0 to 256 [ 330.198859][ T7900] trusted_key: encrypted_key: insufficient parameters specified [ 331.063901][ T7913] loop9: detected capacity change from 0 to 32768 [ 331.077689][ T7913] XFS (loop9): Mounting V5 Filesystem [ 331.086680][ T7913] XFS (loop9): Ending clean mount [ 331.100190][ T6277] XFS (loop9): Unmounting Filesystem [ 331.603640][ T7925] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 332.431921][ T7929] random: crng reseeded on system resumption [ 336.740941][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.9.755'. [ 337.674951][ T7952] trusted_key: encrypted_key: insufficient parameters specified [ 341.504444][ T7968] overlayfs: missing 'lowerdir' [ 341.961047][ T7981] random: crng reseeded on system resumption [ 342.503427][ T7969] loop1: detected capacity change from 0 to 32768 [ 342.843336][ T7969] XFS (loop1): Mounting V5 Filesystem [ 342.872697][ T7969] XFS (loop1): Ending clean mount [ 343.127758][ T8022] trusted_key: encrypted_key: insufficient parameters specified [ 343.363022][ T6909] XFS (loop1): Unmounting Filesystem [ 343.454668][ T8036] netlink: 76 bytes leftover after parsing attributes in process `syz.5.772'. [ 343.471582][ T8036] device syzkaller0 entered promiscuous mode [ 343.576657][ T8052] overlayfs: missing 'lowerdir' [ 343.869372][ T8064] random: crng reseeded on system resumption [ 344.973015][ T8076] loop8: detected capacity change from 0 to 512 [ 348.155639][ T47] Bluetooth: hci8: command 0x0406 tx timeout [ 348.155652][ T4329] Bluetooth: hci5: command 0x0406 tx timeout [ 348.156631][ T47] Bluetooth: hci6: command 0x0406 tx timeout [ 355.473915][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.783'. [ 355.481017][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.8.783'. [ 355.482432][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.8.783'. [ 355.491793][ T8099] netlink: 'syz.8.783': attribute type 10 has an invalid length. [ 355.501007][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.502438][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.527063][ T8112] overlayfs: missing 'lowerdir' [ 355.529087][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.530305][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.532734][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.533846][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.552587][ T8099] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 355.689417][ T8125] loop5: detected capacity change from 0 to 1024 [ 355.765007][ T8127] trusted_key: encrypted_key: insufficient parameters specified [ 356.059491][ T8128] random: crng reseeded on system resumption [ 356.384244][ T8125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 356.401075][ T8125] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.786: lblock 3 mapped to illegal pblock 3 (length 1) [ 356.440441][ T8125] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 356.442248][ T8125] EXT4-fs (loop5): This should not happen!! Data will be lost [ 356.442248][ T8125] [ 356.538099][ T8125] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 4: comm syz.5.786: lblock 4 mapped to illegal pblock 4 (length 2) [ 356.548012][ T8125] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 356.550146][ T8125] EXT4-fs (loop5): This should not happen!! Data will be lost [ 356.550146][ T8125] [ 356.582764][ T7520] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:24: lblock 8 mapped to illegal pblock 8 (length 8) [ 356.797608][ T7520] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 356.802280][ T7520] EXT4-fs (loop5): This should not happen!! Data will be lost [ 356.802280][ T7520] [ 356.810531][ T6253] EXT4-fs (loop5): unmounting filesystem. [ 357.164446][ T8161] netlink: 76 bytes leftover after parsing attributes in process `syz.9.796'. [ 357.199158][ T8161] device syzkaller0 entered promiscuous mode [ 357.430244][ T8180] overlayfs: missing 'lowerdir' [ 359.396385][ T8219] trusted_key: encrypted_key: insufficient parameters specified [ 360.345880][ T8227] random: crng reseeded on system resumption [ 362.175937][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.177451][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.702846][ T8237] overlayfs: missing 'lowerdir' [ 365.553919][ T8253] trusted_key: encrypted_key: insufficient parameters specified [ 369.875215][ T8291] random: crng reseeded on system resumption [ 370.109128][ T8281] loop1: detected capacity change from 0 to 32768 [ 371.280354][ T8329] trusted_key: encrypted_key: insufficient parameters specified [ 371.652670][ T8341] netlink: 76 bytes leftover after parsing attributes in process `syz.8.827'. [ 371.677781][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.681138][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.696073][ T8341] device syzkaller0 entered promiscuous mode [ 371.764856][ T8347] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 374.389838][ T8424] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 374.697347][ T8437] trusted_key: encrypted_key: insufficient parameters specified [ 376.461824][ T8445] random: crng reseeded on system resumption [ 377.315322][ T8447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 377.317128][ T8447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 378.233581][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.235124][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.236107][ T8497] random: crng reseeded on system resumption [ 386.244972][ T8500] overlayfs: missing 'lowerdir' [ 386.338076][ T8472] loop5: detected capacity change from 0 to 32768 [ 386.381650][ T8513] binder_user_error: 2 callbacks suppressed [ 386.381660][ T8513] binder: 8511:8513 tried to acquire reference to desc 0, got 1 instead [ 386.391487][ T8513] binder: 8511:8513 got reply transaction with no transaction stack [ 386.393100][ T8513] binder: 8511:8513 transaction reply to 0:0 failed 68/29201/-71, size 104-24 line 2946 [ 386.409254][ T4369] binder: release 8511:8513 transaction 67 out, still active [ 386.410615][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 386.411813][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 386.412932][ T4369] binder: send failed reply for transaction 67, target dead [ 386.434829][ T8472] XFS (loop5): Mounting V5 Filesystem [ 386.479032][ T8527] Bluetooth: hci0: unsupported parameter 255 [ 386.480112][ T8527] Bluetooth: hci0: unsupported parameter 255 [ 386.498288][ T8472] XFS (loop5): Ending clean mount [ 386.571331][ T6253] XFS (loop5): Unmounting Filesystem [ 386.579497][ T8545] netlink: 76 bytes leftover after parsing attributes in process `syz.7.863'. [ 386.588950][ T8545] device syzkaller0 entered promiscuous mode [ 388.511535][ T8581] overlayfs: missing 'lowerdir' [ 388.537325][ T8583] binder: 8582:8583 tried to acquire reference to desc 0, got 1 instead [ 388.539712][ T8583] binder: 8582:8583 got reply transaction with no transaction stack [ 388.540884][ T8583] binder: 8582:8583 transaction reply to 0:0 failed 74/29201/-71, size 104-24 line 2946 [ 388.551066][ T4497] binder: release 8582:8583 transaction 73 out, still active [ 388.552296][ T4497] binder: undelivered TRANSACTION_COMPLETE [ 388.553473][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 388.554485][ T4497] binder: send failed reply for transaction 73, target dead [ 388.680585][ T8585] loop8: detected capacity change from 0 to 32768 [ 388.696290][ T8585] XFS (loop8): Mounting V5 Filesystem [ 388.712904][ T8585] XFS (loop8): Ending clean mount [ 388.740158][ T6272] XFS (loop8): Unmounting Filesystem [ 389.141190][ T8605] random: crng reseeded on system resumption [ 391.590631][ T8628] loop8: detected capacity change from 0 to 2048 [ 391.614984][ T8628] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 391.633075][ T6272] EXT4-fs (loop8): unmounting filesystem. [ 391.657997][ T8633] overlayfs: missing 'lowerdir' [ 391.683659][ T8635] binder: 8634:8635 tried to acquire reference to desc 0, got 1 instead [ 391.686903][ T8635] binder: 8634:8635 got reply transaction with no transaction stack [ 391.688174][ T8635] binder: 8634:8635 transaction reply to 0:0 failed 80/29201/-71, size 104-24 line 2946 [ 391.701325][ T4359] binder: release 8634:8635 transaction 79 out, still active [ 391.702543][ T4359] binder: undelivered TRANSACTION_COMPLETE [ 391.703646][ T4359] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.705033][ T4359] binder: send failed reply for transaction 79, target dead [ 391.820049][ T8637] loop8: detected capacity change from 0 to 32768 [ 391.848622][ T8637] XFS (loop8): Mounting V5 Filesystem [ 391.883354][ T8637] XFS (loop8): Ending clean mount [ 391.898659][ T6272] XFS (loop8): Unmounting Filesystem [ 394.235712][ T4326] Bluetooth: hci0: command 0x0406 tx timeout [ 398.947537][ T8649] random: crng reseeded on system resumption [ 399.060037][ T8658] trusted_key: encrypted_key: insufficient parameters specified [ 400.292317][ T8704] binder: 8700:8704 tried to acquire reference to desc 0, got 1 instead [ 400.314378][ T8704] binder: 8700:8704 got reply transaction with no transaction stack [ 400.323455][ T8704] binder: 8700:8704 transaction reply to 0:0 failed 86/29201/-71, size 104-24 line 2946 [ 400.352587][ T6292] binder: release 8700:8704 transaction 85 out, still active [ 400.353948][ T6292] binder: undelivered TRANSACTION_COMPLETE [ 400.356075][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 400.357153][ T6292] binder: send failed reply for transaction 85, target dead [ 400.417599][ T8718] netlink: 76 bytes leftover after parsing attributes in process `syz.1.896'. [ 400.433639][ T8718] device syzkaller0 entered promiscuous mode [ 402.170270][ T8754] random: crng reseeded on system resumption [ 403.005281][ T8758] trusted_key: encrypted_key: insufficient parameters specified [ 404.736104][ T8768] loop8: detected capacity change from 0 to 32768 [ 404.746744][ T8768] (syz.8.905,8768,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 404.750565][ T8768] (syz.8.905,8768,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 404.764585][ T8768] JBD2: Ignoring recovery information on journal [ 404.787929][ T8768] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 404.874079][ T6272] ocfs2: Unmounting device (7,8) on (node local) [ 404.932088][ T8772] binder: 8771:8772 tried to acquire reference to desc 0, got 1 instead [ 404.934607][ T8772] binder: 8771:8772 got reply transaction with no transaction stack [ 404.940100][ T8772] binder: 8771:8772 transaction reply to 0:0 failed 92/29201/-71, size 104-24 line 2946 [ 404.953897][ T14] binder: release 8771:8772 transaction 91 out, still active [ 404.955081][ T14] binder: undelivered TRANSACTION_COMPLETE [ 404.956881][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 404.957803][ T14] binder: send failed reply for transaction 91, target dead [ 412.655698][ T8795] trusted_key: encrypted_key: insufficient parameters specified [ 412.797448][ T8798] random: crng reseeded on system resumption [ 413.462633][ T8823] binder: 8821:8823 tried to acquire reference to desc 0, got 1 instead [ 413.473982][ T8823] binder: 8821:8823 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 413.590310][ T8823] binder: 8823 RLIMIT_NICE not set [ 413.590816][ T8832] binder: 8821:8832 got reply transaction with no transaction stack [ 413.594354][ T8832] binder: 8821:8832 transaction reply to 0:0 failed 98/29201/-71, size 104-24 line 2946 [ 413.598961][ T8833] loop7: detected capacity change from 0 to 1024 [ 414.033033][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.9.922'. [ 414.038881][ T8833] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 414.049278][ T14] binder: release 8821:8823 transaction 97 out, still active [ 414.050528][ T14] binder: undelivered TRANSACTION_COMPLETE [ 414.051731][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 414.052881][ T14] binder: send failed reply for transaction 97, target dead [ 414.089240][ T8833] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.920: lblock 3 mapped to illegal pblock 3 (length 1) [ 414.117318][ T8840] device syzkaller0 entered promiscuous mode [ 414.119142][ T8833] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 414.121153][ T8833] EXT4-fs (loop7): This should not happen!! Data will be lost [ 414.121153][ T8833] [ 414.194191][ T8833] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 4: comm syz.7.920: lblock 4 mapped to illegal pblock 4 (length 2) [ 414.204807][ T8833] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 414.243616][ T8833] EXT4-fs (loop7): This should not happen!! Data will be lost [ 414.243616][ T8833] [ 414.275408][ T8850] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.920: lblock 0 mapped to illegal pblock 0 (length 3) [ 414.300754][ T8850] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 414.316684][ T8850] EXT4-fs (loop7): This should not happen!! Data will be lost [ 414.316684][ T8850] [ 414.457334][ T4640] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 7: comm kworker/u4:11: lblock 7 mapped to illegal pblock 7 (length 9) [ 414.463572][ T4640] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 414.468231][ T4640] EXT4-fs (loop7): This should not happen!! Data will be lost [ 414.468231][ T4640] [ 414.481982][ T6263] EXT4-fs (loop7): unmounting filesystem. [ 415.004125][ T8881] trusted_key: encrypted_key: insufficient parameters specified [ 415.194193][ T8882] random: crng reseeded on system resumption [ 416.742955][ T8905] binder: 8904:8905 tried to acquire reference to desc 0, got 1 instead [ 416.745408][ T8905] binder: 8904:8905 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 416.749152][ T8905] binder: 8905 RLIMIT_NICE not set [ 416.754583][ T8905] binder: 8904:8905 got reply transaction with no transaction stack [ 416.759305][ T8905] binder: 8904:8905 transaction reply to 0:0 failed 104/29201/-71, size 104-24 line 2946 [ 416.768185][ T6292] binder: release 8904:8905 transaction 103 out, still active [ 416.769505][ T6292] binder: undelivered TRANSACTION_COMPLETE [ 416.770400][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 416.771490][ T6292] binder: send failed reply for transaction 103, target dead [ 417.917354][ T8924] trusted_key: encrypted_key: insufficient parameters specified [ 418.328794][ T8927] random: crng reseeded on system resumption [ 420.728567][ T8944] binder: 8943:8944 tried to acquire reference to desc 0, got 1 instead [ 420.731001][ T8944] binder: 8943:8944 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 420.732993][ T8944] binder: 8944 RLIMIT_NICE not set [ 420.733975][ T8944] binder: 8943:8944 got reply transaction with no transaction stack [ 420.735183][ T8944] binder: 8943:8944 transaction reply to 0:0 failed 110/29201/-71, size 104-24 line 2946 [ 420.743675][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 420.744840][ T6292] binder: send failed reply for transaction 109 to 8943:8944 [ 420.746485][ T6292] binder: undelivered TRANSACTION_COMPLETE [ 420.747468][ T6292] binder: undelivered TRANSACTION_ERROR: 29189 [ 422.689090][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.949'. [ 424.438688][ T8964] trusted_key: encrypted_key: insufficient parameters specified [ 429.882811][ T8986] binder: 8985:8986 tried to acquire reference to desc 0, got 1 instead [ 429.956661][ T8986] binder: 8985:8986 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 429.958846][ T8986] binder: 8986 RLIMIT_NICE not set [ 429.970075][ T8986] binder: 8985:8986 got reply transaction with no transaction stack [ 429.971468][ T8986] binder: 8985:8986 transaction reply to 0:0 failed 116/29201/-71, size 104-24 line 2946 [ 430.016480][ T4359] binder: release 8985:8986 transaction 115 out, still active [ 430.017776][ T4359] binder: undelivered TRANSACTION_COMPLETE [ 430.018910][ T4359] binder: undelivered TRANSACTION_ERROR: 29201 [ 430.021779][ T4359] binder: send failed reply for transaction 115, target dead [ 430.406998][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.409325][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.433224][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.435130][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.437017][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.439749][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.549137][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.552569][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.554686][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.560660][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.563358][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 430.564773][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.216545][ T9020] trusted_key: encrypted_key: insufficient parameters specified [ 431.397996][ T4780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.510091][ T4780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.517154][ T8999] chnl_net:caif_netlink_parms(): no params data found [ 431.537711][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 431.587402][ T4780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.604253][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.606355][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.608206][ T8999] device bridge_slave_0 entered promiscuous mode [ 431.618461][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.619867][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.622327][ T8999] device bridge_slave_1 entered promiscuous mode [ 431.643542][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.644940][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.647126][ T9006] device bridge_slave_0 entered promiscuous mode [ 431.652526][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.698314][ T4780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.702529][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.703926][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.705728][ T9006] device bridge_slave_1 entered promiscuous mode [ 431.708339][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.724619][ T8999] team0: Port device team_slave_0 added [ 431.731919][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.735264][ T8999] team0: Port device team_slave_1 added [ 431.744569][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.784546][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.794605][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.802836][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.883879][ T9006] team0: Port device team_slave_0 added [ 431.887369][ T9006] team0: Port device team_slave_1 added [ 431.911328][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.912501][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.402808][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.476897][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 432.657855][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 432.723009][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.724529][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.799104][ T9067] binder: 9066:9067 tried to acquire reference to desc 0, got 1 instead [ 432.801420][ T9067] binder: 9066:9067 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 432.803548][ T9067] binder: 9067 RLIMIT_NICE not set [ 432.804559][ T9067] binder: 9066:9067 got reply transaction with no transaction stack [ 432.809053][ T9067] binder: 9066:9067 transaction reply to 0:0 failed 122/29201/-71, size 104-24 line 2946 [ 432.817457][ T7] binder: release 9066:9067 transaction 121 out, still active [ 432.818579][ T7] binder: undelivered TRANSACTION_COMPLETE [ 432.819618][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 432.820695][ T7] binder: send failed reply for transaction 121, target dead [ 432.867362][ T8999] device hsr_slave_0 entered promiscuous mode [ 432.918615][ T8999] device hsr_slave_1 entered promiscuous mode [ 432.979941][ T8999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.981348][ T8999] Cannot create hsr debugfs directory [ 433.015006][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.019458][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.026788][ T9006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.139144][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.141075][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.305916][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.309341][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.315945][ T9006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.431433][ T9006] device hsr_slave_0 entered promiscuous mode [ 433.476677][ T9006] device hsr_slave_1 entered promiscuous mode [ 433.525759][ T9006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.527274][ T9006] Cannot create hsr debugfs directory [ 433.688991][ T8999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.207263][ T8999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.348065][ T8999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.555746][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 434.670176][ T8999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.715714][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 435.029733][ T9006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.215757][ T9006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.232994][ T9112] binder: 9111:9112 tried to acquire reference to desc 0, got 1 instead [ 435.235347][ T9112] binder: 9111:9112 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 435.547518][ T9112] binder: 9112 RLIMIT_NICE not set [ 435.553519][ T9120] binder: 9111:9120 got reply transaction with no transaction stack [ 435.554929][ T9120] binder: 9111:9120 transaction reply to 0:0 failed 128/29201/-71, size 104-24 line 2946 [ 435.873853][ T4370] binder: release 9111:9112 transaction 127 out, still active [ 435.875227][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 435.876411][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 435.877384][ T4370] binder: send failed reply for transaction 127, target dead [ 436.033810][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.035334][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.114430][ T9006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.635761][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 437.075443][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 437.738936][ T9006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.716552][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 438.867706][ T9157] binder: BINDER_SET_CONTEXT_MGR already set [ 438.872844][ T4780] device hsr_slave_0 left promiscuous mode [ 438.882477][ T9157] binder: 9156:9157 ioctl 4018620d 20004a80 returned -16 [ 438.943995][ T9157] binder: tried to use weak ref as strong ref [ 438.945396][ T9157] binder: 9156:9157 Acquire 1 refcount change on invalid ref 0 ret -22 [ 438.947544][ T9157] binder: 9156:9157 got transaction to invalid handle, 1 [ 438.948867][ T4780] device hsr_slave_1 left promiscuous mode [ 438.950344][ T9157] binder: 9157:9156 cannot find target node [ 438.951316][ T9157] binder: 9156:9157 transaction call to 0:0 failed 131/29201/-22, size 0-0 line 3045 [ 438.953700][ T9157] binder: 9156:9157 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 438.963067][ T9157] binder: 9157 RLIMIT_NICE not set [ 439.115915][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 439.300779][ T9162] binder: 9156:9162 got reply transaction with no transaction stack [ 439.302577][ T9162] binder: 9156:9162 transaction reply to 0:0 failed 132/29201/-71, size 104-24 line 2946 [ 439.315731][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.317047][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.320518][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.321668][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.323178][ T4780] device bridge_slave_1 left promiscuous mode [ 439.324188][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.376605][ T4780] device bridge_slave_0 left promiscuous mode [ 439.377809][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.433833][ T4780] device bridge0 left promiscuous mode [ 439.505798][ T4780] device veth1_macvtap left promiscuous mode [ 439.507120][ T4780] device veth0_macvtap left promiscuous mode [ 439.508277][ T4780] device veth1_vlan left promiscuous mode [ 439.509417][ T4780] device veth0_vlan left promiscuous mode [ 439.687813][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 439.689125][ T6292] binder: undelivered TRANSACTION_ERROR: 29201 [ 443.568405][ T4780] team0 (unregistering): Port device team_slave_1 removed [ 443.746546][ T4780] team0 (unregistering): Port device team_slave_0 removed [ 443.916691][ T4780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.116155][ T4780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.597674][ T4780] bond0 (unregistering): Released all slaves [ 445.909358][ T8999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.943085][ T9193] loop1: detected capacity change from 0 to 64 [ 445.978016][ T9195] binder: 9194:9195 tried to acquire reference to desc 0, got 1 instead [ 445.980657][ T9195] binder: 9194:9195 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 445.982591][ T9195] binder: 9195 RLIMIT_NICE not set [ 445.983576][ T9195] binder: 9194:9195 got reply transaction with no transaction stack [ 445.984881][ T9195] binder: 9194:9195 transaction reply to 0:0 failed 138/29201/-71, size 104-24 line 2946 [ 445.997133][ T4370] binder: release 9194:9195 transaction 137 out, still active [ 445.998441][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 445.999480][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.000676][ T4370] binder: send failed reply for transaction 137, target dead [ 446.018899][ T9193] hfs: request for non-existent node 131072 in B*Tree [ 446.020083][ T9193] hfs: request for non-existent node 131072 in B*Tree [ 446.022429][ T8999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.070269][ T8999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.421650][ T8999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.518553][ T9006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.830630][ T9006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.893867][ T9006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.951559][ T9006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.043213][ T9220] loop1: detected capacity change from 0 to 512 [ 447.098990][ T9220] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 447.111630][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.116863][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.122880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.124566][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.132564][ T8999] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.134317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.140432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.144523][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.150033][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.151934][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.153575][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.154745][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.168743][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.183341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.185124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.187035][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.188178][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.189633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.191430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.193837][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.194971][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.202127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.203755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.205389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.207441][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.208518][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.209959][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.211787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.223678][ T6909] EXT4-fs (loop1): unmounting filesystem. [ 447.240146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.244309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.255406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.260072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.262241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.266892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.269391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.271123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.272893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.335059][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.337219][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.353689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.357040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.362006][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.379167][ T9235] binder: BINDER_SET_CONTEXT_MGR already set [ 447.380453][ T9235] binder: 9233:9235 ioctl 4018620d 20004a80 returned -16 [ 447.383986][ T9235] binder: 9233:9235 got transaction to invalid handle, 1 [ 447.385243][ T9235] binder: 9235:9233 cannot find target node [ 447.666253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.671843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.689880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.705737][ T9235] binder: 9233:9235 transaction call to 0:0 failed 141/29201/-22, size 0-0 line 3045 [ 447.708589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.710107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.712246][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.712814][ T9235] binder: 9233:9235 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 447.713819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.717959][ T9235] binder: 9235 RLIMIT_NICE not set [ 447.726624][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.764344][ T9242] binder: 9233:9242 got reply transaction with no transaction stack [ 447.771341][ T9242] binder: 9233:9242 transaction reply to 0:0 failed 142/29201/-71, size 104-24 line 2946 [ 448.268699][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 448.269809][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 449.764350][ T4780] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.868326][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.869667][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.870947][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.872253][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.159366][ T4780] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.166187][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.171441][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.185102][ T9277] loop7: detected capacity change from 0 to 512 [ 450.190300][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.192198][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.209834][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.214826][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.221925][ T9277] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 450.256466][ T6263] EXT4-fs (loop7): unmounting filesystem. [ 450.279210][ T4780] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.292438][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.294603][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.298288][ T8999] device veth0_vlan entered promiscuous mode [ 450.303251][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.305185][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.312092][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.313802][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.357258][ T4780] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.366989][ T9006] device veth0_vlan entered promiscuous mode [ 450.372677][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.374271][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.378531][ T8999] device veth1_vlan entered promiscuous mode [ 450.392048][ T9006] device veth1_vlan entered promiscuous mode [ 450.435495][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.441552][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.443556][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.445218][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.448594][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.453319][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.480288][ T8999] device veth0_macvtap entered promiscuous mode [ 450.484507][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.486424][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.488187][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.492544][ T9006] device veth0_macvtap entered promiscuous mode [ 450.502822][ T8999] device veth1_macvtap entered promiscuous mode [ 450.507959][ T9006] device veth1_macvtap entered promiscuous mode [ 450.551811][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.553749][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.555570][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.561330][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.563987][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.568029][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.571694][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.576010][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.579957][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.582806][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.586759][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.589729][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.593644][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.596294][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.599183][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.601400][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.603092][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.604851][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.611782][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.613695][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.616648][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.623519][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.625282][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.629012][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.630665][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.632326][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.633827][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.635430][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.639986][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.641869][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.644299][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.651149][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.661169][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.662629][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.665989][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.667584][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.674910][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.689961][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.701284][ T9306] binder: 9305:9306 tried to acquire reference to desc 0, got 1 instead [ 450.710585][ T9306] binder: 9305:9306 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 450.714557][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.716720][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.718293][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.719930][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.725957][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.727579][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.729220][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.734016][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.735411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.737690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 450.739281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.741724][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.747313][ T8999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.748831][ T8999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.750111][ T9308] loop1: detected capacity change from 0 to 64 [ 450.750243][ T8999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.771035][ T8999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.787510][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.789247][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.790904][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.792564][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.794279][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.836960][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.838576][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.848681][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.851681][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.853279][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.854955][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.858132][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.859660][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.861304][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.863833][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.871475][ T9006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.873606][ T9006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.875129][ T9006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.878062][ T9006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.365715][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.367565][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.343614][ T47] Bluetooth: hci0: command 0x0c20 tx timeout [ 452.979300][ T9348] binder_user_error: 2 callbacks suppressed [ 452.979307][ T9348] binder: 9346:9348 tried to acquire reference to desc 0, got 1 instead [ 452.982593][ T9348] binder: 9346:9348 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 452.984557][ T9348] binder: 9348 RLIMIT_NICE not set [ 452.985508][ T9348] binder: 9346:9348 got reply transaction with no transaction stack [ 452.987168][ T9348] binder_debug: 5 callbacks suppressed [ 452.987181][ T9348] binder: 9346:9348 transaction reply to 0:0 failed 154/29201/-71, size 104-24 line 2946 [ 452.996296][ T22] binder: release 9346:9348 transaction 153 out, still active [ 452.997546][ T22] binder: undelivered TRANSACTION_COMPLETE [ 452.998711][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 452.999909][ T22] binder: send failed reply for transaction 153, target dead [ 453.372632][ T9355] loop1: detected capacity change from 0 to 64 [ 453.534111][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.538683][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.544855][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.548623][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.549977][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.895609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.960533][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.962838][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.964168][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.965673][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.967070][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.968739][ T7520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.904839][ T9403] binder: 9400:9403 tried to acquire reference to desc 0, got 1 instead [ 454.918963][ T9403] binder: 9400:9403 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 454.943339][ T9403] binder: 9403 RLIMIT_NICE not set [ 454.964406][ T9403] binder: 9400:9403 got reply transaction with no transaction stack [ 454.965899][ T9403] binder: 9400:9403 transaction reply to 0:0 failed 160/29201/-71, size 104-24 line 2946 [ 455.384788][ T4497] binder: release 9400:9403 transaction 159 out, still active [ 455.386258][ T4497] binder: undelivered TRANSACTION_COMPLETE [ 455.387587][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 455.388628][ T4497] binder: send failed reply for transaction 159, target dead [ 455.402997][ T9417] loop2: detected capacity change from 0 to 64 [ 455.729546][ T9424] trusted_key: encrypted_key: insufficient parameters specified [ 456.301392][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1043'. [ 457.555738][ T9482] binder: 9480:9482 tried to acquire reference to desc 0, got 1 instead [ 457.558106][ T9482] binder: 9480:9482 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 458.687031][ T9505] trusted_key: encrypted_key: insufficient parameters specified [ 459.161370][ T9527] binder_user_error: 2 callbacks suppressed [ 459.161379][ T9527] binder: 9526:9527 tried to acquire reference to desc 0, got 1 instead [ 459.236154][ T9527] binder: 9526:9527 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 459.239853][ T9527] binder: 9527 RLIMIT_NICE not set [ 459.242632][ T9527] binder: 9526:9527 got reply transaction with no transaction stack [ 459.244421][ T9527] binder_debug: 5 callbacks suppressed [ 459.244452][ T9527] binder: 9526:9527 transaction reply to 0:0 failed 172/29201/-71, size 104-24 line 2946 [ 459.627438][ T7045] binder: release 9526:9527 transaction 171 out, still active [ 459.628797][ T7045] binder: undelivered TRANSACTION_COMPLETE [ 459.629919][ T7045] binder: undelivered TRANSACTION_ERROR: 29201 [ 459.631123][ T7045] binder: send failed reply for transaction 171, target dead [ 461.027761][ T4780] device hsr_slave_0 left promiscuous mode [ 461.167529][ T4780] device hsr_slave_1 left promiscuous mode [ 461.262904][ T9578] trusted_key: encrypted_key: insufficient parameters specified [ 461.346498][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.348478][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.502581][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.504236][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.518024][ T4780] device bridge_slave_1 left promiscuous mode [ 461.520461][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.622812][ T4780] device bridge_slave_0 left promiscuous mode [ 461.623968][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.996612][ T4780] device veth1_macvtap left promiscuous mode [ 461.999675][ T4780] device veth0_macvtap left promiscuous mode [ 462.002578][ T4780] device veth1_vlan left promiscuous mode [ 462.004753][ T4780] device veth0_vlan left promiscuous mode [ 462.892753][ T9557] Bluetooth: hci3: Frame reassembly failed (-84) [ 462.893961][ T9557] Bluetooth: hci3: Frame reassembly failed (-84) [ 463.637967][ T9628] trusted_key: encrypted_key: insufficient parameters specified [ 464.089190][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 464.955702][ T47] Bluetooth: hci3: command 0xfc11 tx timeout [ 464.969644][ T4326] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 465.093010][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 466.449660][ T4780] team0 (unregistering): Port device team_slave_1 removed [ 466.544095][ T9666] trusted_key: encrypted_key: insufficient parameters specified [ 466.827674][ T4780] team0 (unregistering): Port device team_slave_0 removed [ 466.976159][ T4780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.165673][ T4370] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 467.186332][ T4780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.345725][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 467.350359][ T4370] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 467.351914][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 467.353329][ T4370] usb 1-1: Product: syz [ 467.354005][ T4370] usb 1-1: Manufacturer: syz [ 467.354758][ T4370] usb 1-1: SerialNumber: syz [ 467.364326][ T4370] usb 1-1: config 0 descriptor?? [ 467.573050][ T9442] usb 1-1: USB disconnect, device number 5 [ 468.099886][ T9682] binder: 9681:9682 tried to acquire reference to desc 0, got 1 instead [ 468.102121][ T9682] binder: 9681:9682 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 468.104251][ T9682] binder: 9682 RLIMIT_NICE not set [ 468.105238][ T9682] binder: 9682 RLIMIT_NICE not set [ 468.106328][ T9682] binder: 9681:9682 ioctl c0306201 0 returned -14 [ 468.113979][ T7045] binder: release 9681:9682 transaction 177 out, still active [ 468.115158][ T7045] binder: undelivered TRANSACTION_COMPLETE [ 468.116431][ T7045] binder: release 9681:9682 transaction 177 in, still active [ 468.117647][ T7045] binder: send failed reply for transaction 177, target dead [ 469.006803][ T4780] bond0 (unregistering): Released all slaves [ 469.052068][ T9693] loop0: detected capacity change from 0 to 64 [ 469.437087][ T4329] Bluetooth: hci3: command 0xfc11 tx timeout [ 469.465743][ T4326] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 469.587930][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1103'. [ 469.593443][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1103'. [ 469.771069][ T9710] trusted_key: encrypted_key: insufficient parameters specified [ 470.176673][ T9721] binder: 9720:9721 tried to acquire reference to desc 0, got 1 instead [ 470.179359][ T9721] binder: 9720:9721 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 470.181798][ T9721] binder: 9721 RLIMIT_NICE not set [ 470.182798][ T9721] binder: 9721 RLIMIT_NICE not set [ 470.184043][ T9721] binder: 9720:9721 ioctl c0306201 0 returned -14 [ 470.218948][ T4497] binder: release 9720:9721 transaction 182 out, still active [ 470.220297][ T4497] binder: undelivered TRANSACTION_COMPLETE [ 470.221434][ T4497] binder: release 9720:9721 transaction 182 in, still active [ 470.222820][ T4497] binder: send failed reply for transaction 182, target dead [ 470.335456][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 470.628125][ T9732] loop7: detected capacity change from 0 to 64 [ 471.619550][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1124'. [ 472.340740][ T9797] binder: 9796:9797 tried to acquire reference to desc 0, got 1 instead [ 472.356261][ T9797] binder: 9796:9797 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 472.362098][ T9797] binder: 9796:9797 ioctl c0306201 0 returned -14 [ 472.381962][ T14] binder: release 9796:9797 transaction 187 out, still active [ 472.383459][ T14] binder: undelivered TRANSACTION_COMPLETE [ 472.847758][ T9806] trusted_key: encrypted_key: insufficient parameters specified [ 473.354669][ T9820] loop8: detected capacity change from 0 to 64 [ 473.515651][ T4326] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 475.280328][ T9842] binder: BINDER_SET_CONTEXT_MGR already set [ 475.287843][ T9842] binder: 9836:9842 ioctl 4018620d 20004a80 returned -16 [ 475.289555][ T9842] binder_user_error: 2 callbacks suppressed [ 475.289561][ T9842] binder: 9836:9842 got transaction to invalid handle, 1 [ 475.305638][ T9842] binder_debug: 2 callbacks suppressed [ 475.305655][ T9842] binder: 9842:9836 cannot find target node [ 475.307398][ T9842] binder: 9836:9842 transaction call to 0:0 failed 190/29201/-22, size 0-0 line 3045 [ 475.323674][ T9842] binder: 9836:9842 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 475.335785][ T9842] binder: 9842 RLIMIT_NICE not set [ 475.814694][ T6534] binder: undelivered TRANSACTION_ERROR: 29201 [ 476.349165][ T9887] trusted_key: encrypted_key: insufficient parameters specified [ 476.849968][ T9892] loop8: detected capacity change from 0 to 64 [ 476.980439][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1152'. [ 478.615781][ T9954] trusted_key: encrypted_key: insufficient parameters specified [ 479.063141][ T4326] Bluetooth: hci3: command 0xfc11 tx timeout [ 479.156013][ T4329] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 480.501954][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 480.813914][T10025] binder: 10024:10025 tried to acquire reference to desc 0, got 1 instead [ 480.820776][T10025] binder: 10024:10025 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 480.827370][T10025] binder: 10025 RLIMIT_NICE not set [ 480.828682][T10025] binder: 10025 RLIMIT_NICE not set [ 480.836900][ T4370] binder: release 10024:10025 transaction 195 out, still active [ 480.838241][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 480.839345][ T4370] binder: release 10024:10025 transaction 195 in, still active [ 480.840733][ T4370] binder: send failed reply for transaction 195, target dead [ 481.525089][T10045] loop1: detected capacity change from 0 to 128 [ 482.254708][T10045] EXT4-fs (loop1): Test dummy encryption mode enabled [ 482.492490][T10045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 482.569161][T10045] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 482.647994][ T6909] EXT4-fs (loop1): unmounting filesystem. [ 482.690591][T10094] binder: 10093:10094 tried to acquire reference to desc 0, got 1 instead [ 482.699355][T10094] binder: 10093:10094 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 482.704993][T10094] binder: 10094 RLIMIT_NICE not set [ 482.707968][T10094] binder: 10094 RLIMIT_NICE not set [ 482.728255][ T14] binder: release 10093:10094 transaction 200 out, still active [ 482.729686][ T14] binder: undelivered TRANSACTION_COMPLETE [ 482.730966][ T14] binder: release 10093:10094 transaction 200 in, still active [ 482.732165][ T14] binder: send failed reply for transaction 200, target dead [ 482.764447][T10101] loop1: detected capacity change from 0 to 128 [ 482.790459][T10101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 482.934521][ T6909] EXT4-fs (loop1): unmounting filesystem. [ 483.921883][T10126] loop2: detected capacity change from 0 to 2048 [ 483.926850][T10126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.962042][T10126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.007320][ T9006] EXT4-fs (loop2): unmounting filesystem. [ 484.754680][T10153] binder: 10152:10153 tried to acquire reference to desc 0, got 1 instead [ 484.757875][T10153] binder: 10152:10153 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 484.771410][ T5157] binder: release 10152:10153 transaction 205 out, still active [ 484.772815][ T5157] binder: undelivered TRANSACTION_COMPLETE [ 484.997649][T10162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.010993][T10162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.013787][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1211'. [ 486.044773][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1211'. [ 486.633528][T10235] binder_user_error: 2 callbacks suppressed [ 486.633540][T10235] binder: 10234:10235 tried to acquire reference to desc 0, got 1 instead [ 486.637518][T10235] binder: 10234:10235 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 486.641796][T10235] binder: 10235 RLIMIT_NICE not set [ 486.642654][T10235] binder: 10235 RLIMIT_NICE not set [ 486.644423][T10235] binder: 10235 RLIMIT_NICE not set [ 486.645490][T10235] binder: 10234:10235 got transaction with invalid data ptr [ 486.648597][T10235] binder_debug: 2 callbacks suppressed [ 486.648606][T10235] binder: 10234:10235 transaction reply to 10234:10235 failed 211/29201/-14, size 0-24 line 3333 [ 486.651876][T10235] binder: send failed reply for transaction 210 to 10234:10235 [ 486.660658][ T5157] binder: undelivered TRANSACTION_COMPLETE [ 486.662025][ T5157] binder: undelivered TRANSACTION_ERROR: 29201 [ 486.663217][ T5157] binder: undelivered TRANSACTION_ERROR: 29190 [ 486.687718][T10240] loop8: detected capacity change from 0 to 128 [ 486.700557][T10240] EXT4-fs (loop8): Test dummy encryption mode enabled [ 486.712118][T10240] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 486.801143][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.802698][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.881097][ T6272] EXT4-fs (loop8): unmounting filesystem. [ 487.869147][T10296] binder: 10295:10296 tried to acquire reference to desc 0, got 1 instead [ 487.874502][T10296] binder: 10295:10296 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 487.885221][T10300] loop0: detected capacity change from 0 to 512 [ 487.888182][T10296] binder: 10296 RLIMIT_NICE not set [ 487.889225][T10296] binder: 10296 RLIMIT_NICE not set [ 487.891653][T10296] binder: 10295:10296 transaction reply to 10295:10296 failed 217/29201/-14, size 0-24 line 3333 [ 487.896812][T10296] binder: send failed reply for transaction 216 to 10295:10296 [ 487.906109][T10300] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1227: corrupted in-inode xattr [ 487.909704][T10300] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1227: couldn't read orphan inode 15 (err -117) [ 487.911746][ T22] binder: undelivered TRANSACTION_COMPLETE [ 487.911782][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 487.911884][ T22] binder: undelivered TRANSACTION_ERROR: 29190 [ 487.913157][T10300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 487.931545][T10300] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1227: dx entry: limit 0 != root limit 125 [ 487.935801][T10300] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1227: Corrupt directory, running e2fsck is recommended [ 488.013301][T10311] loop2: detected capacity change from 0 to 128 [ 488.015309][T10311] EXT4-fs (loop2): Test dummy encryption mode enabled [ 488.051531][T10311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 488.056326][ T8999] EXT4-fs (loop0): unmounting filesystem. [ 488.288392][ T9006] EXT4-fs (loop2): unmounting filesystem. [ 488.337676][T10309] loop7: detected capacity change from 0 to 32768 [ 488.546577][T10343] binder: BINDER_SET_CONTEXT_MGR already set [ 488.547837][T10343] binder: 10341:10343 ioctl 4018620d 20000100 returned -16 [ 489.185595][T10391] overlayfs: missing 'lowerdir' [ 489.692085][T10423] loop2: detected capacity change from 0 to 512 [ 489.744543][T10423] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.832632][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.834263][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.819393][T10539] loop2: detected capacity change from 0 to 7 [ 491.824429][ T9093] Dev loop2: unable to read RDB block 7 [ 491.825388][ T9093] loop2: unable to read partition table [ 491.829790][ T9093] loop2: partition table beyond EOD, truncated [ 491.892568][T10539] Dev loop2: unable to read RDB block 7 [ 491.894772][T10539] loop2: unable to read partition table [ 491.901223][T10539] loop2: partition table beyond EOD, truncated [ 491.909865][T10539] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 494.057299][ T47] Bluetooth: hci3: command 0xfc11 tx timeout [ 494.057324][ T4329] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 494.370369][T10681] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 494.393394][T10681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.399468][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1291'. [ 494.407317][T10681] device bridge1 entered promiscuous mode [ 494.472183][T10681] bond1: (slave bridge1): making interface the new active one [ 494.567919][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.570275][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.782374][T10681] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 494.784218][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 495.061535][T10707] Bluetooth: hci0: unsupported parameter 255 [ 495.062742][T10707] Bluetooth: hci0: unsupported parameter 255 [ 495.078111][T10711] loop8: detected capacity change from 0 to 512 [ 495.080845][T10695] loop0: detected capacity change from 0 to 32768 [ 495.086121][T10711] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 495.094411][T10695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1293 (10695) [ 495.103907][T10695] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 495.111158][T10695] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 495.122735][T10711] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 495.167912][T10695] BTRFS info (device loop0): setting nodatacow, compression disabled [ 495.177076][T10695] BTRFS info (device loop0): force clearing of disk cache [ 495.181893][T10711] EXT4-fs (loop8): 1 truncate cleaned up [ 495.183002][T10711] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 495.202550][T10695] BTRFS info (device loop0): turning off barriers [ 495.203695][T10695] BTRFS info (device loop0): use no compression [ 495.204700][T10695] BTRFS info (device loop0): setting datasum, datacow enabled [ 495.209876][T10695] BTRFS info (device loop0): enabling ssd optimizations [ 495.211026][T10695] BTRFS info (device loop0): using spread ssd allocation scheme [ 495.212606][T10695] BTRFS info (device loop0): enabling disk space caching [ 495.213775][T10695] BTRFS info (device loop0): disk space caching is enabled [ 495.266243][ T6272] EXT4-fs (loop8): unmounting filesystem. [ 495.529801][T10695] BTRFS info (device loop0): rebuilding free space tree [ 495.585282][T10695] BTRFS info (device loop0): disabling free space tree [ 495.591386][T10695] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 495.595453][T10695] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 495.611611][T10695] BTRFS info (device loop0): checking UUID tree [ 496.255147][ T8999] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 496.889486][T10812] Bluetooth: hci0: unsupported parameter 255 [ 496.890581][T10812] Bluetooth: hci0: unsupported parameter 255 [ 497.195710][ T47] Bluetooth: hci3: command 0xfc11 tx timeout [ 497.198099][ T4326] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 497.286934][T10839] tmpfs: Unknown parameter 'usrquota' [ 498.587359][T10858] overlayfs: missing 'lowerdir' [ 498.998472][T10891] Bluetooth: hci0: unsupported parameter 255 [ 499.000721][T10891] Bluetooth: hci0: unsupported parameter 255 [ 499.143249][T10908] loop1: detected capacity change from 0 to 512 [ 499.160914][T10908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 499.186989][T10908] EXT4-fs (loop1): 1 truncate cleaned up [ 499.188096][T10908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 499.252893][ T6909] EXT4-fs (loop1): unmounting filesystem. [ 499.292582][T10917] loop1: detected capacity change from 0 to 128 [ 499.311971][T10917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 499.339921][ T6909] EXT4-fs (loop1): unmounting filesystem. [ 500.156352][T10971] loop8: detected capacity change from 0 to 32768 [ 500.167694][T10971] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 500.172296][T10971] JBD2: Ignoring recovery information on journal [ 500.184842][T10971] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 500.215142][ T6272] ocfs2: Unmounting device (7,8) on (node local) [ 500.472567][T10985] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 500.532322][T10991] loop0: detected capacity change from 0 to 512 [ 500.534143][T10991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 500.540401][T10991] EXT4-fs (loop0): 1 truncate cleaned up [ 500.541582][T10991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 500.574874][ T8999] EXT4-fs (loop0): unmounting filesystem. [ 501.115813][ T4326] Bluetooth: hci3: command 0xfc11 tx timeout [ 501.118415][ T47] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 501.713261][T11016] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 502.952415][T10952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.610572][T11057] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 504.475710][ T4326] Bluetooth: hci3: command 0xfc11 tx timeout [ 504.526487][ T47] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 504.787098][T11112] loop8: detected capacity change from 0 to 16 [ 504.796654][T11112] erofs: (device loop8): mounted with root inode @ nid 36. [ 504.867539][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1367'. [ 505.204353][T11112] syz.8.1366: attempt to access beyond end of device [ 505.204353][T11112] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 505.206921][T11112] syz.8.1366: attempt to access beyond end of device [ 505.206921][T11112] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 505.315905][T11112] ================================================================== [ 505.317286][T11112] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 505.318696][T11112] Read of size 4096 at addr ffff0000dc915000 by task syz.8.1366/11112 [ 505.320027][T11112] [ 505.320424][T11112] CPU: 1 PID: 11112 Comm: syz.8.1366 Not tainted syzkaller #0 [ 505.321675][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.323326][T11112] Call trace: [ 505.323867][T11112] dump_backtrace+0x1c0/0x1ec [ 505.324641][T11112] show_stack+0x2c/0x3c [ 505.325334][T11112] __dump_stack+0x30/0x40 [ 505.326039][T11112] dump_stack_lvl+0xf4/0x15c [ 505.326797][T11112] print_address_description+0x88/0x218 [ 505.327719][T11112] print_report+0x50/0x68 [ 505.328493][T11112] kasan_report+0xa8/0xfc [ 505.329188][T11112] kasan_check_range+0x258/0x290 [ 505.330031][T11112] memcpy+0x48/0x90 [ 505.330669][T11112] z_erofs_transform_plain+0x3a4/0x490 [ 505.331572][T11112] z_erofs_decompress+0x9c/0xd4 [ 505.332380][T11112] z_erofs_decompress_queue+0x100c/0x1b40 [ 505.333293][T11112] z_erofs_runqueue+0x152c/0x16cc [ 505.334128][T11112] z_erofs_read_folio+0x2d8/0x5c8 [ 505.335004][T11112] filemap_read_folio+0x134/0x384 [ 505.335846][T11112] filemap_read+0x12cc/0x2104 [ 505.336671][T11112] generic_file_read_iter+0xf8/0x5c4 [ 505.337540][T11112] vfs_read+0x3d4/0x7f0 [ 505.338267][T11112] ksys_read+0x12c/0x224 [ 505.338996][T11112] __arm64_sys_read+0x7c/0x90 [ 505.339813][T11112] invoke_syscall+0x98/0x2b4 [ 505.340574][T11112] el0_svc_common+0x138/0x258 [ 505.341308][T11112] do_el0_svc+0x58/0x130 [ 505.342018][T11112] el0_svc+0x58/0x128 [ 505.342665][T11112] el0t_64_sync_handler+0x84/0xf0 [ 505.343493][T11112] el0t_64_sync+0x18c/0x190 [ 505.344241][T11112] [ 505.344644][T11112] Allocated by task 10914: [ 505.345390][T11112] kasan_set_track+0x4c/0x80 [ 505.346143][T11112] kasan_save_alloc_info+0x24/0x30 [ 505.347026][T11112] __kasan_kmalloc+0xa0/0xb8 [ 505.347802][T11112] __kmalloc+0xec/0x178 [ 505.348512][T11112] hash_ipport4_resize+0x8a4/0x1678 [ 505.349435][T11112] call_ad+0x3b8/0x944 [ 505.350176][T11112] ip_set_ad+0x5f4/0x7d8 [ 505.350914][T11112] ip_set_uadd+0x74/0x8c [ 505.351651][T11112] nfnetlink_rcv_msg+0xad0/0xfac [ 505.352501][T11112] netlink_rcv_skb+0x218/0x3e8 [ 505.353270][T11112] nfnetlink_rcv+0x214/0x1bfc [ 505.354102][T11112] netlink_unicast+0x60c/0x814 [ 505.354918][T11112] netlink_sendmsg+0x6f4/0x9c0 [ 505.355766][T11112] ____sys_sendmsg+0x5c8/0x938 [ 505.356640][T11112] __sys_sendmsg+0x288/0x374 [ 505.357463][T11112] __arm64_sys_sendmsg+0x80/0x94 [ 505.358234][T11112] invoke_syscall+0x98/0x2b4 [ 505.359058][T11112] el0_svc_common+0x138/0x258 [ 505.359877][T11112] do_el0_svc+0x58/0x130 [ 505.360647][T11112] el0_svc+0x58/0x128 [ 505.361341][T11112] el0t_64_sync_handler+0x84/0xf0 [ 505.362191][T11112] el0t_64_sync+0x18c/0x190 [ 505.362979][T11112] [ 505.363424][T11112] Freed by task 10914: [ 505.364105][T11112] kasan_set_track+0x4c/0x80 [ 505.364902][T11112] kasan_save_free_info+0x38/0x5c [ 505.365717][T11112] ____kasan_slab_free+0x148/0x1b0 [ 505.366597][T11112] __kasan_slab_free+0x18/0x28 [ 505.367352][T11112] slab_free_freelist_hook+0x16c/0x1e8 [ 505.368286][T11112] __kmem_cache_free+0xbc/0x218 [ 505.369088][T11112] kfree+0xd0/0x1a8 [ 505.369720][T11112] hash_ipport4_resize+0xb00/0x1678 [ 505.370547][T11112] call_ad+0x3b8/0x944 [ 505.371209][T11112] ip_set_ad+0x5f4/0x7d8 [ 505.371893][T11112] ip_set_uadd+0x74/0x8c [ 505.372630][T11112] nfnetlink_rcv_msg+0xad0/0xfac [ 505.373444][T11112] netlink_rcv_skb+0x218/0x3e8 [ 505.374182][T11112] nfnetlink_rcv+0x214/0x1bfc [ 505.374972][T11112] netlink_unicast+0x60c/0x814 [ 505.375744][T11112] netlink_sendmsg+0x6f4/0x9c0 [ 505.376492][T11112] ____sys_sendmsg+0x5c8/0x938 [ 505.377275][T11112] __sys_sendmsg+0x288/0x374 [ 505.378006][T11112] __arm64_sys_sendmsg+0x80/0x94 [ 505.378811][T11112] invoke_syscall+0x98/0x2b4 [ 505.379582][T11112] el0_svc_common+0x138/0x258 [ 505.380375][T11112] do_el0_svc+0x58/0x130 [ 505.381044][T11112] el0_svc+0x58/0x128 [ 505.381688][T11112] el0t_64_sync_handler+0x84/0xf0 [ 505.382503][T11112] el0t_64_sync+0x18c/0x190 [ 505.383233][T11112] [ 505.383639][T11112] The buggy address belongs to the object at ffff0000dc915000 [ 505.383639][T11112] which belongs to the cache kmalloc-128 of size 128 [ 505.386081][T11112] The buggy address is located 0 bytes inside of [ 505.386081][T11112] 128-byte region [ffff0000dc915000, ffff0000dc915080) [ 505.388381][T11112] [ 505.388765][T11112] The buggy address belongs to the physical page: [ 505.389896][T11112] page:00000000291b96d6 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c915 [ 505.391707][T11112] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 505.393091][T11112] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0002300 [ 505.394630][T11112] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 505.396053][T11112] page dumped because: kasan: bad access detected [ 505.397104][T11112] [ 505.397513][T11112] Memory state around the buggy address: [ 505.398472][T11112] ffff0000dc914f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.399864][T11112] ffff0000dc914f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.401226][T11112] >ffff0000dc915000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 505.402611][T11112] ^ [ 505.403314][T11112] ffff0000dc915080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 505.404698][T11112] ffff0000dc915100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 505.406117][T11112] ================================================================== [ 505.408210][T11112] Disabling lock debugging due to kernel taint [ 505.409423][T11112] syz.8.1366: attempt to access beyond end of device [ 505.409423][T11112] loop8: rw=0, sector=1056, nr_sectors = 8 limit=16