last executing test programs: 3m36.436187174s ago: executing program 1 (id=34): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) pipe2(0x0, 0x84580) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) truncate(0x0, 0x7f0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5}) 3m35.602388911s ago: executing program 1 (id=36): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/83, 0x2000, 0x20000000, &(0x7f0000000100)={0x77359400}) r1 = mq_open(&(0x7f0000000480)='eth0\x00\xf1\x80{\xa8d\xba3\xcb\xae\x99\xe1\x14z\xd3\xe4\x80\xa2\xbc\xdd\xb8\xed\xe9\xa34s\xa6R(\x12\x91i\xeb\x1f\xd1\x8d\xb6\x9a|\xf2\xa6e\x02\x98\x88x\x8b\x85#v#\xf0/\x84\x7f_\x05\xcd9\xe1aRK\xd9\xc5\x99|\xcd\a\x17\xd1\xd2\a\xab\xd2\xd2b\xa9\xf7d%$\xc0\xa6vBK\x9f\x1c\x19s\xa5}|Q\xd5\xe6%!g\xad1M\xa0j\xa2x\a\x14T\xe6t\xa2v\xc3n\x93\\\xcc\x96\x00\xe4\x1f\x94\xac\xb5\xd6\xe5\xccm\x95\xa8R\x00r\x8fg\x9b\xc0\xc3\x15\xd0XB\xf1\xf2>~\x9dmQ\xae\xbe\xca\x1c\xdeQ\xc6\x1e\x12&\x9f\xbe\\?\x99\x18E\xe0\xd7\xf1^.S\xc4\x8f8{IY\vVsw_@P\x99\xd70\xad\xa4\xfd\x04\x7f>h\x8b\xd1q\xb9\x95\xef\xd0\'\xef\xb6\r\x9b\xd7\x1b\x0e\xa2\xcc\xc2\xe5\xce\xcb\xc3`b\xdc\xad\x9d\xf0.\b\xa5\xdfg8\x01\x92,\xb9\'+\x02Uc\xacI{R&\xb0\xd4\xe6\xecr\xfd\x94w', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 3m35.484003914s ago: executing program 1 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0xc00) 3m35.371138578s ago: executing program 1 (id=40): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$eJzs289qE1EUB+CT2Na0LpKFK3Ex4MZVaPoEBqkgBgQlCwVBsQ1IRwIWArow2bnwIfRx3OqTuCwiXEmmf5Iai5Q2A+n3bXKYub9w7pDkMIF5efvt3k5/v/ei9y1qlUpU76UUB5VoRDWOjAIAWCYHKcWXiEjXR7H+NdKvVCi7LwDg8ozn/8/xwD+c/yY/ACy/p8+eP2p3OttPsqwWkX8adAfd4rU43+7Fm8hjNzajHr8j0rGifvCws72ZTTTicz48zA8H3Wuz+VbUozE/3yry2Wx+NTam81tRj5vz81tz82tx985Uvhn1+PE6+pHHToyzJ/mPrSy7/7hzKn9jsg4AAACWQTM7Nvf+vdn81/ki36789/8Dp+6vV+LWSrl7B4Crav/9h71Xeb77bqHF2tSRiBidsfj7RtHo4jrMzhk/uqSLvpgXV6zHxb/zapS/r+Up+tXzx1NKw/Hn8+zFtYiYFOX9JgGLcfLtnzlcL60hAAAAAAAAAAAAAADgL4t4dKnsPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9fwJAAD//xQYkLQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x3, 0x90001) 3m35.207565473s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xd4, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f0000002180)="$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") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) 3m35.098547067s ago: executing program 1 (id=44): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x40040}], 0x1, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) 3m19.923075792s ago: executing program 32 (id=44): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x40040}], 0x1, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) 2m38.000109304s ago: executing program 4 (id=315): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x184, 0x1000440, 0x0, 0x7, 0x7fff, 0x7, 0x0, 0x0, 0x4, 0x472}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@nolazytime}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727307793d63703733372c73686f72746e616d653d6c6f7765722c756e695f786c6174653d310e636865636b3d72656c617865642c73686f720200616d653d6c6f7765722c696f636861727365743d69736f383835392d362c6e66732c636865636b3d6e6f726d616c2c636f646570757466383d302c726f6469722c757466383d302c000000000000000000000000006f00000ceacb18e40574d88701209446ebbfdf5db2da92a16a25e1beaccfbafdc63b33c8846f88c116ee3ec89bf47755a9a3d3443213554cda412e8983f73eb10338e70071d05aaebf6a2d14bb594f57c6e5f99e5cd3161783a8f9041bc15f7a8d8ad7137230596d49039fe09a78bfcbdee0c7c5528d50b2a9aca6ab97c2cd8b982c4a52be1d08134839b5e4e2f54a622fd2e718be1e3044d7b0cfdd6ec6d70a1fd21f604a88fe3e3c922fc2faa56010bf091ede2897a70c84830077c40629c93f057a5a216e6b9bfa0aa7815001d53f40a2a8dc2385ee187cea85aa9653b7dcc98fd8b4067a470927558e5e2f16f6c2904ec1a7a6e5338a21aad05ab63588d44975009c4915155a35e8afc26993a84933e10f1a2e81f50a20be4374192d821a42e8c2b5cb78022a9c986590dea1c5c09652b7f91f5a066a86f901c3868cc909f7fc0de46870b5790e9439ed8da23849f3a8af48566dec7b6cbda82ad67a553fded8a01652a1b92e7d61e4d354dc07f3e1fcdc4c79f22ec5d8c2651a01cb1a646e41a518"], 0xc1, 0x29b, &(0x7f00000013c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e00edfffbff9402000000000000400000000000faffcf0000d425000000"], 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r3, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44800, 0x40140}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x40818) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209"], 0x0) 2m34.818589676s ago: executing program 4 (id=333): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m34.572215564s ago: executing program 4 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m34.245881464s ago: executing program 4 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 2m33.362182363s ago: executing program 4 (id=343): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x184, 0x1000440, 0x0, 0x7, 0x7fff, 0x7, 0x0, 0x0, 0x4, 0x472}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@nolazytime}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xc1, 0x29b, &(0x7f00000013c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e00edfffbff9402000000000000400000000000faffcf0000d425000000"], 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r3, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44800, 0x40140}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x40818) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209"], 0x0) 2m30.3156181s ago: executing program 4 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, 0x0}, 0x4005) 2m15.237150532s ago: executing program 33 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, 0x0}, 0x4005) 38.75782748s ago: executing program 3 (id=917): sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 38.563534666s ago: executing program 2 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 38.513793778s ago: executing program 5 (id=921): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}, {{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x1, 0x3, 0x1}}, 0x80, 0x0}}], 0x2, 0x0) 38.466361399s ago: executing program 5 (id=922): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 27.913550347s ago: executing program 3 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.8307253s ago: executing program 5 (id=926): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x2, 0x2, 0x6, 0x4, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xfffe, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 27.81878397s ago: executing program 0 (id=927): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x0) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 27.818421981s ago: executing program 6 (id=928): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r2, 0xb97534d5fe9704cf, 0x400000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 27.494413581s ago: executing program 2 (id=929): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) unshare(0x20020600) flock(r0, 0x1) 27.466380621s ago: executing program 6 (id=930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c060}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.465473891s ago: executing program 0 (id=931): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 27.439960962s ago: executing program 2 (id=932): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 27.407227963s ago: executing program 5 (id=933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xb, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="800000800000210ee7decd7a0003a909e3a06646b9ee2d50ce5b32e3471196845bdbec7a7bf6051bf59081bbbe42c5e10458b5ad94790112c42d", 0x3a, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 27.406492883s ago: executing program 6 (id=934): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000000850000005500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 27.391587644s ago: executing program 0 (id=935): sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 26.978921677s ago: executing program 3 (id=936): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x10001}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000002c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20044881) 26.904285399s ago: executing program 2 (id=937): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 26.859864561s ago: executing program 0 (id=938): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) 26.798331173s ago: executing program 0 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 26.711985766s ago: executing program 5 (id=940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x9, 0x4, 0x0, 0xca6}, @eth={@multicast, @local, @void, {@generic={0x22f0, "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"}}}}, 0xfca) 26.533670271s ago: executing program 6 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 15.703641688s ago: executing program 3 (id=942): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x0) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 15.679980329s ago: executing program 3 (id=943): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unshare(0x20020600) flock(r0, 0x1) 15.664683489s ago: executing program 2 (id=944): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004b00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xe}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.662500469s ago: executing program 3 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c060}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.63650903s ago: executing program 6 (id=946): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 15.622739911s ago: executing program 5 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.563810612s ago: executing program 6 (id=948): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.190403605s ago: executing program 0 (id=949): sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 15.178229375s ago: executing program 2 (id=950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x28}}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x80) 551.897383ms ago: executing program 34 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 520.455043ms ago: executing program 35 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c060}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 60.176788ms ago: executing program 36 (id=949): sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 47.134019ms ago: executing program 37 (id=950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x28}}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x80) 0s ago: executing program 38 (id=948): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 870250][ T4326] device veth0_macvtap entered promiscuous mode [ 32.872679][ T4326] device veth1_macvtap entered promiscuous mode [ 32.885972][ T4328] device veth0_macvtap entered promiscuous mode [ 32.888426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.890112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.891749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.893342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.895036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.899891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.910653][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.912142][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.913602][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.915022][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.918962][ T4328] device veth1_macvtap entered promiscuous mode [ 32.921376][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.928950][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.932172][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.933820][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.935963][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.937386][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.938739][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.940420][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.946750][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.948718][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.950999][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.953049][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.959376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.961095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.962748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.964314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.970466][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.987562][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.989461][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.991762][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.994257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.996488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.998141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.999824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.009941][ T4327] device veth0_vlan entered promiscuous mode [ 33.013040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.014757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.017567][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.019163][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020763][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.022418][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.031613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.033211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.034732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.038054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.039870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.041592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.046544][ T4327] device veth1_vlan entered promiscuous mode [ 33.050943][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052560][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.054190][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056365][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.059719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.061303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.062883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.064409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.076933][ T4338] device veth0_vlan entered promiscuous mode [ 33.084960][ T4327] device veth0_macvtap entered promiscuous mode [ 33.091182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.092996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.094743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.104283][ T4327] device veth1_macvtap entered promiscuous mode [ 33.111766][ T4338] device veth1_vlan entered promiscuous mode [ 33.126131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.127835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.129503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.131141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.132807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.134403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.137118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.138674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.141810][ T4334] device veth0_vlan entered promiscuous mode [ 33.161468][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.162937][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.162963][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.167960][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.169790][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.171763][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.174197][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.178718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.180357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.181974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.183914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.189582][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.191470][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.193227][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.195139][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.198321][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.202047][ T4334] device veth1_vlan entered promiscuous mode [ 33.208425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.210131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.211843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.214074][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.216176][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217731][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.219393][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.223366][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.224893][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.235890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.237582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.242968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.244670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.248488][ T4338] device veth0_macvtap entered promiscuous mode [ 33.262804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.264425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.266705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.272073][ T4338] device veth1_macvtap entered promiscuous mode [ 33.275940][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.276895][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.277331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.278697][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.280163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.284965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.287694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.289590][ T4334] device veth0_macvtap entered promiscuous mode [ 33.292324][ T4334] device veth1_macvtap entered promiscuous mode [ 33.298715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.300395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.312924][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.314465][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.316967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.321273][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.323184][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.324979][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.329221][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.331020][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.332932][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340626][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.342744][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.344627][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.349137][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.350967][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.352745][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.354571][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.356761][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.358678][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.361116][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.364195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.366214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.367918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.369549][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.380326][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.382265][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.383970][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.390060][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.391870][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.396133][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.398659][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.400500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.402200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.410942][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.412365][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.413928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.417058][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.418945][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.420690][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.422626][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.430017][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.431791][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.433566][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.435756][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.438427][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.440215][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.441791][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.443405][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.445075][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.522520][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.524392][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.531965][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.532532][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.533337][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.534965][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.337241][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 34.340740][ T4339] Bluetooth: hci0: command 0x041b tx timeout [ 34.342326][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 34.343538][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.344688][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 34.357495][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.367035][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.489992][ T4419] device team_slave_0 entered promiscuous mode [ 34.491208][ T4419] device team_slave_1 entered promiscuous mode [ 34.493035][ T4419] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 34.735538][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.816351][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.817906][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.823503][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.171541][ T4437] usb usb8: usbfs: process 4437 (syz.0.1) did not claim interface 0 before use [ 35.184243][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.188221][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.194707][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.214747][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.223138][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.227948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.259086][ T4443] device syzkaller0 entered promiscuous mode [ 35.815207][ T4452] loop3: detected capacity change from 0 to 4096 [ 35.851109][ T4396] Bluetooth: hci5: Frame reassembly failed (-84) [ 35.879577][ T4452] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.884582][ T4452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.899231][ T4452] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 35.904047][ T4452] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 35.924410][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 36.028812][ T4468] loop3: detected capacity change from 0 to 8 [ 36.032605][ T4468] SQUASHFS error: zlib decompression failed, data probably corrupt [ 36.034274][ T4468] SQUASHFS error: Failed to read block 0x9b: -5 [ 36.036863][ T4468] SQUASHFS error: Unable to read metadata cache entry [99] [ 36.038246][ T4468] SQUASHFS error: Unable to read inode 0x127 [ 36.045184][ T4468] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 36.405505][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 36.406834][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 36.408045][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 36.409257][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 36.410483][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 37.883959][ T4496] loop0: detected capacity change from 0 to 256 [ 37.912500][ T4496] FAT-fs (loop0): Directory bread(block 64) failed [ 37.913998][ T4496] FAT-fs (loop0): Directory bread(block 65) failed [ 37.917711][ T4496] FAT-fs (loop0): Directory bread(block 66) failed [ 37.919045][ T4496] FAT-fs (loop0): Directory bread(block 67) failed [ 37.920390][ T4496] FAT-fs (loop0): Directory bread(block 68) failed [ 37.921823][ T4496] FAT-fs (loop0): Directory bread(block 69) failed [ 37.923165][ T4496] FAT-fs (loop0): Directory bread(block 70) failed [ 37.924464][ T4496] FAT-fs (loop0): Directory bread(block 71) failed [ 37.925694][ T4339] Bluetooth: hci5: command 0xfc11 tx timeout [ 37.926871][ T4329] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 37.928787][ T4496] FAT-fs (loop0): Directory bread(block 72) failed [ 37.930141][ T4496] FAT-fs (loop0): Directory bread(block 73) failed [ 37.995185][ T4500] device syzkaller1 entered promiscuous mode [ 37.998029][ T4502] loop1: detected capacity change from 0 to 1024 [ 38.004586][ T4502] ======================================================= [ 38.004586][ T4502] WARNING: The mand mount option has been deprecated and [ 38.004586][ T4502] and is ignored by this kernel. Remove the mand [ 38.004586][ T4502] option from the mount to silence this warning. [ 38.004586][ T4502] ======================================================= [ 38.012141][ T4502] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.027790][ T4502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 38.030151][ T4502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.053683][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 38.486771][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 38.488328][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 38.490099][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 38.491891][ T4329] Bluetooth: hci1: command 0x0419 tx timeout [ 38.493634][ T4329] Bluetooth: hci4: command 0x0419 tx timeout [ 39.040444][ T4523] device syzkaller0 entered promiscuous mode [ 39.213026][ T4529] xt_hashlimit: size too large, truncated to 1048576 [ 39.242773][ T4532] loop1: detected capacity change from 0 to 128 [ 39.269233][ T4532] FAT-fs (loop1): Directory bread(block 32) failed [ 39.270630][ T4532] FAT-fs (loop1): Directory bread(block 33) failed [ 39.271780][ T4532] FAT-fs (loop1): Directory bread(block 34) failed [ 39.272985][ T4532] FAT-fs (loop1): Directory bread(block 35) failed [ 39.274236][ T4532] FAT-fs (loop1): Directory bread(block 36) failed [ 39.275689][ T4532] FAT-fs (loop1): Directory bread(block 37) failed [ 39.277090][ T4532] FAT-fs (loop1): Directory bread(block 38) failed [ 39.278295][ T4532] FAT-fs (loop1): Directory bread(block 39) failed [ 39.279693][ T4532] FAT-fs (loop1): Directory bread(block 40) failed [ 39.280895][ T4532] FAT-fs (loop1): Directory bread(block 41) failed [ 39.319175][ T4532] syz.1.40: attempt to access beyond end of device [ 39.319175][ T4532] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 39.322348][ T4532] FAT-fs (loop1): Filesystem has been set read-only [ 39.323564][ T4532] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.412827][ T4535] loop1: detected capacity change from 0 to 1024 [ 39.414558][ T4535] EXT4-fs: Ignoring removed bh option [ 39.456161][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.499660][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 39.520686][ T4545] loop3: detected capacity change from 0 to 256 [ 39.534385][ T4545] FAT-fs (loop3): Directory bread(block 64) failed [ 39.541580][ T4545] FAT-fs (loop3): Directory bread(block 65) failed [ 39.542847][ T4545] FAT-fs (loop3): Directory bread(block 66) failed [ 39.544006][ T4545] FAT-fs (loop3): Directory bread(block 67) failed [ 39.545229][ T4545] FAT-fs (loop3): Directory bread(block 68) failed [ 39.548787][ T4545] FAT-fs (loop3): Directory bread(block 69) failed [ 39.550124][ T4545] FAT-fs (loop3): Directory bread(block 70) failed [ 39.551289][ T4545] FAT-fs (loop3): Directory bread(block 71) failed [ 39.552534][ T4545] FAT-fs (loop3): Directory bread(block 72) failed [ 39.553745][ T4545] FAT-fs (loop3): Directory bread(block 73) failed [ 39.746061][ T4552] device syzkaller0 entered promiscuous mode [ 39.903118][ T4557] xt_hashlimit: size too large, truncated to 1048576 [ 39.904778][ T4557] xt_hashlimit: overflow, try lower: 3/0 [ 40.144958][ T4567] loop3: detected capacity change from 0 to 8 [ 40.156868][ T4567] SQUASHFS error: zlib decompression failed, data probably corrupt [ 40.158548][ T4567] SQUASHFS error: Failed to read block 0x9b: -5 [ 40.159875][ T4567] SQUASHFS error: Unable to read metadata cache entry [99] [ 40.161337][ T4567] SQUASHFS error: Unable to read inode 0x127 [ 40.489545][ T4571] loop3: detected capacity change from 0 to 4096 [ 40.497583][ T4571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.499316][ T4571] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.502536][ T4571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.547597][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 40.625471][ T4578] random: crng reseeded on system resumption [ 40.657883][ T4580] device syzkaller0 entered promiscuous mode [ 41.125974][ T4588] device syzkaller0 entered promiscuous mode [ 41.421022][ T4599] fuse: Unknown parameter '0x0000000000000003' [ 41.513699][ T4603] loop3: detected capacity change from 0 to 2048 [ 41.524787][ T4603] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.530266][ T4603] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.559428][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.739342][ T4611] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 41.752314][ T4611] PKCS7: Only support pkcs7_signedData type [ 41.771702][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 41.773451][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 42.102794][ T1575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 42.108524][ T1575] EXT4-fs (loop3): Remounting filesystem read-only [ 42.183760][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 43.373382][ T4631] loop0: detected capacity change from 0 to 128 [ 43.401841][ T4630] device syzkaller0 entered promiscuous mode [ 43.422378][ T4631] syz.0.71: attempt to access beyond end of device [ 43.422378][ T4631] loop0: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 43.492211][ T4631] syz.0.71: attempt to access beyond end of device [ 43.492211][ T4631] loop0: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 43.638937][ T4638] loop3: detected capacity change from 0 to 8 [ 43.652033][ T4638] SQUASHFS error: zlib decompression failed, data probably corrupt [ 43.653576][ T4638] SQUASHFS error: Failed to read block 0x9b: -5 [ 43.660598][ T4638] SQUASHFS error: Unable to read metadata cache entry [99] [ 43.662136][ T4638] SQUASHFS error: Unable to read inode 0x127 [ 43.685320][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 43.765421][ T4481] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.798759][ T4640] device syzkaller0 entered promiscuous mode [ 43.839510][ T4642] fuse: Unknown parameter '0x0000000000000003' [ 43.977739][ T4481] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 43.979399][ T4481] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.981207][ T4481] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 43.983182][ T4481] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.986964][ T4481] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 43.988543][ T4481] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 43.990075][ T4481] usb 1-1: Product: syz [ 43.990867][ T4481] usb 1-1: Manufacturer: syz [ 43.996922][ T4481] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 44.199600][ T3899] usb 1-1: USB disconnect, device number 2 [ 44.417166][ T4651] loop4: detected capacity change from 0 to 512 [ 44.423751][ T4651] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.426288][ T4651] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.428862][ T4651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.430894][ T4651] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 45.263291][ T4665] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 45.265183][ T4665] PKCS7: Only support pkcs7_signedData type [ 45.270063][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 45.271983][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 46.387088][ T4677] Zero length message leads to an empty skb [ 46.396410][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 46.855553][ T4677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.867219][ T4680] device syzkaller0 entered promiscuous mode [ 46.895964][ T4687] device syzkaller0 entered promiscuous mode [ 46.900556][ T4689] loop0: detected capacity change from 0 to 512 [ 46.902275][ T4689] EXT4-fs: Ignoring removed orlov option [ 46.903358][ T4689] EXT4-fs: Ignoring removed nobh option [ 46.909175][ T4689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.923661][ T4689] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.90: bg 0: block 248: padding at end of block bitmap is not set [ 46.928457][ T4689] Quota error (device loop0): write_blk: dquota write failed [ 46.930103][ T4689] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 46.932022][ T4689] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.90: Failed to acquire dquot type 1 [ 46.937004][ T4689] EXT4-fs (loop0): 1 truncate cleaned up [ 46.938176][ T4689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.107759][ T4689] device syzkaller0 entered promiscuous mode [ 47.162263][ T4697] loop3: detected capacity change from 0 to 128 [ 47.185692][ T4697] syz.3.92: attempt to access beyond end of device [ 47.185692][ T4697] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 47.257649][ T4697] syz.3.92: attempt to access beyond end of device [ 47.257649][ T4697] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 47.265818][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.267567][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.379823][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 47.445340][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 47.551332][ T4708] loop0: detected capacity change from 0 to 512 [ 47.562446][ T4708] EXT4-fs: Ignoring removed i_version option [ 47.565670][ T4708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.574709][ T4708] EXT4-fs (loop0): 1 truncate cleaned up [ 47.576864][ T4708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.044361][ T4716] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 49.046096][ T4716] PKCS7: Only support pkcs7_signedData type [ 49.052478][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 49.054297][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 49.115959][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 50.312856][ T4734] device syzkaller0 entered promiscuous mode [ 50.557728][ T4738] device syzkaller0 entered promiscuous mode [ 51.003967][ T4747] loop0: detected capacity change from 0 to 512 [ 51.011281][ T4747] EXT4-fs: Ignoring removed orlov option [ 51.015106][ T4747] EXT4-fs: Ignoring removed nobh option [ 51.022966][ T4747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.029061][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.033815][ T4747] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.105: bg 0: block 248: padding at end of block bitmap is not set [ 51.038100][ T4747] Quota error (device loop0): write_blk: dquota write failed [ 51.039622][ T4747] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.041399][ T4747] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.105: Failed to acquire dquot type 1 [ 51.044284][ T4747] EXT4-fs (loop0): 1 truncate cleaned up [ 51.047626][ T4744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.050563][ T4747] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.088542][ T4747] device syzkaller0 entered promiscuous mode [ 51.093354][ T4751] loop3: detected capacity change from 0 to 128 [ 51.123181][ T4751] syz.3.106: attempt to access beyond end of device [ 51.123181][ T4751] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 51.192063][ T4751] syz.3.106: attempt to access beyond end of device [ 51.192063][ T4751] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 51.246093][ T4752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.247806][ T4752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.294836][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 51.385476][ T4756] loop4: detected capacity change from 0 to 512 [ 51.393281][ T4756] EXT4-fs: inline encryption not supported [ 51.396566][ T4756] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.406496][ T4756] EXT4-fs error (device loop4): __ext4_fill_super:5465: inode #2: comm syz.4.108: casefold flag without casefold feature [ 51.409558][ T4756] EXT4-fs (loop4): get root inode failed [ 51.410990][ T4756] EXT4-fs (loop4): mount failed [ 51.482019][ T4761] netlink: 64 bytes leftover after parsing attributes in process `syz.4.110'. [ 51.579932][ T4767] process 'syz.2.111' launched './file0' with NULL argv: empty string added [ 52.476426][ T4775] device syzkaller0 entered promiscuous mode [ 53.395251][ C0] sched: RT throttling activated [ 53.670789][ T4790] loop4: detected capacity change from 0 to 512 [ 53.691303][ T4790] EXT4-fs: Ignoring removed orlov option [ 53.701418][ T4790] EXT4-fs: Ignoring removed nobh option [ 53.710785][ T4790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.778421][ T4790] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.118: bg 0: block 248: padding at end of block bitmap is not set [ 53.834901][ T4790] Quota error (device loop4): write_blk: dquota write failed [ 53.855577][ T4790] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.878905][ T4790] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.118: Failed to acquire dquot type 1 [ 54.018929][ T4790] EXT4-fs (loop4): 1 truncate cleaned up [ 54.020207][ T4790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.033701][ T4790] device syzkaller0 entered promiscuous mode [ 54.180082][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 54.409791][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.535485][ T4811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.741395][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.744687][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.747301][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.749583][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.752497][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.754052][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.024391][ T4815] chnl_net:caif_netlink_parms(): no params data found [ 55.063437][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.065042][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.067294][ T4815] device bridge_slave_0 entered promiscuous mode [ 55.069484][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.071393][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.073125][ T4815] device bridge_slave_1 entered promiscuous mode [ 55.080039][ T4815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.083266][ T4815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.094372][ T4815] team0: Port device team_slave_0 added [ 55.122970][ T4815] team0: Port device team_slave_1 added [ 55.128326][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.129592][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.134972][ T4815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.138187][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.139657][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.144245][ T4815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.007896][ T4850] binder: 4849:4850 got transaction to invalid handle, 1 [ 56.010673][ T4850] binder: 4850:4849 cannot find target node [ 56.011806][ T4850] binder: 4849:4850 transaction call to 0:0 failed 4/29201/-22, size 0-0 line 3045 [ 56.020482][ T4850] binder: 4849:4850 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.026106][ T4850] binder: 4850 RLIMIT_NICE not set [ 56.071948][ T4853] binder: 4849:4853 got reply transaction with no transaction stack [ 56.073451][ T4853] binder: 4849:4853 transaction reply to 0:0 failed 5/29201/-71, size 0-0 line 2946 [ 56.377507][ T4396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.443304][ T4815] device hsr_slave_0 entered promiscuous mode [ 56.448847][ T4864] loop0: detected capacity change from 0 to 512 [ 56.454353][ T4864] EXT4-fs: Ignoring removed orlov option [ 56.455854][ T4815] device hsr_slave_1 entered promiscuous mode [ 56.457648][ T4864] EXT4-fs: Ignoring removed nobh option [ 56.481132][ T4853] syz.3.130 (4853): drop_caches: 2 [ 56.486197][ T4815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.487703][ T4815] Cannot create hsr debugfs directory [ 56.491362][ T4864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.519088][ T4396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.524173][ T4864] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.132: bg 0: block 248: padding at end of block bitmap is not set [ 56.541942][ T4864] Quota error (device loop0): write_blk: dquota write failed [ 56.543454][ T4864] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 56.550184][ T4864] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.132: Failed to acquire dquot type 1 [ 56.553836][ T4864] EXT4-fs (loop0): 1 truncate cleaned up [ 56.554965][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 56.570599][ T4864] device syzkaller0 entered promiscuous mode [ 56.604168][ T4871] Bluetooth: MGMT ver 1.22 [ 56.628792][ T4396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.747446][ T4396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.798517][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 56.805957][ T4329] Bluetooth: hci5: command 0x0409 tx timeout [ 56.811374][ T4815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.848248][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.849827][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.853372][ T4815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.903507][ T4815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.992005][ T4815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.102725][ T4815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.129419][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.131215][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.136836][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.150306][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.152360][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.155166][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.156494][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.194346][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.196414][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.201166][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.203980][ T4891] loop2: detected capacity change from 0 to 128 [ 57.221406][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.222780][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.258626][ T4891] syz.2.139: attempt to access beyond end of device [ 57.258626][ T4891] loop2: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 57.424932][ T4898] syz.2.139: attempt to access beyond end of device [ 57.424932][ T4898] loop2: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 57.481755][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.483487][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.604848][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.610083][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.613413][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.619160][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.632790][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.639047][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.643244][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.648497][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.653039][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.698947][ T4815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.701061][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.703279][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.704981][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.852858][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.854557][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.856596][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.162966][ T4936] loop4: detected capacity change from 0 to 128 [ 61.422634][ T4331] Bluetooth: hci5: command 0x041b tx timeout [ 61.423841][ T4331] Bluetooth: hci4: command 0x0406 tx timeout [ 61.703697][ T4936] EXT4-fs: failed to create workqueue [ 61.705048][ T4936] EXT4-fs (loop4): mount failed [ 61.778454][ T4944] fuse: Unknown parameter 'fd0x0000000000000003' [ 62.070641][ T4947] device syzkaller0 entered promiscuous mode [ 62.099504][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.101283][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.114748][ T4956] loop0: detected capacity change from 0 to 256 [ 62.115878][ T4957] loop4: detected capacity change from 0 to 512 [ 62.117501][ T4957] EXT4-fs: Ignoring removed orlov option [ 62.118569][ T4957] EXT4-fs: Ignoring removed nobh option [ 62.123303][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.125121][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.135626][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.138180][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.139720][ T4957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.141228][ T4959] binder: 4958:4959 got transaction to invalid handle, 1 [ 62.155453][ T4959] binder: 4959:4958 cannot find target node [ 62.156583][ T4959] binder: 4958:4959 transaction call to 0:0 failed 9/29201/-22, size 0-0 line 3045 [ 62.161636][ T4956] FAT-fs (loop0): Directory bread(block 64) failed [ 62.171685][ T4957] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.145: bg 0: block 248: padding at end of block bitmap is not set [ 62.173264][ T4956] FAT-fs (loop0): Directory bread(block 65) failed [ 62.174733][ T4957] Quota error (device loop4): write_blk: dquota write failed [ 62.177590][ T4957] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 62.178652][ T4959] binder: 4958:4959 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.182478][ T4957] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.145: Failed to acquire dquot type 1 [ 62.185123][ T4957] EXT4-fs (loop4): 1 truncate cleaned up [ 62.186441][ T4957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.200988][ T4959] binder: 4959 RLIMIT_NICE not set [ 62.202459][ T4956] FAT-fs (loop0): Directory bread(block 66) failed [ 62.203574][ T4956] FAT-fs (loop0): Directory bread(block 67) failed [ 62.204832][ T4956] FAT-fs (loop0): Directory bread(block 68) failed [ 62.206207][ T4956] FAT-fs (loop0): Directory bread(block 69) failed [ 62.207383][ T4956] FAT-fs (loop0): Directory bread(block 70) failed [ 62.208733][ T4956] FAT-fs (loop0): Directory bread(block 71) failed [ 62.209785][ T4956] FAT-fs (loop0): Directory bread(block 72) failed [ 62.210964][ T4956] FAT-fs (loop0): Directory bread(block 73) failed [ 62.229906][ T4963] binder: 4958:4963 got reply transaction with no transaction stack [ 62.231458][ T4963] binder: 4958:4963 transaction reply to 0:0 failed 10/29201/-71, size 0-0 line 2946 [ 62.240147][ T4963] syz.3.147 (4963): drop_caches: 2 [ 62.974604][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.976065][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.445437][ T4329] Bluetooth: hci5: command 0x040f tx timeout [ 64.487777][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489068][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.525425][ T4331] Bluetooth: hci5: command 0x0419 tx timeout [ 69.624990][ T7] cfg80211: failed to load regulatory.db [ 73.038776][ T4815] device veth0_vlan entered promiscuous mode [ 73.042308][ T4815] device veth1_vlan entered promiscuous mode [ 73.116369][ T4976] tap0: tun_chr_ioctl cmd 2147767521 [ 73.135170][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.137131][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.141949][ T5000] tipc: Enabling of bearer rejected, failed to enable media [ 73.151120][ T4815] device veth0_macvtap entered promiscuous mode [ 73.153508][ T4815] device veth1_macvtap entered promiscuous mode [ 73.184691][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 73.226060][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.228043][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.229789][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.234335][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.243794][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247333][ T5030] loop0: detected capacity change from 0 to 256 [ 73.249799][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.250794][ T5036] fuse: Unknown parameter 'group_i00000000000000000000' [ 73.251706][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.295764][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.302703][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.304498][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.306815][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.322787][ T5040] binder: 5037:5040 tried to acquire reference to desc 0, got 1 instead [ 73.324851][ T5040] binder: 5037:5040 ioctl c0306201 0 returned -14 [ 73.327639][ T5030] FAT-fs (loop0): Directory bread(block 64) failed [ 73.329068][ T5030] FAT-fs (loop0): Directory bread(block 65) failed [ 73.330348][ T5030] FAT-fs (loop0): Directory bread(block 66) failed [ 73.331558][ T5030] FAT-fs (loop0): Directory bread(block 67) failed [ 73.332943][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.334885][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.344548][ T5040] binder: 5037:5040 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 73.349915][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.379348][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.389339][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.403218][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.456571][ T5049] nfs4: Unknown parameter 'smackfshat' [ 75.049371][ T5030] FAT-fs (loop0): Directory bread(block 68) failed [ 75.065326][ T5040] binder: 5040 RLIMIT_NICE not set [ 75.065693][ T5030] FAT-fs (loop0): Directory bread(block 69) failed [ 75.067599][ T5030] FAT-fs (loop0): Directory bread(block 70) failed [ 75.068826][ T5030] FAT-fs (loop0): Directory bread(block 71) failed [ 75.070082][ T5030] FAT-fs (loop0): Directory bread(block 72) failed [ 75.071348][ T5030] FAT-fs (loop0): Directory bread(block 73) failed [ 75.082902][ T5057] binder: 5037:5057 got reply transaction with no transaction stack [ 75.084627][ T5057] binder: 5037:5057 transaction reply to 0:0 failed 15/29201/-71, size 0-0 line 2946 [ 75.087111][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.089062][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.090856][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.100552][ T5057] syz.3.160 (5057): drop_caches: 2 [ 75.122475][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.127846][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.133177][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.137370][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.142232][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.169930][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.177296][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.181177][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.221317][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.272842][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.282276][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.285313][ T4815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.286958][ T4815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.289153][ T4815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.290822][ T4815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.294858][ T5071] loop3: detected capacity change from 0 to 512 [ 75.304721][ T5071] EXT4-fs: Ignoring removed orlov option [ 75.323718][ T5071] EXT4-fs: Ignoring removed nobh option [ 75.334471][ T5071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.654884][ T5071] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.165: bg 0: block 248: padding at end of block bitmap is not set [ 75.663475][ T5071] Quota error (device loop3): write_blk: dquota write failed [ 75.669224][ T5071] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 75.685471][ T5071] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.165: Failed to acquire dquot type 1 [ 75.689474][ T5071] EXT4-fs (loop3): 1 truncate cleaned up [ 75.690463][ T5071] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.741731][ T5071] device syzkaller0 entered promiscuous mode [ 76.138246][ T4449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.142544][ T4449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.183563][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 76.266580][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.272838][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.274374][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.279231][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.353991][ T5111] loop2: detected capacity change from 0 to 256 [ 76.685071][ T5111] FAT-fs (loop2): Directory bread(block 64) failed [ 76.689828][ T5111] FAT-fs (loop2): Directory bread(block 65) failed [ 76.691198][ T5111] FAT-fs (loop2): Directory bread(block 66) failed [ 76.692503][ T5111] FAT-fs (loop2): Directory bread(block 67) failed [ 76.693792][ T5111] FAT-fs (loop2): Directory bread(block 68) failed [ 76.694982][ T5111] FAT-fs (loop2): Directory bread(block 69) failed [ 76.761437][ T5111] FAT-fs (loop2): Directory bread(block 70) failed [ 76.762929][ T5111] FAT-fs (loop2): Directory bread(block 71) failed [ 76.764318][ T5111] FAT-fs (loop2): Directory bread(block 72) failed [ 76.766186][ T5111] FAT-fs (loop2): Directory bread(block 73) failed [ 77.079064][ T5108] tipc: Enabling of bearer rejected, failed to enable media [ 77.083360][ T5118] device syzkaller0 entered promiscuous mode [ 77.084816][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 77.585872][ T5134] binder: 5126:5134 tried to acquire reference to desc 0, got 1 instead [ 77.587646][ T5134] binder: 5126:5134 ioctl c0306201 0 returned -14 [ 77.589881][ T5134] binder: 5126:5134 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.598908][ T5134] binder: 5134 RLIMIT_NICE not set [ 77.601949][ T4396] device hsr_slave_0 left promiscuous mode [ 77.618630][ T4396] device hsr_slave_1 left promiscuous mode [ 77.640972][ T5141] binder: 5126:5141 got reply transaction with no transaction stack [ 77.642663][ T5141] binder: 5126:5141 transaction reply to 0:0 failed 20/29201/-71, size 0-0 line 2946 [ 77.648170][ T5141] syz.3.174 (5141): drop_caches: 2 [ 77.735386][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.737015][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.802010][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.835572][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.011106][ T4396] device bridge_slave_1 left promiscuous mode [ 78.014855][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.069262][ T4396] device bridge_slave_0 left promiscuous mode [ 78.071793][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.225721][ T4396] device veth1_macvtap left promiscuous mode [ 78.227305][ T4396] device veth0_macvtap left promiscuous mode [ 78.228691][ T4396] device veth1_vlan left promiscuous mode [ 78.229980][ T4396] device veth0_vlan left promiscuous mode [ 78.418148][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.965329][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 79.005677][ T5164] fuse: Unknown parameter 'group_id00000000000000000000' [ 80.847470][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 81.005997][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 81.176160][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.205858][ T4329] Bluetooth: hci5: command 0x0409 tx timeout [ 81.376365][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.866691][ T4396] bond0 (unregistering): Released all slaves [ 83.201584][ T5176] tipc: Enabling of bearer rejected, failed to enable media [ 83.248113][ T5201] binder: 5200:5201 tried to acquire reference to desc 0, got 1 instead [ 83.249950][ T5201] binder: 5200:5201 ioctl c0306201 0 returned -14 [ 83.256865][ T5201] binder: 5200:5201 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 83.262371][ T5199] loop2: detected capacity change from 0 to 4096 [ 83.283515][ T5201] binder: 5201 RLIMIT_NICE not set [ 83.294603][ T5209] loop3: detected capacity change from 0 to 128 [ 83.302274][ T5199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.309103][ T5212] binder: 5200:5212 got reply transaction with no transaction stack [ 83.310739][ T5212] binder: 5200:5212 transaction reply to 0:0 failed 25/29201/-71, size 0-0 line 2946 [ 83.324101][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 83.353028][ T5212] syz.0.192 (5212): drop_caches: 2 [ 83.367016][ T5209] syz.3.194: attempt to access beyond end of device [ 83.367016][ T5209] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 83.381268][ T5218] fuse: Unknown parameter 'group_id00000000000000000000' [ 83.502767][ T5221] syz.3.194: attempt to access beyond end of device [ 83.502767][ T5221] loop3: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 83.507335][ T5221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.509155][ T5221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.532094][ T5226] loop2: detected capacity change from 0 to 4096 [ 83.535161][ T5226] EXT4-fs: Ignoring removed i_version option [ 83.549282][ T5226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.344715][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.792872][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 85.346479][ T5277] loop2: detected capacity change from 0 to 512 [ 85.361981][ T5277] EXT4-fs: Ignoring removed orlov option [ 85.363288][ T5277] EXT4-fs: Ignoring removed nobh option [ 85.374892][ T5277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.394281][ T5277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.208: bg 0: block 248: padding at end of block bitmap is not set [ 85.400730][ T5277] Quota error (device loop2): write_blk: dquota write failed [ 85.404499][ T5277] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 85.413920][ T5277] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.208: Failed to acquire dquot type 1 [ 85.423954][ T5277] EXT4-fs (loop2): 1 truncate cleaned up [ 85.426280][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.446544][ T5277] device syzkaller0 entered promiscuous mode [ 85.578085][ T5286] fuse: Bad value for 'user_id' [ 85.602123][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 85.682421][ T5293] loop5: detected capacity change from 0 to 1024 [ 85.724240][ T5293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.768939][ T5293] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.797375][ T4815] EXT4-fs (loop5): unmounting filesystem. [ 85.928740][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.934456][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.941876][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 86.544886][ T5349] loop2: detected capacity change from 0 to 512 [ 86.551143][ T5349] EXT4-fs: Ignoring removed orlov option [ 86.556804][ T5349] EXT4-fs: Ignoring removed nobh option [ 86.565866][ T5349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.588449][ T5349] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.221: bg 0: block 248: padding at end of block bitmap is not set [ 86.592964][ T5349] Quota error (device loop2): write_blk: dquota write failed [ 86.594436][ T5349] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 86.597420][ T5349] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.221: Failed to acquire dquot type 1 [ 86.600549][ T5349] EXT4-fs (loop2): 1 truncate cleaned up [ 86.607397][ T5349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.632367][ T5349] device syzkaller0 entered promiscuous mode [ 86.885845][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 86.954011][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.226'. [ 86.958091][ T5369] device macvtap1 entered promiscuous mode [ 87.342529][ T5378] loop3: detected capacity change from 0 to 512 [ 87.366057][ T5378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.389705][ T5378] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.229: bad orphan inode 131083 [ 87.401437][ T5378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.696303][ T4331] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 87.699469][ T4331] Bluetooth: hci4: Injecting HCI hardware error event [ 87.702022][ T4329] Bluetooth: hci4: hardware error 0x00 [ 88.086534][ T5405] loop2: detected capacity change from 0 to 512 [ 88.090717][ T5405] EXT4-fs: Ignoring removed orlov option [ 88.091960][ T5405] EXT4-fs: Ignoring removed nobh option [ 88.093621][ T5405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.122127][ T5405] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.238: bg 0: block 248: padding at end of block bitmap is not set [ 88.129529][ T5405] Quota error (device loop2): write_blk: dquota write failed [ 88.133135][ T5405] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 88.135000][ T5405] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.238: Failed to acquire dquot type 1 [ 88.141027][ T5405] EXT4-fs (loop2): 1 truncate cleaned up [ 88.142138][ T5405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.152302][ T5405] device syzkaller0 entered promiscuous mode [ 88.192426][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 88.296301][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 88.527662][ T5416] device macvtap1 entered promiscuous mode [ 88.733459][ T5420] binder: 5419:5420 tried to acquire reference to desc 0, got 1 instead [ 88.738661][ T5420] binder: 5419:5420 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.745833][ T5420] binder: 5420 RLIMIT_NICE not set [ 88.789947][ T5421] binder: 5419:5421 got reply transaction with no transaction stack [ 88.791493][ T5421] binder: 5419:5421 transaction reply to 0:0 failed 30/29201/-71, size 0-0 line 2946 [ 88.814795][ T5421] syz.0.243 (5421): drop_caches: 2 [ 89.159752][ T5439] loop5: detected capacity change from 0 to 512 [ 89.168923][ T5439] EXT4-fs: Ignoring removed orlov option [ 89.174737][ T5439] EXT4-fs: Ignoring removed nobh option [ 89.180007][ T5439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.215787][ T5439] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.250: bg 0: block 248: padding at end of block bitmap is not set [ 89.218558][ T5439] Quota error (device loop5): write_blk: dquota write failed [ 89.220059][ T5439] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 89.223198][ T5439] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.250: Failed to acquire dquot type 1 [ 89.231269][ T5439] EXT4-fs (loop5): 1 truncate cleaned up [ 89.232604][ T5439] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 89.291963][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.293863][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.312031][ T5437] device team_slave_0 left promiscuous mode [ 89.313558][ T5437] device team_slave_1 left promiscuous mode [ 89.443934][ T5450] loop2: detected capacity change from 0 to 256 [ 89.493124][ T5450] FAT-fs (loop2): Directory bread(block 64) failed [ 89.501388][ T5450] FAT-fs (loop2): Directory bread(block 65) failed [ 89.507211][ T5450] FAT-fs (loop2): Directory bread(block 66) failed [ 89.508734][ T5450] FAT-fs (loop2): Directory bread(block 67) failed [ 89.510268][ T5450] FAT-fs (loop2): Directory bread(block 68) failed [ 89.511709][ T5450] FAT-fs (loop2): Directory bread(block 69) failed [ 89.513003][ T5450] FAT-fs (loop2): Directory bread(block 70) failed [ 89.514275][ T5450] FAT-fs (loop2): Directory bread(block 71) failed [ 89.518740][ T5450] FAT-fs (loop2): Directory bread(block 72) failed [ 89.521002][ T5450] FAT-fs (loop2): Directory bread(block 73) failed [ 89.567287][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.712143][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.736295][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.005385][ T4329] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 90.211577][ T5437] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.213211][ T5437] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.214913][ T5437] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.216943][ T5437] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.541789][ T5461] tipc: Enabling of bearer rejected, failed to enable media [ 90.629118][ T4815] EXT4-fs (loop5): unmounting filesystem. [ 90.672944][ T5494] binder: 5493:5494 tried to acquire reference to desc 0, got 1 instead [ 90.677934][ T5494] binder: 5493:5494 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.680514][ T5494] binder: 5494 RLIMIT_NICE not set [ 90.709065][ T5495] loop4: detected capacity change from 0 to 256 [ 90.723387][ T5495] FAT-fs (loop4): Directory bread(block 64) failed [ 90.724621][ T5495] FAT-fs (loop4): Directory bread(block 65) failed [ 90.755609][ T5497] binder: 5493:5497 got reply transaction with no transaction stack [ 90.757715][ T5497] binder: 5493:5497 transaction reply to 0:0 failed 35/29201/-71, size 0-0 line 2946 [ 90.794605][ T5497] syz.5.263 (5497): drop_caches: 2 [ 90.797989][ T5495] FAT-fs (loop4): Directory bread(block 66) failed [ 90.799132][ T5495] FAT-fs (loop4): Directory bread(block 67) failed [ 90.800450][ T5495] FAT-fs (loop4): Directory bread(block 68) failed [ 90.801633][ T5495] FAT-fs (loop4): Directory bread(block 69) failed [ 90.805482][ T5495] FAT-fs (loop4): Directory bread(block 70) failed [ 90.813784][ T5495] FAT-fs (loop4): Directory bread(block 71) failed [ 90.815070][ T5495] FAT-fs (loop4): Directory bread(block 72) failed [ 90.822035][ T5501] loop0: detected capacity change from 0 to 512 [ 90.823721][ T5501] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.832162][ T5495] FAT-fs (loop4): Directory bread(block 73) failed [ 90.861869][ T5501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.041393][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 91.573024][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.113011][ T5533] loop2: detected capacity change from 0 to 512 [ 92.114702][ T5533] EXT4-fs: Ignoring removed orlov option [ 92.125351][ T5533] EXT4-fs: Ignoring removed nobh option [ 92.226393][ T5533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.244755][ T5540] tipc: Enabling of bearer rejected, failed to enable media [ 92.256507][ T5540] device syzkaller0 entered promiscuous mode [ 92.287836][ T5533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.274: bg 0: block 248: padding at end of block bitmap is not set [ 92.290484][ T5533] Quota error (device loop2): write_blk: dquota write failed [ 92.291918][ T5533] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 92.293687][ T5533] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.274: Failed to acquire dquot type 1 [ 92.296497][ T5539] device syzkaller0 entered promiscuous mode [ 92.299699][ T5533] EXT4-fs (loop2): 1 truncate cleaned up [ 92.300759][ T5533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.397716][ T5551] loop0: detected capacity change from 0 to 512 [ 92.406253][ T5551] EXT4-fs: Ignoring removed nobh option [ 92.411062][ T5551] EXT4-fs (loop0): 1 truncate cleaned up [ 92.412219][ T5551] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.439073][ T5551] EXT4-fs warning (device loop0): ext4_group_extend:1894: will only finish group (8193 blocks, 7937 new) [ 92.441524][ T5551] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 92.444024][ T5557] loop5: detected capacity change from 0 to 128 [ 92.464690][ T5557] syz.5.279: attempt to access beyond end of device [ 92.464690][ T5557] loop5: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 92.543633][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 92.572318][ T5564] binder: 5563:5564 tried to acquire reference to desc 0, got 1 instead [ 92.575178][ T5564] binder: 5563:5564 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.587472][ T5561] syz.5.279: attempt to access beyond end of device [ 92.587472][ T5561] loop5: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 92.601807][ T5554] device syzkaller0 entered promiscuous mode [ 92.605418][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.607016][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.627356][ T5567] binder: 5563:5567 transaction reply to 0:0 failed 40/29201/-71, size 0-0 line 2946 [ 92.630504][ T5567] syz.0.280 (5567): drop_caches: 2 [ 92.773808][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 93.407325][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.165490][ T4331] Bluetooth: hci5: command 0x0406 tx timeout [ 94.255926][ T5604] tipc: Enabling of bearer rejected, failed to enable media [ 94.262911][ T5604] device syzkaller0 entered promiscuous mode [ 94.390864][ T5613] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 94.392257][ T5613] PKCS7: Only support pkcs7_signedData type [ 94.396918][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 94.400711][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 94.453962][ T5619] loop2: detected capacity change from 0 to 512 [ 94.467750][ T5619] EXT4-fs: Ignoring removed orlov option [ 94.470085][ T5619] EXT4-fs: Ignoring removed nobh option [ 94.473228][ T5619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.492315][ T5619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.295: bg 0: block 248: padding at end of block bitmap is not set [ 94.500753][ T4625] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 94.502971][ T5619] Quota error (device loop2): write_blk: dquota write failed [ 94.511647][ T5619] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.518043][ T5619] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.295: Failed to acquire dquot type 1 [ 94.525538][ T5619] EXT4-fs (loop2): 1 truncate cleaned up [ 94.530546][ T5619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.544925][ T5619] device syzkaller0 entered promiscuous mode [ 94.590489][ T5629] device syzkaller0 entered promiscuous mode [ 94.706831][ T5638] binder_user_error: 2 callbacks suppressed [ 94.706840][ T5638] binder: 5637:5638 tried to acquire reference to desc 0, got 1 instead [ 94.710681][ T5638] binder: 5637:5638 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.713264][ T5638] binder: 5638 RLIMIT_NICE not set [ 95.018322][ T5640] binder: 5637:5640 got reply transaction with no transaction stack [ 95.022189][ T5640] binder: 5637:5640 transaction reply to 0:0 failed 45/29201/-71, size 0-0 line 2946 [ 95.024561][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 95.040838][ T5640] syz.0.300 (5640): drop_caches: 2 [ 95.546557][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.674500][ T5659] tipc: Enabling of bearer rejected, failed to enable media [ 95.683908][ T5659] device syzkaller0 entered promiscuous mode [ 95.700827][ T5657] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 95.702187][ T5657] PKCS7: Only support pkcs7_signedData type [ 95.706904][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.306'. [ 95.766352][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.306'. [ 96.350499][ T5686] device syzkaller0 entered promiscuous mode [ 96.518074][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 96.574940][ T5697] loop4: detected capacity change from 0 to 128 [ 96.644004][ T5697] syz.4.315: attempt to access beyond end of device [ 96.644004][ T5697] loop4: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 96.951460][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.955030][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.121244][ T5727] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 98.122617][ T5727] PKCS7: Only support pkcs7_signedData type [ 98.127727][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 98.129568][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 98.252700][ T5741] device syzkaller0 entered promiscuous mode [ 98.681440][ T5772] capability: warning: `syz.0.327' uses deprecated v2 capabilities in a way that may be insecure [ 100.104222][ T5825] device syzkaller0 entered promiscuous mode [ 100.196311][ T5827] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 100.197588][ T5827] PKCS7: Only support pkcs7_signedData type [ 100.201818][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.281719][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.539759][ T5862] device syzkaller0 entered promiscuous mode [ 101.095217][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 101.242395][ T5881] loop4: detected capacity change from 0 to 128 [ 101.271123][ T5881] syz.4.343: attempt to access beyond end of device [ 101.271123][ T5881] loop4: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 101.615464][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.618096][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.085962][ T5888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.155632][ T5888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.838101][ T5816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.137342][ T5909] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 103.138776][ T5909] PKCS7: Only support pkcs7_signedData type [ 103.143146][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 113.717192][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 113.780405][ T5921] device syzkaller0 entered promiscuous mode [ 119.394162][ T4329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.397393][ T4329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.399239][ T4329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.401268][ T4329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.402864][ T4329] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.404640][ T4329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.455344][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 123.535301][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 126.650846][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 126.667324][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.669909][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.991140][ T5991] loop2: detected capacity change from 0 to 512 [ 127.008471][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 127.039797][ T5991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.206112][ T6002] loop0: detected capacity change from 0 to 256 [ 127.307874][ T6002] FAT-fs (loop0): Directory bread(block 64) failed [ 127.309217][ T6002] FAT-fs (loop0): Directory bread(block 65) failed [ 127.310651][ T6002] FAT-fs (loop0): Directory bread(block 66) failed [ 127.311972][ T6002] FAT-fs (loop0): Directory bread(block 67) failed [ 127.313393][ T6002] FAT-fs (loop0): Directory bread(block 68) failed [ 127.314699][ T6002] FAT-fs (loop0): Directory bread(block 69) failed [ 127.316220][ T6002] FAT-fs (loop0): Directory bread(block 70) failed [ 127.317542][ T6002] FAT-fs (loop0): Directory bread(block 71) failed [ 127.318859][ T6002] FAT-fs (loop0): Directory bread(block 72) failed [ 127.320211][ T6002] FAT-fs (loop0): Directory bread(block 73) failed [ 128.251034][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.252563][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.261579][ T5961] device bridge_slave_0 entered promiscuous mode [ 128.281110][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 128.317489][ T6012] fuse: Invalid rootmode [ 128.900681][ T4329] Bluetooth: hci1: command 0x0419 tx timeout [ 129.138169][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.149160][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.164840][ T5961] device bridge_slave_1 entered promiscuous mode [ 129.202503][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.206805][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.214695][ T5961] team0: Port device team_slave_0 added [ 129.217552][ T5961] team0: Port device team_slave_1 added [ 129.223639][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.225106][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.246516][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.315475][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.316862][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.321829][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.467278][ T5961] device hsr_slave_0 entered promiscuous mode [ 129.515540][ T5961] device hsr_slave_1 entered promiscuous mode [ 129.611639][ T5961] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.697165][ T5961] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.748192][ T5961] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.825462][ T6047] fuse: Bad value for 'rootmode' [ 129.857535][ T4670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.874823][ T5961] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.971845][ T6052] loop2: detected capacity change from 0 to 256 [ 130.099034][ T6052] FAT-fs (loop2): Directory bread(block 64) failed [ 130.100440][ T6052] FAT-fs (loop2): Directory bread(block 65) failed [ 130.101866][ T6052] FAT-fs (loop2): Directory bread(block 66) failed [ 130.103169][ T6052] FAT-fs (loop2): Directory bread(block 67) failed [ 130.104537][ T6052] FAT-fs (loop2): Directory bread(block 68) failed [ 130.105916][ T6052] FAT-fs (loop2): Directory bread(block 69) failed [ 130.107278][ T6052] FAT-fs (loop2): Directory bread(block 70) failed [ 130.108570][ T6052] FAT-fs (loop2): Directory bread(block 71) failed [ 130.109841][ T6052] FAT-fs (loop2): Directory bread(block 72) failed [ 130.111174][ T6052] FAT-fs (loop2): Directory bread(block 73) failed [ 130.810612][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 130.811959][ T6054] binder: 6053:6054 ioctl 4018620d 20004a80 returned -16 [ 130.824975][ T6056] fuse: Bad value for 'fd' [ 130.833928][ T6054] binder: tried to use weak ref as strong ref [ 130.835128][ T6054] binder: 6053:6054 Acquire 1 refcount change on invalid ref 0 ret -22 [ 130.848421][ T6054] binder: 6053:6054 got transaction to invalid handle, 1 [ 130.849779][ T6054] binder: 6054:6053 cannot find target node [ 130.850950][ T6054] binder: 6053:6054 transaction call to 0:0 failed 48/29201/-22, size 0-0 line 3045 [ 130.868744][ T6054] binder: 6053:6054 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.870996][ T6054] binder: 6054 RLIMIT_NICE not set [ 130.971634][ T6064] binder: 6053:6064 got reply transaction with no transaction stack [ 130.973177][ T6064] binder: 6053:6064 transaction reply to 0:0 failed 49/29201/-71, size 0-0 line 2946 [ 130.981548][ T6064] syz.0.383 (6064): drop_caches: 2 [ 131.297481][ T4670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.346615][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.350559][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.352427][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.397369][ T4670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.632761][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.634253][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.639338][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.687463][ T4670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.693329][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.695236][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.697711][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.699152][ T1578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.710653][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.715896][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.721283][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.756979][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.758315][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.760935][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.765192][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.778828][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.783450][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.793903][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.806911][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.815166][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.829745][ T6084] fuse: Bad value for 'rootmode' [ 131.829816][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.839901][ T5961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.842568][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.851779][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.855828][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.861522][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.958952][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.980748][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.982288][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.029177][ T6109] fuse: Bad value for 'fd' [ 132.063040][ T6113] binder: 6112:6113 tried to acquire reference to desc 0, got 1 instead [ 132.071316][ T6113] binder: 6112:6113 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.090463][ T6113] binder: 6113 RLIMIT_NICE not set [ 132.099634][ T6113] binder: 6112:6113 got reply transaction with no transaction stack [ 132.101696][ T6113] binder: 6112:6113 transaction reply to 0:0 failed 55/29201/-71, size 0-0 line 2946 [ 132.117388][ T6113] syz.2.399 (6113): drop_caches: 2 [ 132.147314][ T1515] binder: release 6112:6113 transaction 54 out, still active [ 132.149035][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 132.150474][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.151729][ T1515] binder: send failed reply for transaction 54, target dead [ 132.385857][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.387744][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.426636][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.428714][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.434246][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.443016][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.454227][ T6140] fuse: Bad value for 'rootmode' [ 132.473445][ T5961] device veth0_vlan entered promiscuous mode [ 132.487650][ T5961] device veth1_vlan entered promiscuous mode [ 132.505849][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.507566][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.509193][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.511072][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.518400][ T5961] device veth0_macvtap entered promiscuous mode [ 132.551738][ T5961] device veth1_macvtap entered promiscuous mode [ 132.566144][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.568374][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.570439][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.572597][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.574845][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.588376][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.592900][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.595556][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.600052][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.637397][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.639253][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.640877][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.642569][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.656992][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.659332][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.661845][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.669871][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.673808][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.676479][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.678868][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.681322][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.684273][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.688230][ T5961] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.690020][ T5961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.697968][ T5961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.700736][ T5961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.791622][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.793658][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.748802][ T6168] loop0: detected capacity change from 0 to 512 [ 133.801705][ T6168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.848923][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 133.906184][ T6178] syz.0.412 (6178): drop_caches: 2 [ 133.994542][ T6182] random: crng reseeded on system resumption [ 134.025871][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.027455][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.045622][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.066359][ T6187] fuse: Unknown parameter 'use00000000000000000000' [ 134.116645][ T6189] device syzkaller0 entered promiscuous mode [ 134.174908][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.176940][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.179639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.229903][ T6207] syz.0.423 (6207): drop_caches: 2 [ 135.520376][ T6235] device syzkaller0 entered promiscuous mode [ 136.605035][ T6273] binder_user_error: 8 callbacks suppressed [ 136.605044][ T6273] binder: 6271:6273 tried to acquire reference to desc 0, got 1 instead [ 136.610374][ T6273] binder: 6271:6273 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 136.612970][ T6273] binder: 6273 RLIMIT_NICE not set [ 136.614123][ T6273] binder: 6271:6273 got reply transaction with no transaction stack [ 136.618844][ T6273] binder_debug: 10 callbacks suppressed [ 136.618858][ T6273] binder: 6271:6273 transaction reply to 0:0 failed 73/29201/-71, size 0-0 line 2946 [ 136.641639][ T6273] syz.3.435 (6273): drop_caches: 2 [ 136.691353][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.692707][ T3899] binder: send failed reply for transaction 72 to 6271:6273 [ 136.700789][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 136.704201][ T3899] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.878975][ T6307] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 137.880291][ T6307] PKCS7: Only support pkcs7_signedData type [ 137.884352][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 137.957815][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.959382][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.134855][ T6310] fuse: Unknown parameter '0x0000000000000003' [ 138.698911][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.712725][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.971893][ T6263] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.973765][ T6263] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.975594][ T6263] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.977294][ T6263] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.197407][ T6323] fuse: Unknown parameter 'user_i00000000000000000000' [ 139.231224][ T4670] device hsr_slave_0 left promiscuous mode [ 139.255679][ T4670] device hsr_slave_1 left promiscuous mode [ 139.335347][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.336804][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.338452][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.339914][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.341530][ T4670] device bridge_slave_1 left promiscuous mode [ 139.342847][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.378594][ T4670] device bridge_slave_0 left promiscuous mode [ 139.380255][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.515454][ T4670] device veth1_macvtap left promiscuous mode [ 139.516727][ T4670] device veth0_macvtap left promiscuous mode [ 139.518497][ T4670] device veth1_vlan left promiscuous mode [ 139.519793][ T4670] device veth0_vlan left promiscuous mode [ 140.485333][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 141.687547][ T4670] team0 (unregistering): Port device team_slave_1 removed [ 141.886043][ T4670] team0 (unregistering): Port device team_slave_0 removed [ 142.066227][ T4670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.295708][ T4670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.918802][ T4670] bond0 (unregistering): Released all slaves [ 144.203152][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.235537][ T6291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.242950][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 146.101970][ T6401] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 146.103378][ T6401] PKCS7: Only support pkcs7_signedData type [ 146.107948][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 146.110423][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 146.218516][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.255427][ T6411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.579270][ T6431] fuse: Bad value for 'fd' [ 147.932205][ T6499] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 147.934012][ T6499] PKCS7: Only support pkcs7_signedData type [ 147.969588][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 147.971906][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 148.007424][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.009260][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.010912][ T6504] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.105448][ T6504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.220902][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 148.885409][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 148.956637][ T6531] tipc: Started in network mode [ 148.957030][ T6537] fuse: Bad value for 'fd' [ 148.957620][ T6531] tipc: Node identity 7eba169bbd48, cluster identity 4711 [ 148.959832][ T6531] tipc: Enabled bearer , priority 0 [ 148.971366][ T6531] device syzkaller0 entered promiscuous mode [ 148.982008][ T6531] tipc: Resetting bearer [ 148.984799][ T6528] tipc: Resetting bearer [ 149.047648][ T6528] tipc: Disabling bearer [ 149.068367][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.490'. [ 149.070212][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.490'. [ 149.500112][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 149.746764][ T6570] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 149.748202][ T6570] PKCS7: Only support pkcs7_signedData type [ 149.752646][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 149.754376][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 149.949601][ T6573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.045949][ T6573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.906473][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 151.074540][ T6587] tipc: Started in network mode [ 151.085456][ T6587] tipc: Node identity fa206aa70f36, cluster identity 4711 [ 151.086885][ T6587] tipc: Enabled bearer , priority 0 [ 151.103199][ T6587] device syzkaller0 entered promiscuous mode [ 151.437371][ T6587] tipc: Resetting bearer [ 151.442166][ T6586] tipc: Resetting bearer [ 151.528783][ T6586] tipc: Disabling bearer [ 153.403375][ T6627] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 153.404736][ T6627] PKCS7: Only support pkcs7_signedData type [ 153.409557][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 153.416348][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.475456][ T6626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.478637][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 153.661335][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 153.661868][ T4329] Bluetooth: hci2: command 0x0406 tx timeout [ 154.410139][ T6651] netlink: 'syz.2.525': attribute type 39 has an invalid length. [ 154.652783][ T6660] netlink: 44 bytes leftover after parsing attributes in process `syz.2.525'. [ 154.704431][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 154.706399][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 154.819187][ T6661] device syzkaller0 entered promiscuous mode [ 154.836964][ T6663] device syzkaller0 entered promiscuous mode [ 156.069055][ T6699] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 156.070336][ T6699] PKCS7: Only support pkcs7_signedData type [ 156.074460][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 156.076610][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.078356][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.156431][ T6695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.159533][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 156.204978][ T6700] device syzkaller0 entered promiscuous mode [ 156.270161][ T6722] loop6: detected capacity change from 0 to 128 [ 156.302089][ T6722] syz.6.541: attempt to access beyond end of device [ 156.302089][ T6722] loop6: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 156.769289][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.771107][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.853377][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 157.880432][ T6756] binder: 6752:6756 tried to acquire reference to desc 0, got 1 instead [ 157.887288][ T6756] binder: 6752:6756 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 157.892005][ T6756] binder: 6756 RLIMIT_NICE not set [ 157.902747][ T6756] binder: 6752:6756 got reply transaction with no transaction stack [ 157.909642][ T6756] binder: 6752:6756 transaction reply to 0:0 failed 79/29201/-71, size 0-0 line 2946 [ 157.919298][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 157.921098][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 157.961365][ T6756] syz.3.552 (6756): drop_caches: 2 [ 157.990068][ T111] binder: release 6752:6756 transaction 78 out, still active [ 157.991638][ T111] binder: undelivered TRANSACTION_COMPLETE [ 157.992889][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.994263][ T111] binder: send failed reply for transaction 78, target dead [ 158.043090][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.060653][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.219107][ T6776] random: crng reseeded on system resumption [ 158.224872][ T6774] device syzkaller0 entered promiscuous mode [ 160.560629][ T6861] fuse: Unknown parameter 'fd0x0000000000000003' [ 160.680560][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 160.682378][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 160.884290][ T6867] device syzkaller0 entered promiscuous mode [ 161.129451][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.131154][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.665771][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.679805][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.941141][ T6876] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.942609][ T6876] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.944257][ T6876] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.946048][ T6876] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.226384][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.582'. [ 163.983852][ T6879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.088202][ T7004] IPVS: nq: FWM 3 0x00000003 - no destination available [ 165.275967][ T7026] binder: 7025:7026 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 165.280949][ T7026] binder: 7025:7026 got transaction to invalid handle, 1 [ 165.282347][ T7026] binder: 7026:7025 cannot find target node [ 165.283558][ T7026] binder: 7025:7026 transaction call to 0:0 failed 82/29201/-22, size 0-0 line 3045 [ 165.296790][ T7026] binder: 7025:7026 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 165.299303][ T7026] binder: 7026 RLIMIT_NICE not set [ 165.645844][ T7028] binder: 7025:7028 got reply transaction with no transaction stack [ 165.647425][ T7028] binder: 7025:7028 transaction reply to 0:0 failed 83/29201/-71, size 0-0 line 2946 [ 165.652244][ T7028] syz.2.604 (7028): drop_caches: 2 [ 165.848404][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'. [ 165.890940][ T7034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.894055][ T7034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.047471][ T5051] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.048959][ T5051] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.140547][ T7056] device syzkaller0 entered promiscuous mode [ 166.142699][ T7057] device syzkaller0 entered promiscuous mode [ 166.233892][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.235505][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.594185][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.607573][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.899159][ T7059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.901120][ T7059] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.904137][ T7059] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.906812][ T7059] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.183920][ T7086] binder: 7085:7086 tried to acquire reference to desc 0, got 1 instead [ 167.193601][ T7086] binder: 7085:7086 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 167.198590][ T7086] binder: 7086 RLIMIT_NICE not set [ 167.199648][ T7086] binder: 7086 RLIMIT_NICE not set [ 167.200866][ T7086] binder: 7085:7086 ioctl c0306201 0 returned -14 [ 167.204121][ T7086] syz.6.623 (7086): drop_caches: 2 [ 167.214139][ T111] binder: release 7085:7086 transaction 88 out, still active [ 167.215795][ T111] binder: undelivered TRANSACTION_COMPLETE [ 167.216943][ T111] binder: release 7085:7086 transaction 88 in, still active [ 167.218283][ T111] binder: send failed reply for transaction 88, target dead [ 167.240844][ T7080] device syzkaller0 entered promiscuous mode [ 167.695564][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.697899][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.699570][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.716652][ T7103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.738563][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.740244][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.786079][ T7117] binder: 7116:7117 tried to acquire reference to desc 0, got 1 instead [ 167.789019][ T7117] binder: 7116:7117 ioctl c0306201 0 returned -14 [ 167.791635][ T7117] syz.5.636 (7117): drop_caches: 2 [ 167.800193][ T4374] binder: release 7116:7117 transaction 93 out, still active [ 167.883597][ T7127] tipc: Started in network mode [ 167.884793][ T7127] tipc: Node identity 4, cluster identity 4711 [ 167.886605][ T7127] tipc: Node number set to 4 [ 167.930650][ T7133] random: crng reseeded on system resumption [ 168.410970][ T7149] binder: 7146:7149 ioctl c0306201 0 returned -14 [ 168.422447][ T7149] syz.3.648 (7149): drop_caches: 2 [ 168.456981][ T7153] netlink: 56 bytes leftover after parsing attributes in process `syz.0.652'. [ 168.887727][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.889108][ T7172] bridge0: port 2(bridge_slave_1) entered listening state [ 168.890464][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.891704][ T7172] bridge0: port 1(bridge_slave_0) entered listening state [ 168.893451][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.987150][ T7172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.019180][ T7181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.661'. [ 169.104575][ T7187] syz.2.664 (7187): drop_caches: 2 [ 169.835053][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 169.837103][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 170.127127][ T7221] device syzkaller0 entered promiscuous mode [ 170.524098][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.705503][ T7242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.584566][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 171.631138][ T7285] loop6: detected capacity change from 0 to 512 [ 171.654111][ T7291] netlink: 9 bytes leftover after parsing attributes in process `syz.2.701'. [ 171.657493][ T7291] 0·: renamed from hsr_slave_1 [ 171.659187][ T7285] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 172.479231][ T5961] EXT4-fs (loop6): unmounting filesystem. [ 172.480736][ T7291] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 172.692091][ T7305] loop0: detected capacity change from 0 to 256 [ 172.699416][ T7305] FAT-fs (loop0): Directory bread(block 64) failed [ 172.700691][ T7305] FAT-fs (loop0): Directory bread(block 65) failed [ 172.701919][ T7305] FAT-fs (loop0): Directory bread(block 66) failed [ 172.703148][ T7305] FAT-fs (loop0): Directory bread(block 67) failed [ 172.704408][ T7305] FAT-fs (loop0): Directory bread(block 68) failed [ 172.705667][ T7305] FAT-fs (loop0): Directory bread(block 69) failed [ 172.706891][ T7305] FAT-fs (loop0): Directory bread(block 70) failed [ 172.708150][ T7305] FAT-fs (loop0): Directory bread(block 71) failed [ 172.709465][ T7305] FAT-fs (loop0): Directory bread(block 72) failed [ 172.710709][ T7305] FAT-fs (loop0): Directory bread(block 73) failed [ 173.858150][ T7337] device syzkaller0 entered promiscuous mode [ 173.876889][ T7339] loop5: detected capacity change from 0 to 128 [ 173.904462][ T7339] syz.5.718: attempt to access beyond end of device [ 173.904462][ T7339] loop5: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 174.038129][ T7348] random: crng reseeded on system resumption [ 174.905501][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.907216][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.020206][ T7364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.312289][ T7370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.544045][ T7371] loop2: detected capacity change from 0 to 256 [ 175.565530][ T7370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.588171][ T7371] FAT-fs (loop2): Directory bread(block 64) failed [ 175.589698][ T7371] FAT-fs (loop2): Directory bread(block 65) failed [ 175.591087][ T7371] FAT-fs (loop2): Directory bread(block 66) failed [ 175.592413][ T7371] FAT-fs (loop2): Directory bread(block 67) failed [ 175.593759][ T7371] FAT-fs (loop2): Directory bread(block 68) failed [ 175.595065][ T7371] FAT-fs (loop2): Directory bread(block 69) failed [ 175.596441][ T7371] FAT-fs (loop2): Directory bread(block 70) failed [ 175.597824][ T7371] FAT-fs (loop2): Directory bread(block 71) failed [ 175.599316][ T7371] FAT-fs (loop2): Directory bread(block 72) failed [ 175.600671][ T7371] FAT-fs (loop2): Directory bread(block 73) failed [ 176.489532][ T4670] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x14 [ 176.493013][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'. [ 176.495100][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 176.951688][ T7400] device syzkaller0 entered promiscuous mode [ 177.381366][ T7409] device syzkaller0 entered promiscuous mode [ 177.424468][ T7411] loop6: detected capacity change from 0 to 256 [ 177.433109][ T7411] FAT-fs (loop6): Directory bread(block 64) failed [ 177.434425][ T7411] FAT-fs (loop6): Directory bread(block 65) failed [ 177.436070][ T7411] FAT-fs (loop6): Directory bread(block 66) failed [ 177.437318][ T7411] FAT-fs (loop6): Directory bread(block 67) failed [ 177.438547][ T7411] FAT-fs (loop6): Directory bread(block 68) failed [ 177.439858][ T7411] FAT-fs (loop6): Directory bread(block 69) failed [ 177.441083][ T7411] FAT-fs (loop6): Directory bread(block 70) failed [ 177.442306][ T7411] FAT-fs (loop6): Directory bread(block 71) failed [ 177.443570][ T7411] FAT-fs (loop6): Directory bread(block 72) failed [ 177.444740][ T7411] FAT-fs (loop6): Directory bread(block 73) failed [ 177.459243][ T7414] device syzkaller0 entered promiscuous mode [ 178.010315][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.013742][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.017646][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.125418][ T7424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.851586][ T7436] loop2: detected capacity change from 0 to 128 [ 178.881655][ T7436] syz.2.743: attempt to access beyond end of device [ 178.881655][ T7436] loop2: rw=0, sector=255508, nr_sectors = 2 limit=128 [ 179.070779][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.073777][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.435343][ T7388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.606601][ T7448] loop5: detected capacity change from 0 to 256 [ 179.615202][ T7448] FAT-fs (loop5): Directory bread(block 64) failed [ 179.618239][ T7448] FAT-fs (loop5): Directory bread(block 65) failed [ 179.619800][ T7448] FAT-fs (loop5): Directory bread(block 66) failed [ 179.621391][ T7448] FAT-fs (loop5): Directory bread(block 67) failed [ 179.622834][ T7448] FAT-fs (loop5): Directory bread(block 68) failed [ 179.624258][ T7448] FAT-fs (loop5): Directory bread(block 69) failed [ 179.626522][ T7448] FAT-fs (loop5): Directory bread(block 70) failed [ 179.632654][ T7448] FAT-fs (loop5): Directory bread(block 71) failed [ 179.634123][ T7448] FAT-fs (loop5): Directory bread(block 72) failed [ 179.637920][ T7448] FAT-fs (loop5): Directory bread(block 73) failed [ 180.140970][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 182.438846][ T7516] loop0: detected capacity change from 0 to 512 [ 182.503765][ T7516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.528608][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 187.378055][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.379334][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613755][ T7605] tipc: Started in network mode [ 194.619398][ T7605] tipc: Node identity 0616c28a8df6, cluster identity 4711 [ 194.621259][ T7605] tipc: Enabled bearer , priority 0 [ 194.626328][ T7605] device syzkaller0 entered promiscuous mode [ 194.687130][ T7607] tipc: Resetting bearer [ 194.693348][ T7604] tipc: Resetting bearer [ 194.776391][ T7604] tipc: Disabling bearer [ 196.292031][ T7638] device syzkaller0 entered promiscuous mode [ 196.784335][ T7653] tipc: Started in network mode [ 196.785481][ T7653] tipc: Node identity 080211000001, cluster identity 4711 [ 196.786998][ T7653] tipc: Enabled bearer , priority 0 [ 196.876477][ T7660] tipc: Resetting bearer [ 197.857751][ T22] tipc: Node number set to 134418688 [ 197.862776][ T7681] netlink: 52 bytes leftover after parsing attributes in process `syz.0.820'. [ 197.996773][ T7689] device syzkaller0 entered promiscuous mode [ 198.446147][ T7697] tipc: Enabled bearer , priority 0 [ 198.447962][ T7697] device syzkaller0 entered promiscuous mode [ 198.487005][ T7697] tipc: Resetting bearer [ 198.491650][ T7696] tipc: Resetting bearer [ 198.626934][ T7696] tipc: Disabling bearer [ 198.658936][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 198.860145][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 198.906560][ T7709] device syzkaller0 entered promiscuous mode [ 199.447954][ T7727] device syzkaller0 entered promiscuous mode [ 199.465240][ T7729] netlink: 52 bytes leftover after parsing attributes in process `syz.0.836'. [ 199.511875][ T7731] device syzkaller0 entered promiscuous mode [ 199.517151][ T7733] loop3: detected capacity change from 0 to 256 [ 199.526055][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 199.527925][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 199.532929][ T7733] FAT-fs (loop3): Directory bread(block 64) failed [ 199.534287][ T7733] FAT-fs (loop3): Directory bread(block 65) failed [ 199.535632][ T7733] FAT-fs (loop3): Directory bread(block 66) failed [ 199.536800][ T7733] FAT-fs (loop3): Directory bread(block 67) failed [ 199.538154][ T7733] FAT-fs (loop3): Directory bread(block 68) failed [ 199.539284][ T7733] FAT-fs (loop3): Directory bread(block 69) failed [ 199.540681][ T7733] FAT-fs (loop3): Directory bread(block 70) failed [ 199.541919][ T7733] FAT-fs (loop3): Directory bread(block 71) failed [ 199.543236][ T7733] FAT-fs (loop3): Directory bread(block 72) failed [ 199.544432][ T7733] FAT-fs (loop3): Directory bread(block 73) failed [ 199.687380][ T7742] binder_user_error: 11 callbacks suppressed [ 199.687389][ T7742] binder: 7739:7742 tried to acquire reference to desc 0, got 1 instead [ 199.690794][ T7742] binder: 7739:7742 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 199.693417][ T7742] binder: 7742 RLIMIT_NICE not set [ 199.694393][ T7742] binder: 7742 RLIMIT_NICE not set [ 199.698905][ T7742] binder: 7742 RLIMIT_NICE not set [ 199.699876][ T7742] binder: 7739:7742 got transaction with unaligned buffers size, 252 [ 199.701701][ T7742] binder_debug: 11 callbacks suppressed [ 199.701710][ T7742] binder: 7739:7742 transaction reply to 7739:7742 failed 109/29201/-22, size 0-0 line 3286 [ 199.704711][ T7742] binder: send failed reply for transaction 108 to 7739:7742 [ 199.723428][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 199.724593][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.726509][ T4374] binder: undelivered TRANSACTION_ERROR: 29190 [ 199.752371][ T7745] device syzkaller0 entered promiscuous mode [ 199.907463][ T7741] device syzkaller0 entered promiscuous mode [ 200.064280][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 200.247377][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 201.274603][ T7795] device syzkaller0 entered promiscuous mode [ 201.577957][ T7799] device syzkaller0 entered promiscuous mode [ 202.221655][ T7821] loop5: detected capacity change from 0 to 256 [ 202.247922][ T7821] FAT-fs (loop5): Directory bread(block 64) failed [ 202.251719][ T7821] FAT-fs (loop5): Directory bread(block 65) failed [ 202.254075][ T7821] FAT-fs (loop5): Directory bread(block 66) failed [ 202.257217][ T7821] FAT-fs (loop5): Directory bread(block 67) failed [ 202.258611][ T7821] FAT-fs (loop5): Directory bread(block 68) failed [ 202.259909][ T7821] FAT-fs (loop5): Directory bread(block 69) failed [ 202.261194][ T7821] FAT-fs (loop5): Directory bread(block 70) failed [ 202.262408][ T7821] FAT-fs (loop5): Directory bread(block 71) failed [ 202.263712][ T7821] FAT-fs (loop5): Directory bread(block 72) failed [ 202.265314][ T7821] FAT-fs (loop5): Directory bread(block 73) failed [ 213.398003][ T7898] netlink: 52 bytes leftover after parsing attributes in process `syz.6.884'. [ 213.903592][ T7913] loop2: detected capacity change from 0 to 256 [ 213.923525][ T7913] FAT-fs (loop2): Directory bread(block 64) failed [ 213.925020][ T7913] FAT-fs (loop2): Directory bread(block 65) failed [ 213.928780][ T7913] FAT-fs (loop2): Directory bread(block 66) failed [ 213.930210][ T7913] FAT-fs (loop2): Directory bread(block 67) failed [ 213.931558][ T7913] FAT-fs (loop2): Directory bread(block 68) failed [ 213.932921][ T7913] FAT-fs (loop2): Directory bread(block 69) failed [ 213.934653][ T7913] FAT-fs (loop2): Directory bread(block 70) failed [ 213.936432][ T7913] FAT-fs (loop2): Directory bread(block 71) failed [ 213.937969][ T7913] FAT-fs (loop2): Directory bread(block 72) failed [ 213.939452][ T7913] FAT-fs (loop2): Directory bread(block 73) failed [ 213.987518][ T7915] random: crng reseeded on system resumption [ 214.370970][ T7922] device syzkaller0 entered promiscuous mode [ 214.373546][ T7924] device syzkaller0 entered promiscuous mode [ 214.621507][ T7927] device syzkaller0 entered promiscuous mode [ 214.674702][ T7931] device syzkaller0 entered promiscuous mode [ 214.929422][ T7935] tipc: Enabling of bearer rejected, already enabled [ 214.955537][ T7945] device syzkaller0 entered promiscuous mode [ 215.312250][ T7957] device syzkaller0 entered promiscuous mode [ 215.350645][ T7963] device syzkaller0 entered promiscuous mode [ 215.690376][ T7979] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 215.698902][ T7979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.717439][ T7979] bond1: (slave dummy0): making interface the new active one [ 215.719334][ T7979] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 215.721251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 215.725187][ T7981] tipc: Enabled bearer , priority 0 [ 215.743025][ T7981] device syzkaller0 entered promiscuous mode [ 215.750987][ T7979] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 215.752764][ T7979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 215.754367][ T7979] device dummy0 entered promiscuous mode [ 215.757899][ T7979] bond1: (slave dummy0): Releasing active interface [ 215.801890][ T7990] tipc: Resetting bearer [ 215.860398][ T7980] tipc: Resetting bearer [ 215.926748][ T7980] tipc: Disabling bearer [ 215.931343][ T7984] device syzkaller0 entered promiscuous mode [ 215.983799][ T8003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.919'. [ 216.018721][ T7996] device syzkaller0 entered promiscuous mode [ 226.631347][ T8025] device syzkaller0 entered promiscuous mode [ 227.148401][ T8062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.931'. [ 227.162488][ T8063] tipc: Enabling of bearer rejected, already enabled [ 227.171795][ T8065] device syzkaller0 entered promiscuous mode [ 227.260054][ T8073] device syzkaller0 entered promiscuous mode [ 227.779236][ T8085] netlink: 'syz.0.938': attribute type 9 has an invalid length. [ 227.788351][ T8083] device syzkaller0 entered promiscuous mode [ 229.605887][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.607302][ C1] bridge0: topology change detected, propagating [ 229.608924][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.610263][ C1] bridge0: topology change detected, propagating [ 238.969558][ T8112] netlink: 52 bytes leftover after parsing attributes in process `syz.6.946'. [ 239.048429][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.405120][ T8121] device syzkaller0 entered promiscuous mode [ 248.805848][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.807088][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.210736][ T4329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.212929][ T4329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.214750][ T4329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.218618][ T4329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.220453][ T4329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.221843][ T4329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.365683][ T4329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.368092][ T4329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.369742][ T4329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.371265][ T4329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.373163][ T4329] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.374628][ T4329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.670881][ T4331] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 254.672994][ T4331] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 254.674798][ T4331] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 254.677259][ T4331] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 254.678866][ T4331] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 254.680286][ T4331] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 254.741797][ T4331] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.743880][ T4331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.747211][ T4331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.748910][ T4331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.750398][ T4331] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 254.752078][ T4331] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.787105][ T4329] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 254.789523][ T4329] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 254.791221][ T4329] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 254.792877][ T4329] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 254.794789][ T4329] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 254.796601][ T4329] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 256.245316][ T4339] Bluetooth: hci3: command 0x0409 tx timeout [ 256.405383][ T4329] Bluetooth: hci6: command 0x0409 tx timeout [ 256.725354][ T4339] Bluetooth: hci8: command 0x0409 tx timeout [ 256.805322][ T4329] Bluetooth: hci9: command 0x0409 tx timeout [ 256.806752][ T4329] Bluetooth: hci7: command 0x0409 tx timeout [ 258.325273][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 258.485372][ T4329] Bluetooth: hci6: command 0x041b tx timeout [ 258.805330][ T4339] Bluetooth: hci8: command 0x041b tx timeout [ 258.885280][ T4329] Bluetooth: hci7: command 0x041b tx timeout [ 258.886377][ T4329] Bluetooth: hci9: command 0x041b tx timeout [ 260.405275][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 260.565353][ T4329] Bluetooth: hci6: command 0x040f tx timeout [ 260.885331][ T4339] Bluetooth: hci8: command 0x040f tx timeout [ 260.965350][ T4329] Bluetooth: hci9: command 0x040f tx timeout [ 260.966555][ T4329] Bluetooth: hci7: command 0x040f tx timeout [ 262.485336][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 262.645393][ T4329] Bluetooth: hci6: command 0x0419 tx timeout [ 262.965336][ T4339] Bluetooth: hci8: command 0x0419 tx timeout [ 263.045299][ T4329] Bluetooth: hci7: command 0x0419 tx timeout [ 263.046390][ T4329] Bluetooth: hci9: command 0x0419 tx timeout [ 264.115247][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz.6.948:8117] [ 264.116878][ C1] Modules linked in: [ 264.117661][ C1] irq event stamp: 1135179 [ 264.118535][ C1] hardirqs last enabled at (1135178): [] timekeeping_get_ns+0x124/0x3b4 [ 264.120437][ C1] hardirqs last disabled at (1135179): [] el1_interrupt+0x24/0x54 [ 264.122230][ C1] softirqs last enabled at (5732): [] handle_softirqs+0xaec/0xc60 [ 264.124095][ C1] softirqs last disabled at (7239): [] __do_softirq+0x14/0x20 [ 264.125909][ C1] CPU: 1 PID: 8117 Comm: syz.6.948 Not tainted syzkaller #0 [ 264.127344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.129347][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 264.130914][ C1] pc : __sanitizer_cov_trace_const_cmp4+0x58/0xb0 [ 264.132164][ C1] lr : cake_heapify+0x1b0/0x530 [ 264.133107][ C1] sp : ffff800008016fc0 [ 264.133844][ C1] x29: ffff800008016fe0 x28: ffff0000df0942d8 x27: 00000000000198d0 [ 264.135459][ C1] x26: 00000000000006fa x25: 0000000000000000 x24: 000000000000037d [ 264.137038][ C1] x23: dfff800000000000 x22: 000000000000037d x21: 0000000000000000 [ 264.138649][ C1] x20: ffff0000df0902d0 x19: 000000000000037d x18: ffff800011babf60 [ 264.140297][ C1] x17: ffff800018381000 x16: ffff8000082d9e48 x15: ffff800017e62000 [ 264.141919][ C1] x14: 0000000000000001 x13: 1ffff00002a48071 x12: 0000000000ff0100 [ 264.143486][ C1] x11: ff00800010078d90 x10: 0000000000000000 x9 : ffff0000cf143800 [ 264.145109][ C1] x8 : ffff800010078d90 x7 : ffff8000083c27dc x6 : 0000000000000000 [ 264.146715][ C1] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 264.148242][ C1] x2 : 0000000000000002 x1 : 000000000000037d x0 : 0000000000000fff [ 264.149786][ C1] Call trace: [ 264.150444][ C1] __sanitizer_cov_trace_const_cmp4+0x58/0xb0 [ 264.151648][ C1] cake_enqueue+0x3378/0x68f8 [ 264.152558][ C1] netem_dequeue+0xa40/0x1048 [ 264.153463][ C1] __qdisc_run+0x1cc/0x133c [ 264.154373][ C1] __dev_queue_xmit+0xc40/0x3118 [ 264.155342][ C1] tipc_l2_send_msg+0x29c/0x35c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.156321][ C1] tipc_bearer_xmit_skb+0x240/0x380 [ 264.157302][ C1] tipc_disc_timeout+0x4d8/0x628 [ 264.158286][ C1] call_timer_fn+0x1b8/0x95c [ 264.159186][ C1] __run_timers+0x478/0x6f0 [ 264.160077][ C1] run_timer_softirq+0x7c/0x114 [ 264.161042][ C1] handle_softirqs+0x318/0xc60 [ 264.162004][ C1] __do_softirq+0x14/0x20 [ 264.162842][ C1] ____do_softirq+0x14/0x20 [ 264.163700][ C1] call_on_irq_stack+0x30/0x48 [ 264.164623][ C1] do_softirq_own_stack+0x20/0x2c [ 264.165559][ C1] __irq_exit_rcu+0x23c/0x438 [ 264.166476][ C1] irq_exit_rcu+0x14/0x84 [ 264.167314][ C1] el1_interrupt+0x38/0x54 [ 264.168186][ C1] el1h_64_irq_handler+0x18/0x24 [ 264.169162][ C1] el1h_64_irq+0x64/0x68 [ 264.169994][ C1] __page_table_check_zero+0x17c/0x2b0 [ 264.171058][ C1] free_unref_page_prepare+0x9e4/0xaf0 [ 264.172110][ C1] free_unref_page+0x7c/0x3a0 [ 264.173032][ C1] __free_pages+0x1a0/0x1cc [ 264.173916][ C1] __free_slab+0x104/0x294 [ 264.174756][ C1] discard_slab+0x58/0xd4 [ 264.175567][ C1] __unfreeze_partials+0x150/0x190 [ 264.176487][ C1] put_cpu_partial+0x18c/0x1f8 [ 264.177411][ C1] __slab_free+0x1a4/0x268 [ 264.178258][ C1] ___cache_free+0x168/0x198 [ 264.179163][ C1] qlink_free+0x5c/0xa0 [ 264.179917][ C1] qlist_free_all+0x3c/0xcc [ 264.180774][ C1] kasan_quarantine_reduce+0x124/0x130 [ 264.181841][ C1] __kasan_slab_alloc+0x2c/0x88 [ 264.182845][ C1] slab_post_alloc_hook+0x74/0x430 [ 264.183786][ C1] kmem_cache_alloc_bulk+0x41c/0x4e4 [ 264.184833][ C1] mas_alloc_nodes+0x484/0x754 [ 264.185801][ C1] mas_preallocate+0x13c/0x310 [ 264.186734][ C1] __vma_adjust+0x25c/0x1724 [ 264.187600][ C1] __split_vma+0x324/0x444 [ 264.188376][ C1] split_vma+0xa0/0xf8 [ 264.189116][ C1] mprotect_fixup+0x3b8/0x5c4 [ 264.189966][ C1] __arm64_sys_mprotect+0x5e4/0xa0c [ 264.190967][ C1] invoke_syscall+0x98/0x290 [ 264.191811][ C1] el0_svc_common+0x138/0x258 [ 264.192735][ C1] do_el0_svc+0x58/0x130 [ 264.193563][ C1] el0_svc+0x58/0x128 [ 264.194308][ C1] el0t_64_sync_handler+0x84/0xf0 [ 264.195262][ C1] el0t_64_sync+0x18c/0x190 [ 264.196095][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 264.197334][ C1] CPU: 1 PID: 8117 Comm: syz.6.948 Tainted: G L syzkaller #0 [ 264.198955][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.200913][ C1] Call trace: [ 264.201542][ C1] dump_backtrace+0x1c0/0x1ec [ 264.202419][ C1] show_stack+0x2c/0x3c [ 264.203245][ C1] __dump_stack+0x30/0x40 [ 264.204049][ C1] dump_stack_lvl+0xf4/0x15c [ 264.204995][ C1] dump_stack+0x1c/0x5c [ 264.205774][ C1] panic+0x2f8/0x7ac [ 264.206537][ C1] softlockup_fn+0x0/0x120 [ 264.207394][ C1] __hrtimer_run_queues+0x408/0xc40 [ 264.208377][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 264.209384][ C1] arch_timer_handler_virt+0x74/0x88 [ 264.210452][ C1] handle_percpu_devid_irq+0x174/0x34c [ 264.211474][ C1] generic_handle_domain_irq+0xe0/0x140 [ 264.212558][ C1] gic_handle_irq+0x70/0x1d8 [ 264.213472][ C1] do_interrupt_handler+0xe0/0x138 [ 264.214393][ C1] el1_interrupt+0x34/0x54 [ 264.215220][ C1] el1h_64_irq_handler+0x18/0x24 [ 264.216161][ C1] el1h_64_irq+0x64/0x68 [ 264.216956][ C1] __sanitizer_cov_trace_const_cmp4+0x58/0xb0 [ 264.218167][ C1] cake_enqueue+0x3378/0x68f8 [ 264.219105][ C1] netem_dequeue+0xa40/0x1048 [ 264.220011][ C1] __qdisc_run+0x1cc/0x133c [ 264.220914][ C1] __dev_queue_xmit+0xc40/0x3118 [ 264.221880][ C1] tipc_l2_send_msg+0x29c/0x35c [ 264.222785][ C1] tipc_bearer_xmit_skb+0x240/0x380 [ 264.223782][ C1] tipc_disc_timeout+0x4d8/0x628 [ 264.224758][ C1] call_timer_fn+0x1b8/0x95c [ 264.225660][ C1] __run_timers+0x478/0x6f0 [ 264.226525][ C1] run_timer_softirq+0x7c/0x114 [ 264.227436][ C1] handle_softirqs+0x318/0xc60 [ 264.228335][ C1] __do_softirq+0x14/0x20 [ 264.229095][ C1] ____do_softirq+0x14/0x20 [ 264.229955][ C1] call_on_irq_stack+0x30/0x48 [ 264.230817][ C1] do_softirq_own_stack+0x20/0x2c [ 264.231753][ C1] __irq_exit_rcu+0x23c/0x438 [ 264.232714][ C1] irq_exit_rcu+0x14/0x84 [ 264.233499][ C1] el1_interrupt+0x38/0x54 [ 264.234315][ C1] el1h_64_irq_handler+0x18/0x24 [ 264.235298][ C1] el1h_64_irq+0x64/0x68 [ 264.236071][ C1] __page_table_check_zero+0x17c/0x2b0 [ 264.237059][ C1] free_unref_page_prepare+0x9e4/0xaf0 [ 264.238057][ C1] free_unref_page+0x7c/0x3a0 [ 264.238906][ C1] __free_pages+0x1a0/0x1cc [ 264.239705][ C1] __free_slab+0x104/0x294 [ 264.240511][ C1] discard_slab+0x58/0xd4 [ 264.241324][ C1] __unfreeze_partials+0x150/0x190 [ 264.242311][ C1] put_cpu_partial+0x18c/0x1f8 [ 264.243216][ C1] __slab_free+0x1a4/0x268 [ 264.244025][ C1] ___cache_free+0x168/0x198 [ 264.244879][ C1] qlink_free+0x5c/0xa0 [ 264.245678][ C1] qlist_free_all+0x3c/0xcc [ 264.246552][ C1] kasan_quarantine_reduce+0x124/0x130 [ 264.247599][ C1] __kasan_slab_alloc+0x2c/0x88 [ 264.248466][ C1] slab_post_alloc_hook+0x74/0x430 [ 264.249403][ C1] kmem_cache_alloc_bulk+0x41c/0x4e4 [ 264.250364][ C1] mas_alloc_nodes+0x484/0x754 [ 264.251239][ C1] mas_preallocate+0x13c/0x310 [ 264.252105][ C1] __vma_adjust+0x25c/0x1724 [ 264.252990][ C1] __split_vma+0x324/0x444 [ 264.253765][ C1] split_vma+0xa0/0xf8 [ 264.254503][ C1] mprotect_fixup+0x3b8/0x5c4 [ 264.255369][ C1] __arm64_sys_mprotect+0x5e4/0xa0c [ 264.256349][ C1] invoke_syscall+0x98/0x290 [ 264.257188][ C1] el0_svc_common+0x138/0x258 [ 264.258077][ C1] do_el0_svc+0x58/0x130 [ 264.258846][ C1] el0_svc+0x58/0x128 [ 264.259572][ C1] el0t_64_sync_handler+0x84/0xf0 [ 264.260491][ C1] el0t_64_sync+0x18c/0x190 [ 264.261332][ C1] SMP: stopping secondary CPUs [ 264.262232][ C1] Kernel Offset: disabled [ 264.262994][ C1] CPU features: 0x080000,000f0097,a65bfea7 [ 264.264083][ C1] Memory Limit: none [ 264.277096][ C1] [ 264.277525][ C1] ================================ [ 264.278509][ C1] WARNING: inconsistent lock state [ 264.279389][ C1] syzkaller #0 Tainted: G L [ 264.280386][ C1] -------------------------------- [ 264.281296][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 264.282639][ C1] syz.6.948/8117 [HC1[1]:SC1[3]:HE0:SE0] takes: [ 264.283804][ C1] ffff8000152814b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 264.285766][ C1] {HARDIRQ-ON-W} state was registered at: [ 264.286766][ C1] lock_acquire+0x20c/0x63c [ 264.287574][ C1] _raw_spin_lock+0x54/0x6c [ 264.288424][ C1] efi_call_rts+0x3c8/0x9d8 [ 264.289295][ C1] process_one_work+0x7f8/0x13a4 [ 264.290193][ C1] worker_thread+0x8c4/0xfec [ 264.291007][ C1] kthread+0x250/0x2d8 [ 264.291769][ C1] ret_from_fork+0x10/0x20 [ 264.292570][ C1] irq event stamp: 1135179 [ 264.293366][ C1] hardirqs last enabled at (1135178): [] timekeeping_get_ns+0x124/0x3b4 [ 264.295160][ C1] hardirqs last disabled at (1135179): [] el1_interrupt+0x24/0x54 [ 264.296845][ C1] softirqs last enabled at (5732): [] handle_softirqs+0xaec/0xc60 [ 264.298539][ C1] softirqs last disabled at (7239): [] __do_softirq+0x14/0x20 [ 264.300191][ C1] [ 264.300191][ C1] other info that might help us debug this: [ 264.301618][ C1] Possible unsafe locking scenario: [ 264.301618][ C1] [ 264.302960][ C1] CPU0 [ 264.303559][ C1] ---- [ 264.304158][ C1] lock(efi_rt_lock); [ 264.304929][ C1] [ 264.305568][ C1] lock(efi_rt_lock); [ 264.306375][ C1] [ 264.306375][ C1] *** DEADLOCK *** [ 264.306375][ C1] [ 264.307899][ C1] 9 locks held by syz.6.948/8117: [ 264.308912][ C1] #0: ffff0000d6826d48 (&mm->mmap_lock){++++}-{3:3}, at: __arm64_sys_mprotect+0x2f8/0xa0c [ 264.310890][ C1] #1: ffff8000154f62d0 (remove_cache_srcu){....}-{0:0}, at: rcu_lock_acquire+0x4/0x44 [ 264.312673][ C1] #2: ffff800015417480 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 264.314451][ C1] #3: ffff800008017c40 ((&d->timer)){+.-.}-{0:0}, at: call_timer_fn+0xd0/0x95c [ 264.316183][ C1] #4: ffff800015417480 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 264.317965][ C1] #5: ffff8000154174e0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 264.319821][ C1] #6: ffff0000c4665108 (&sch->root_lock_key#578){+.-.}-{2:2}, at: __dev_queue_xmit+0x9a4/0x3118 [ 264.321939][ C1] #7: ffff800015417480 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 264.323731][ C1] #8: ffff8000172ee908 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x820 [ 264.325565][ C1] [ 264.325565][ C1] stack backtrace: [ 264.326692][ C1] CPU: 1 PID: 8117 Comm: syz.6.948 Tainted: G L syzkaller #0 [ 264.328409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.330354][ C1] Call trace: [ 264.330942][ C1] dump_backtrace+0x1c0/0x1ec [ 264.331854][ C1] show_stack+0x2c/0x3c [ 264.332660][ C1] __dump_stack+0x30/0x40 [ 264.333472][ C1] dump_stack_lvl+0xf4/0x15c [ 264.334370][ C1] dump_stack+0x1c/0x5c [ 264.335242][ C1] print_usage_bug+0x4c0/0x6d8 [ 264.336208][ C1] mark_lock_irq+0x850/0xab0 [ 264.337117][ C1] mark_lock+0x224/0x320 [ 264.337952][ C1] __lock_acquire+0xa4c/0x6800 [ 264.338943][ C1] lock_acquire+0x20c/0x63c [ 264.339804][ C1] _raw_spin_lock+0x54/0x6c [ 264.340673][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 264.341834][ C1] efivar_set_variable_locked+0x1d0/0x204 [ 264.342813][ C1] efi_pstore_write+0x298/0x39c [ 264.343758][ C1] pstore_dump+0x5b0/0x820 [ 264.344592][ C1] kmsg_dump+0x170/0x260 [ 264.345333][ C1] panic+0x384/0x7ac [ 264.346073][ C1] softlockup_fn+0x0/0x120 [ 264.346926][ C1] __hrtimer_run_queues+0x408/0xc40 [ 264.347857][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 264.348776][ C1] arch_timer_handler_virt+0x74/0x88 [ 264.349740][ C1] handle_percpu_devid_irq+0x174/0x34c [ 264.350793][ C1] generic_handle_domain_irq+0xe0/0x140 [ 264.351820][ C1] gic_handle_irq+0x70/0x1d8 [ 264.352701][ C1] do_interrupt_handler+0xe0/0x138 [ 264.353690][ C1] el1_interrupt+0x34/0x54 [ 264.354577][ C1] el1h_64_irq_handler+0x18/0x24 [ 264.355469][ C1] el1h_64_irq+0x64/0x68 [ 264.356247][ C1] __sanitizer_cov_trace_const_cmp4+0x58/0xb0 [ 264.357381][ C1] cake_enqueue+0x3378/0x68f8 [ 264.358284][ C1] netem_dequeue+0xa40/0x1048 [ 264.359206][ C1] __qdisc_run+0x1cc/0x133c [ 264.360109][ C1] __dev_queue_xmit+0xc40/0x3118 [ 264.361050][ C1] tipc_l2_send_msg+0x29c/0x35c [ 264.361955][ C1] tipc_bearer_xmit_skb+0x240/0x380 [ 264.362911][ C1] tipc_disc_timeout+0x4d8/0x628 [ 264.363833][ C1] call_timer_fn+0x1b8/0x95c [ 264.364703][ C1] __run_timers+0x478/0x6f0 [ 264.365572][ C1] run_timer_softirq+0x7c/0x114 [ 264.366509][ C1] handle_softirqs+0x318/0xc60 [ 264.367401][ C1] __do_softirq+0x14/0x20 [ 264.368207][ C1] ____do_softirq+0x14/0x20 [ 264.368993][ C1] call_on_irq_stack+0x30/0x48 [ 264.369922][ C1] do_softirq_own_stack+0x20/0x2c [ 264.370798][ C1] __irq_exit_rcu+0x23c/0x438 [ 264.371642][ C1] irq_exit_rcu+0x14/0x84 [ 264.372440][ C1] el1_interrupt+0x38/0x54 [ 264.373219][ C1] el1h_64_irq_handler+0x18/0x24 [ 264.374106][ C1] el1h_64_irq+0x64/0x68 [ 264.374856][ C1] __page_table_check_zero+0x17c/0x2b0 [ 264.375802][ C1] free_unref_page_prepare+0x9e4/0xaf0 [ 264.376770][ C1] free_unref_page+0x7c/0x3a0 [ 264.377566][ C1] __free_pages+0x1a0/0x1cc [ 264.378365][ C1] __free_slab+0x104/0x294 [ 264.379176][ C1] discard_slab+0x58/0xd4 [ 264.379918][ C1] __unfreeze_partials+0x150/0x190 [ 264.380879][ C1] put_cpu_partial+0x18c/0x1f8 [ 264.381714][ C1] __slab_free+0x1a4/0x268 [ 264.382496][ C1] ___cache_free+0x168/0x198 [ 264.383401][ C1] qlink_free+0x5c/0xa0 [ 264.384192][ C1] qlist_free_all+0x3c/0xcc [ 264.385004][ C1] kasan_quarantine_reduce+0x124/0x130 [ 264.386010][ C1] __kasan_slab_alloc+0x2c/0x88 [ 264.386948][ C1] slab_post_alloc_hook+0x74/0x430 [ 264.387846][ C1] kmem_cache_alloc_bulk+0x41c/0x4e4 [ 264.388792][ C1] mas_alloc_nodes+0x484/0x754 [ 264.389625][ C1] mas_preallocate+0x13c/0x310 [ 264.390495][ C1] __vma_adjust+0x25c/0x1724 [ 264.391370][ C1] __split_vma+0x324/0x444 [ 264.392237][ C1] split_vma+0xa0/0xf8 [ 264.393019][ C1] mprotect_fixup+0x3b8/0x5c4 [ 264.393897][ C1] __arm64_sys_mprotect+0x5e4/0xa0c [ 264.394875][ C1] invoke_syscall+0x98/0x290 [ 264.395757][ C1] el0_svc_common+0x138/0x258 [ 264.396655][ C1] do_el0_svc+0x58/0x130 [ 264.397473][ C1] el0_svc+0x58/0x128 [ 264.398211][ C1] el0t_64_sync_handler+0x84/0xf0 [ 264.399133][ C1] el0t_64_sync+0x18c/0x190 [ 264.668303][ C1] Rebooting in 86400 seconds..