last executing test programs: 2m34.565065578s ago: executing program 0 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 2m23.032821675s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 2m22.133816062s ago: executing program 0 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 2m9.449359s ago: executing program 0 (id=526): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m9.312677872s ago: executing program 0 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2m9.259518323s ago: executing program 4 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d", 0x6c) 2m9.229592164s ago: executing program 4 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000020000000000000000020000092000018006000340000400001400018008000100ac14141508000200ac1414bb240019800800"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 2m9.184278965s ago: executing program 4 (id=535): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m7.81302102s ago: executing program 4 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) 2m7.81148374s ago: executing program 0 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2m6.886514018s ago: executing program 4 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 2m6.864357488s ago: executing program 4 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000020000000000000000020000092000018006000340000400001400018008000100ac14141508000200ac1414bb24001980080002001800"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 1m51.987974347s ago: executing program 32 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 1m50.978051597s ago: executing program 33 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000020000000000000000020000092000018006000340000400001400018008000100ac14141508000200ac1414bb24001980080002001800"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 28.305352688s ago: executing program 1 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252500000008000300", @ANYRES32=r3, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) 15.920819351s ago: executing program 2 (id=900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 15.843178192s ago: executing program 1 (id=903): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000804) 15.392779561s ago: executing program 5 (id=907): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x400c890) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x38, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80320000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b007369700008000800090000000600"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 15.248044894s ago: executing program 5 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2f, 0xb, 0x0, 0x0, {0x2}}, 0x14}}, 0x8000) 15.178925745s ago: executing program 5 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000003c0)="d1ac", 0x2, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0xfffffffd, @loopback, 0xfffffffa}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) accept(r1, 0x0, 0x0) 14.742990773s ago: executing program 2 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x33}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60", 0x2a}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9ebd712fe8efb9018244f4f28e16cdd2065b80e5f4e73d3c9c4c3f510000bff5947d57ad66d90aac643ca60ab19529d6397bbd0f39857f7cdd2497c5ff775b78a328b31a4975388cb5aa05334264af794dddcf8f7c9c9990883672eea20b3646b96858d37460c1f87eec69c77be90b3fb16d7dcd26e941048dbc5e22a817d6f779faf31ba03683c517106badb0ef0700aa99844d43f2ef598e30ffe536d4c08eae0e623d4bbc1a9e60f8d9e0674583bd36070931afac114640fd2ec182243b3f218232a2c91b9a8e106bd107b42c2515c92e8ebd910885e33254d863568ff29f1506e55e5fa95c7ffd13d6f1210237210c3a3a69483aa702ddf629c0297b9f31e7027a0149762831d1d206c19a960054b03021b9619c8d06d58b3ed9bb22397e0e418c3c382672713684f4e575d6ce847ba7ccb8c38ad08c5a9318d9d7f14c9015977dc28baa36578513c22880986d46f25ea79c753087b3c13552022a905490e9fdff02b879cba69916f92356a4b2cdf1a4ef73e48a922dd52a33cd4c2afb2afa2b0c1dcd40502daf5eaec6469afcf097f248c50a2340d2122de36da4d640e8a1d1bd6efaea2f7ed45a1f095d837f04e26c67db54628a6a52fed1dda9dba63357739e1de40515329c723e2f93387b20d11c2b6254c2c352e76327d7475d0ba0c55a3883ac64ba958c685166e4de06cca65ff9aae540dbe8a04c9f71dcc37a01c8b5ba22882159cfd563ebc1cb0a9a08a636de2bc4c29b35b74c2679fb2fc6a188f9dcd7249f8255cd4f348b73c47d118dff4f61a7b84cef13ea52d4d21095562f49c925b6a8a4e60a55bf623244d6a68c1ac8491f28b90f4947a7d2da4887fc04637e907c2e321a08c637d028e8625aec6ad3e3f9e5a657f2d868093406aa474b4952464cef27066a8b34e562760124a6b72a45a34ccd2d424714ae4d920390294b1c824a42bff68c275135c2445f8ec6715139fb948ab7b54748c10483ca287d3b3fec3c265b0946ccb64db6b50b6790d530c4f73519a2eeea94e6477a2fe52bd437cb98e897da734310e8c64e6da63a59a77c768bce38c68c4d983ba56ca4cb089d35570fdf3cd18a2d06b75070a018d1f759cea9679abd04257df60639cb9ae8d9a7476f50bb919843ea9610359fd007a77defba72b4ba95b28b0b76538228735daf1af43839f2eaeb73e71931a19069a301606dab72ec3425d8ddc176cdb8f61c11cf376a9ad150093268da9d482c262cd02d09350795379fe3025256709c68970c0a6c66ecece7bdedd0028b25ff080215c12d7b819973650ce6af0616cc2479b5efd9a44241147fa536aae905eec0d781b2d1f6712bee297bc626d5398cb58419a3b73b13cebe6a9f75c751cbdd5cbf1476de4430238a9a0268a1e005829cf2fe055762b8f18db0eb71347ac7d7749941eee9caaa0856a0b5bf07371f77f7b89266a60aa292e585ab1bbaba4f0132e3f197e17a323ba357c6d26d93d813a6ffdb5ed3dc041cfb33b8b661370ae7b64b3e6a0ab2382ec97f9b47a1c10aea088b53e2aa500f1d0c0c97691232f9e2121e42fff6ece886926cb847612b0a574a8c3b32ba2d80d6d7f5f0d367da2cf48721e0d45a7d21e707c9f4523f8c164208fd516fbf5ef256c9c303b77f63e46febda4ec4574b7ac73fcc9ffe7558ba6fb83db8ce661375e758e5a741cd559231846d98dea8d8ed99f8e749edcea6ed695d6153bff4ebff4763be52643871c19460a97dff4a0f3dec36b7aea6100e9d153f930c039dd4aecb68600c7879c686bcbcd2964ac274a500163bfe8d84c49412f406e384aed046d1698c72fa0e95fd80d921a436e16dbfe9eba69a3ee5e3278a412f2017f2fac10ee1f10e8bddc524bd447be7106876caeeb1d17b32d64662ef2f71e416f1e5257b3fb235e9a547fb54917501dfb0e3269b6a94484cd5b70e028f476542cf33ce62b3991418c81133dc5ea45ad49a54da850c55fc071d336505de3e694025161eba2ae2601497cf6c2df986dd1be27409980954de7a0b018c57cd9af5330c914e65a2b3b3b92016f92412c99e2669e8ffaa0d21b378c88b0e984d962cc04943ba3d932b50248b06c313963d9e6ce4fc7136d746c0a4caa90e3a2b7cb3ea6626ec15aa1487a121460da5175554398f2f7e22206556ab8e9082bb3672c26fef14c5c97fcb6299668aa364fa75c9b58b100c24fae55299df3812b304e2c55b61f52c6e547b1c5180a1c074495595fe5c332e4ba8f469a06be357b1a042713e732178589fad42afadae2dd7786160cdd1abed8c2be5613d10b4bff30d33ebb7da53760c1105aff30714c840e670ef56bd016f61ba8a7b81ac9034eacc29f32eb09e61c5b8c50c5d3e282b1b511c9874026d34e829c63a01d5a2b964a94d69776bf1811594a0bde0bd04f3ae66008aec2fe517d0c26afb24d42a7e33b05dfc5843facfc7a00e052b42f58f95ba3e6a874d6b2ab207878d9fb0a158dc00e7ad4dbbe7534af9dafe4018af18fa147a310b35e0fe2be23a030d09ebb5b5d2c013ca4cf506c707c7b713f110c21718cf417b48ccaebeb0b9a9214053f3f0c64e35be918a576fe35d498b0b90dc735c82e20f6a9fe15315f3113c601db6f017556933d30afe86bba57cd376e2a01494368d43b328218e849e2ad77431b111de6bf60fae287d57089edf7fc31e459914b16acd159a3d51a2bb3485e62eaf09600688e2417e005162b9064956c14d7956b34a6ba57b8d239733f7e2a3a1074a9d45339a5937d8649a6fafdf49d0f75ae9bb2d2a5a828cfba9dcfd83a7bb1772f5db534a1fee47db79e683b33617f6ccd80b2296ad2e7fcc1d9c05125ea7fb6dc4238e9fad5c2555a467ac255f1ccf4252edf38fb1c58f5c9fc8550941a4f6e68509ad4dac7456a0dfa5e33323f30fc88f70e67da33caf03f8cb307faf0fa91fad459f9acef2fa41ea00de343813678a3e54ab1abb12b13eb6a3f2043419cb07f0007d583656b58b77ada442726db2ce457b8ee853413d2eec0240fb64099dd68756a66c5888e19149e72791521796ab979811712fba5d783c5b28aeb7e5c15a7bea0cccc231f891dcbf0cc537a6a2e86ef604e5156fc9b945cc69623cbe82fdcbd7f1cd9d2dc42cc0e9e39580c1788fac0e13154646b3f449fbacb09409c4048ec563077dd08eae0159dff4a86ffc0de3d522105b8f500255e57820536b02c2f6db39e3251ee4389129e9433a89c35c7a6c9780fcd2345f1bee6971c81871788fcc656f8142db240d4da9021e35436cf70fe5dd32c455290bcacac75da226b0167bc93a7863045f11fde683652ea5634e17dcdd05e9b4f1d977908ee580ef7871dba267020e5dab19b4e41ab35d03df72311ba3393472a7c58abaae2e2823959e5935cbed5a1844e6a316420c3610b695d8d1ef390747925af31877f556186cf9dd56b30b871a30c575e6344f84692ded6df9776ca3950e94fdeb7cd2ee96ba3dd839d7e013e6755eb29fe054dcc31724591ba4e5bebc48baebb157d731e356eba21db13db39dbc93297b7fded992e8b5e9827891bb32315945efb61347696c146cc7639e6bd0b2cb5c3ecef190e459764146df6eb2328b6c890c8ce431c46091ae06f0b8d536cebecbbdb342bf735b23ace6cff21e4e84f0fad140cd35a839385a5a05bb8a9fdf1f9f7df0df547f0ebb49027658e83f21eb1700452b609c6986ccb77a392b4f6969759cff9ba4d34266756b543c816aed636ece35bfba3398e92f7eb8279fd5424db8bdde913df0a31684d6e9089c6e01002722b551b545be0c356390e2334921a33937408b5cd046b1a4f801c5bcc5d0e4c78a1a5e1a8c593e5ac62fce223f1cac39305dda95bcdc25ccb08d292d32d277afae03e9f2a35a7ddab5743dd750063fe28d137f6ded8aff0d234d6b8b3bca07cbc8235590341ec2b2b644ba8a4d0ee0660b175cb63fc8521941ecc35815168f24ce6b8d848ea031680ed40d22df0375502e8d5e6cb1706ea4b34d376cc980ca5b7c51cd16b3f22096b4549080cc4fded0ef79a0b9338c1e5a6aa5851b8ce5c487bfc16bd21775e9e53c37954d20c04bd45a3acefecd16d61e4da45c7d7a6b47d2e765181d2d531ecbd4eca707b5683b1c70ec7af3172a98defca17c8cb8e10d18700b80c7ee171eefbf4f5c0ceb7ffee6aa87e3f71883d5e902798a9735129943c81cd16ad54212540bfa102357df95d8d23d6751fa0e8a49fdff5430da049766e76e860e3b5b356b88add7316229759df1ba39fab949334fb9fe8b7579baf9485a726997dad75845b02ed485cc014fedf017b7cebe118ccc3a22f85f98e20cdbe2ee05e3707da09bf13200b9dd73d92f05134850abb3095d1cf492b97b89ff26a7f5cf41b3ad228c65f100d5296caa35cb4b2b5fff69dba31f461fd2b22585ce8702b11a1547f8e5ce091165de4841f356b162403b9db720c49ae9d7d89d5948614e7c935f6ec4dd0f0679933c392705863a148b78410ff58bd70ae59ca6530c5d3e12133c5f74f2e4b82c1c5bc8708b195f500fd6a950215618379b2ed6970f3bd5f880609f508d634b94ca009e88364363c1a4ad3bb77db8388b7b00cb4e540e91e79afad32e0902158f398327bd4545789c76a141d00c44814a454272409853437f8fb8b57ea6e0ac21c4a72ce43098d5df49ee9c7c405785db9a66a0c8ca084e224417ec6c42fbf855376c452b3d39cd73c2cf963a51191a5f338c55238722ff05fbab199dbec14acbf2bfab6c7c4a2763accca2aa45c9d17c4c9f2128726920eb5f7ec22c91f7c9d06ce1a29b80d5e3c8f0e277613ac29151368c5d7d006ed435f0f07d05c604c1cdb8db4ded77d5cfab3e13ce03882a466343140694a3575340d88d98d7b45a2c57c7256b8742760df745af5ab9efa879c3b9021040205c75317775b09e9c58fb55585b6abae149fac4b59736bdae21bfb91f3548717f9b5b70ef07bc079c6a5f4030e33bd7bf3089950ec583a21aaa8e92481a90303d50c6408a8dc0219f5ba08e25c54168fb20474a88038eae81106b3356e73060ac4d6a30a48c00e0884a67b93369fc79aaf76fa01c42a2365a4240392f4c03ac02abbfcbaf1df4f1b30ef05bc16d01e315416cf9bf34ee6947ad4cc045adb8e3b6eea3bf3e8424f86a649e57384def1f188a10efa970fb8e56b4f029694eee8e7e6eebd7396e8303526cc34b3eaa557c8213a724d1b3f9ca12baa78b3942da74857d95015edb364a79793b1b8cafce4c5fee82a34042594be70a69ff19ecbb2a0e4537280c9d983077e8b9df91f14413a6e1ceb57d053ce1532742c32df5a4a31c2fb69e24145c13bca4ab42f5585c5e07a9bfe6e93017b193636544dce7464834ed429cc15e4a7686d2d69afe008b1b498cb0c61723edf187a7833bbd0c5c4094c128c7ab27641c01ccb53543f57f76a4001f1eede0438ea8c0d5e2ba0ea840883cef0a9aef60ab387fd189bc46f948e18b38367cf0fe0146445935ae33bdaa4668b0eca274b38549e3df11676281e97c9ccded9dcaf0754ff03038cde916a92766bc54f785dd3e7a5f0a2795ae7a2bb83be2ae96df98e42c7ccc06c783cdecaf7129a2dffb41b89b6d86aa3ad4bf46bebcd141de01857c044af577aabdc830a580d9e212127eeb33b0dad6d0bc784c0ff20e2", 0xfd1}], 0x2}, 0x8000) 14.641612855s ago: executing program 1 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252500000008000300", @ANYRES32=r3, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) 14.334773971s ago: executing program 5 (id=914): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="f5", 0x12, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 14.235125333s ago: executing program 5 (id=916): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0109040591d0290700"], 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000300)={0x200007fff, 0xd2, 0xfffffffffffffffa, 0xc1, 0xe}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x43, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000640)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x33f, 0x8, 0x800, 0x8, 0x7, 0x0, 0xfffffff3, 0xd00b, 0x8, 0x8, 0xe, 0x1ef, 0xa3, 0x7, 0x1, 0x7ff, 0x9, 0x401, 0x1, 0x2, 0x2, 0x3b0, 0x2b, 0xfffffffa, 0x9, 0x401, 0xfffffffc, 0x4, 0x10a, 0x2, 0x7, 0x9, 0x5, 0x3, 0xf0c3, 0x6, 0x98, 0x5, 0xfffff552, 0x6, 0x1, 0x1, 0xfe, 0x9, 0xd, 0x4, 0x9, 0xa8, 0xfffffffc, 0x7, 0x1, 0x5, 0x1ff, 0x8, 0x8e, 0x0, 0x69, 0x8, 0x4, 0x400, 0x1, 0x5, 0x200, 0xcdd, 0xa, 0x3, 0x7, 0x4, 0x9, 0x7, 0x2, 0x8, 0x2, 0xbd90, 0x49, 0x400, 0x2, 0x2, 0xe7d6, 0x6, 0x8, 0x379274d8, 0x10001, 0xf, 0x1, 0x4, 0x2, 0x401, 0x2, 0x7fff, 0x1, 0x101, 0x800, 0xf3, 0xfffffda3, 0x9, 0x1, 0x463, 0xd, 0x0, 0xd738, 0xb6f6, 0x5, 0xd7, 0x0, 0x1, 0xb, 0x9, 0x8, 0xe, 0x0, 0xfffffffe, 0x8, 0x4, 0x80, 0x7fffffff, 0x1, 0x3, 0x1, 0x8001, 0x2b, 0x45a, 0x8, 0xe5, 0xffffffff, 0xa, 0x0, 0x5], "a40983393cb9cc4b3cdbdca5031744e481359fde83e3f0bf2e30c5b0e66325a528e19147533b148bd785033dc4e8a2"}}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00007000ffdbdf258020000afe090000001e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x100) r7 = socket$inet6(0xa, 0x6, 0x76) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c750a7954a1ddeb567180cb578e7dab3d88bcec820f130646cc7f5bc4543134fe564", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000840)=@setlink={0x34, 0x13, 0x5, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @random='\x00\x00\x00@\x00'}, @IFLA_EVENT={0x8, 0x2c, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r10, @ANYRES64, @ANYRESDEC, @ANYRES64], 0x23c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) 14.205186933s ago: executing program 3 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/171, 0xab, 0x9a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), 0x0}, 0x20) 13.879002399s ago: executing program 3 (id=918): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000001b80)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$clear(0x7, r0) 13.818852121s ago: executing program 3 (id=919): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x400c890) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x38, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80320000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b007369700008000800090000000600"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 13.817739061s ago: executing program 3 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x4886) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 12.733924671s ago: executing program 6 (id=922): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r1, @in={{0x2, 0x4e23, @private=0xa010102}}}, &(0x7f0000000540)=0x84) 12.732988631s ago: executing program 6 (id=923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000804) 12.478780275s ago: executing program 3 (id=924): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 11.842170887s ago: executing program 6 (id=925): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x80000000000000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) close_range(r3, r2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 10.966935964s ago: executing program 6 (id=926): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.190006128s ago: executing program 1 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}], 0x4}, 0x7}], 0x1, 0x100, 0x0) close(r4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.184481249s ago: executing program 3 (id=928): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e906607a"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_disconnect(r5) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 2.166219129s ago: executing program 5 (id=929): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_disconnect(r5) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(r6) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 2.14850204s ago: executing program 6 (id=930): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0xfffffffffffffdcd, &(0x7f0000000580)={0x40, 0x15, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xff, 0x81, 0xa3, 0x8, 0xa47, 0x9601, 0x195, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xfa, 0x80, 0x6, "", [{{0x9, 0x4, 0x1a, 0x8, 0x0, 0x66, 0x8a, 0x83, 0xdc}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r5) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) ioctl$EVIOCGBITSW(r5, 0x40095505, 0x0) 2.14736398s ago: executing program 2 (id=931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/173, 0xad, 0x1, &(0x7f0000000280)=""/37, 0x25}, &(0x7f0000000100)=0x40) 2.046781991s ago: executing program 2 (id=932): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) close_range(r3, r2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f00000001c0)={0x4, 0x9, 0x8, 0x9, 0x9, 0x9}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x4}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xfd, 0x3a, '..', 0x3a, '+', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x0]}, 0x2d) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x1000, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.264019996s ago: executing program 1 (id=933): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x6f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.164110848s ago: executing program 2 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x4886) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 87.151888ms ago: executing program 6 (id=935): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@compress_algo={'compress', 0x3d, 'zlib'}}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 21.719239ms ago: executing program 1 (id=936): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x80000000000000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) close_range(r3, r2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 0s ago: executing program 2 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000140)=0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) ioctl$VT_DISALLOCATE(r8, 0x5608) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0f4df4205cb82cfc99684b2c5ee534000000", @ANYRES16=r9, @ANYBLOB="00082dbd7000ffdbdf257c00000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x8800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 33.310486][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.314842][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.324788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.326367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.334103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.335734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.337693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.339273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.340618][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.341798][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.343502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.345825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.347230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.348867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.350395][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.356820][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.358817][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.363031][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.366341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.368124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.369539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.371061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.375214][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.376432][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.388671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.401019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.406676][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.408336][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.409794][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.418501][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.421117][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.426931][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.428560][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.430000][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.434151][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.435667][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.437318][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.442706][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.446670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.448244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.449396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.450503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.462237][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.467086][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.469754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.471008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.473749][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.474768][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.476244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.483067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.484417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.490001][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.492574][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.494009][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.495412][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.498187][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.500567][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.512770][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.514256][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.515335][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.516681][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.520218][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.527637][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.532096][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.533301][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.534893][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.536629][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.537963][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.539018][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.547497][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.549289][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.550808][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.553246][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.554800][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.556625][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.558590][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.560036][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.561871][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.573272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.574944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.576590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.585459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.587247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.590971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.595665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.598569][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.600749][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.606779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.608384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.609965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.615150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.616758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.618379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.619930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.622118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.626748][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.636184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.637746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.639094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.640615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.642565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.643957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.645615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.647062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.648582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.650044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.652407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.658114][ T4327] device veth0_vlan entered promiscuous mode [ 33.660141][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.663223][ T4326] device veth0_vlan entered promiscuous mode [ 33.669358][ T4326] device veth1_vlan entered promiscuous mode [ 33.673141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.674728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.676441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.682631][ T4327] device veth1_vlan entered promiscuous mode [ 33.686602][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.688237][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.689733][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.691234][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.701886][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.703466][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.706378][ T4328] device veth0_vlan entered promiscuous mode [ 33.724419][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.725958][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.727572][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.729510][ T4328] device veth1_vlan entered promiscuous mode [ 33.738508][ T4327] device veth0_macvtap entered promiscuous mode [ 33.742994][ T4326] device veth0_macvtap entered promiscuous mode [ 33.752909][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.754488][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.755928][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.757491][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.765341][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.766890][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.768601][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.769791][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.770974][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.774126][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.779154][ T4327] device veth1_macvtap entered promiscuous mode [ 33.780982][ T4326] device veth1_macvtap entered promiscuous mode [ 33.788029][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.797413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.798833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.800257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.802599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.804072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.806354][ T4328] device veth0_macvtap entered promiscuous mode [ 33.809279][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.810673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.813072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.815415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.819057][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.824955][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.826636][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.828171][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.829674][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.834050][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.835482][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.836819][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.838142][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.848583][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.850330][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.854277][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.860951][ T4333] device veth0_vlan entered promiscuous mode [ 33.864058][ T4328] device veth1_macvtap entered promiscuous mode [ 33.865647][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.867020][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.868608][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.870056][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.882014][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.887188][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.888872][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.891173][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.895448][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.897164][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.899000][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.900766][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.904207][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.906975][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.908455][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.909812][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.912810][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.914519][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.916049][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.918175][ T4333] device veth1_vlan entered promiscuous mode [ 33.928015][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.929561][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.930992][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.935335][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.937752][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.940145][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.942419][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.943735][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.945113][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.961727][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.963322][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.964700][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.966269][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.982086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.984257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.988403][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.989876][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.991224][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.993146][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.000472][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.002408][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.004565][ T4333] device veth0_macvtap entered promiscuous mode [ 34.018165][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.019416][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.026468][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.027974][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.029423][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.031005][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.033797][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.035499][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.038972][ T4333] device veth1_macvtap entered promiscuous mode [ 34.045823][ T4337] device veth0_vlan entered promiscuous mode [ 34.061158][ T4337] device veth1_vlan entered promiscuous mode [ 34.076223][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.078264][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.079827][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.082622][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.084104][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.085748][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.087955][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.090740][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.092777][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.093337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.094178][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.096122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.097932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.099529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.101025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.104947][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.106962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.115768][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.117429][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.118986][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.120663][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.125252][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.126931][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.129181][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.133183][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.134720][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.136074][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.137470][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.139440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.140896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.142910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.168984][ T4337] device veth0_macvtap entered promiscuous mode [ 34.174084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.175755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.177366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.182132][ T235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.183439][ T235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.184753][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.188038][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.189239][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.190837][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.194668][ T4337] device veth1_macvtap entered promiscuous mode [ 34.210855][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.213373][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.215154][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.216673][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.218113][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.227960][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.229486][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.231057][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.236223][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.239504][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.241013][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.243849][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.255079][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.256326][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.267936][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.270368][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.271803][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.273116][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.276030][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.277613][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.279144][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.280708][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.283611][ T235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.283729][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.284855][ T235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.287783][ T4409] loop0: detected capacity change from 0 to 4096 [ 34.287803][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.290342][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.301328][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.308038][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.310555][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.312199][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.313828][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.361163][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.368090][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.369551][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376193][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.407820][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.409180][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.410572][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.456772][ T4409] EXT4-fs: Ignoring removed orlov option [ 34.459804][ T4409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.462607][ T4418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.465218][ T4418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.469240][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.470478][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.473722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.759655][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.794146][ T4409] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 34.830553][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 34.879367][ T4430] loop4: detected capacity change from 0 to 64 [ 35.242302][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 35.243657][ T4341] Bluetooth: hci4: command 0x041b tx timeout [ 35.244561][ T4341] Bluetooth: hci1: command 0x041b tx timeout [ 35.245848][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 35.246795][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 35.808253][ T4457] loop1: detected capacity change from 0 to 128 [ 35.809672][ T4457] ======================================================= [ 35.809672][ T4457] WARNING: The mand mount option has been deprecated and [ 35.809672][ T4457] and is ignored by this kernel. Remove the mand [ 35.809672][ T4457] option from the mount to silence this warning. [ 35.809672][ T4457] ======================================================= [ 35.826848][ T4457] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 35.828980][ T4457] hpfs: filesystem error: improperly stopped [ 35.831011][ T4457] hpfs: You really don't want any checks? You are crazy... [ 35.833786][ T4457] hpfs: hpfs_map_sector(): read error [ 35.834799][ T4457] hpfs: code page support is disabled [ 35.841149][ T4457] hpfs: hpfs_map_4sectors(): unaligned read [ 35.843557][ T4457] hpfs: hpfs_map_4sectors(): unaligned read [ 35.844790][ T4457] hpfs: filesystem error: unable to find root dir [ 35.870676][ T4457] hpfs: hpfs_map_4sectors(): unaligned read [ 36.210935][ T4468] loop2: detected capacity change from 0 to 64 [ 36.309007][ T4472] loop2: detected capacity change from 0 to 512 [ 36.335285][ T4472] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.373800][ T4472] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.21: inode has both inline data and extents flags [ 36.376449][ T4472] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.21: couldn't read orphan inode 15 (err -117) [ 36.388875][ T4466] loop4: detected capacity change from 0 to 32768 [ 36.390391][ T4466] gfs2: quota_quantum mount option requires a positive numeric argument [ 36.401263][ T4472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.418069][ T4472] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 36.419386][ T4472] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.21: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 36.455339][ T4470] loop1: detected capacity change from 0 to 32768 [ 36.472213][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 36.475339][ T4319] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.508045][ T4479] loop3: detected capacity change from 0 to 2048 [ 36.513098][ T4479] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 36.514987][ T4479] NILFS (loop3): mounting unchecked fs [ 36.556287][ T4479] NILFS (loop3): recovery complete [ 36.569512][ T4470] XFS (loop1): Mounting V5 Filesystem [ 36.605953][ T4470] XFS (loop1): Ending clean mount [ 36.628504][ T4488] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 36.635706][ T4484] loop2: detected capacity change from 0 to 40427 [ 36.638740][ T4484] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 36.643303][ T4493] netlink: 'syz.4.26': attribute type 1 has an invalid length. [ 36.695349][ T4493] netlink: 3 bytes leftover after parsing attributes in process `syz.4.26'. [ 36.705514][ T4328] XFS (loop1): Unmounting Filesystem [ 36.705810][ T4497] batman_adv: batadv0: Adding interface: dummy0 [ 36.707365][ T4497] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.711027][ T4497] batman_adv: batadv0: Interface activated: dummy0 [ 36.810050][ T4502] loop3: detected capacity change from 0 to 64 [ 36.883476][ T4493] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 36.886341][ T4493] JBD2: Ignoring recovery information on journal [ 36.948869][ T4509] netlink: 52 bytes leftover after parsing attributes in process `syz.0.29'. [ 37.210555][ T4493] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 37.291883][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 37.295002][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 37.295091][ T4341] Bluetooth: hci2: command 0x040f tx timeout [ 37.297120][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 37.297961][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 38.079750][ T4337] ocfs2: Unmounting device (7,4) on (node local) [ 38.130303][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'. [ 38.216930][ T4544] batman_adv: batadv0: Adding interface: dummy0 [ 38.219227][ T4544] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.231312][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 38.238794][ T4544] batman_adv: batadv0: Interface activated: dummy0 [ 38.240348][ T4545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.43'. [ 38.450393][ T4541] F2FS-fs (loop3): invalid crc value [ 38.462016][ T4541] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.470066][ T4541] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 38.478980][ T4541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 38.493624][ T4556] netlink: 228 bytes leftover after parsing attributes in process `syz.4.46'. [ 38.562821][ T4562] binder: 4560:4562 ioctl c0306201 20000080 returned -14 [ 38.566862][ T4562] binder: 4560:4562 ioctl c0306201 200003c0 returned -14 [ 38.568679][ T4562] binder: 4560:4562 got transaction to invalid handle, 1 [ 38.570051][ T4562] binder: 4562:4560 cannot find target node [ 38.570887][ T4562] binder: 4560:4562 transaction call to 0:0 failed 3/29201/-22, size 112-24 line 3045 [ 38.575550][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.991255][ T4568] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 39.528412][ T4583] batman_adv: batadv0: Interface deactivated: dummy0 [ 39.529578][ T4583] batman_adv: batadv0: Removing interface: dummy0 [ 39.827590][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 39.828635][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 39.829560][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 39.830600][ T4341] Bluetooth: hci0: command 0x0419 tx timeout [ 39.831550][ T4341] Bluetooth: hci3: command 0x0419 tx timeout [ 39.848091][ T4600] netlink: 'syz.2.61': attribute type 3 has an invalid length. [ 40.104399][ T4613] set_capacity_and_notify: 4 callbacks suppressed [ 40.104408][ T4613] loop1: detected capacity change from 0 to 512 [ 40.112475][ T4604] loop4: detected capacity change from 0 to 32768 [ 40.138583][ T4604] XFS (loop4): Mounting V5 Filesystem [ 40.178031][ T4613] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.68: missing EA_INODE flag [ 40.180580][ T4613] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.68: error while reading EA inode 2 err=-117 [ 40.186216][ T4613] EXT4-fs (loop1): 1 orphan inode deleted [ 40.189416][ T4613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.214771][ T4604] XFS (loop4): Ending clean mount [ 40.257054][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 40.275773][ T4337] XFS (loop4): Unmounting Filesystem [ 40.621029][ T4644] loop1: detected capacity change from 0 to 32768 [ 40.635681][ T4635] loop0: detected capacity change from 0 to 131072 [ 40.638537][ T4635] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 40.639624][ T4635] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.642409][ T4635] F2FS-fs (loop0): invalid crc value [ 40.644668][ T4644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (4644) [ 40.649621][ T4644] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 40.651274][ T4644] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 40.653600][ T4644] BTRFS info (device loop1): metadata ratio 0 [ 40.654596][ T4644] BTRFS info (device loop1): turning on sync discard [ 40.655520][ T4644] BTRFS info (device loop1): using free space tree [ 40.667226][ T4635] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.684711][ T4635] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.685841][ T4635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 40.883771][ T4644] BTRFS info (device loop1): enabling ssd optimizations [ 41.053875][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 41.127501][ T4328] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.517921][ T4704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.519551][ T4704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.539046][ T4704] loop4: detected capacity change from 0 to 4096 [ 41.580767][ T4707] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.598102][ T4704] NILFS (loop4): bad btree node (ino=3, blocknr=2047): level = 0, flags = 0x0, nchildren = 0 [ 41.622870][ T4704] NILFS (loop4): error -5 preparing GC: cannot read source blocks [ 42.002886][ T4714] loop1: detected capacity change from 0 to 256 [ 42.524765][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 42.544968][ T4728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 42.579447][ T4734] binder: 4733:4734 ioctl c0306201 20000080 returned -14 [ 42.587044][ T4734] binder: 4733:4734 ioctl c0306201 200003c0 returned -14 [ 42.588380][ T4734] binder: 4733:4734 got transaction to invalid handle, 1 [ 42.589604][ T4734] binder: 4734:4733 cannot find target node [ 42.641628][ T4734] binder: 4733:4734 transaction call to 0:0 failed 6/29201/-22, size 112-24 line 3045 [ 42.672385][ T4521] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.674361][ T4737] loop3: detected capacity change from 0 to 32768 [ 42.690073][ T4737] read_mapping_page failed! [ 42.690983][ T4737] ERROR: (device loop3): txAbort: [ 42.690983][ T4737] [ 42.693329][ T4737] ERROR: (device loop3): remounting filesystem as read-only [ 42.826776][ T4750] loop4: detected capacity change from 0 to 24 [ 42.828401][ T4750] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 43.248033][ T4750] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 43.277779][ T4750] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 43.370622][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 43.644222][ T4764] loop4: detected capacity change from 0 to 64 [ 43.761557][ T4772] binder: 4771:4772 ioctl c0306201 20000080 returned -14 [ 43.764097][ T4772] binder: 4771:4772 ioctl c0306201 200003c0 returned -14 [ 43.765396][ T4772] binder: 4771:4772 got transaction to invalid handle, 1 [ 43.766457][ T4772] binder: 4772:4771 cannot find target node [ 43.767693][ T4772] binder: 4771:4772 transaction call to 0:0 failed 9/29201/-22, size 112-24 line 3045 [ 43.769841][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.102886][ T4757] loop2: detected capacity change from 0 to 32768 [ 44.465986][ T4781] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 44.828647][ T4791] netlink: 84 bytes leftover after parsing attributes in process `syz.4.127'. [ 44.847040][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 45.121868][ T4807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.123445][ T4807] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.196067][ T4809] batman_adv: batadv0: Adding interface: dummy0 [ 45.197342][ T4809] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.201597][ T4809] batman_adv: batadv0: Interface activated: dummy0 [ 45.508538][ T4814] set_capacity_and_notify: 4 callbacks suppressed [ 45.508549][ T4814] loop2: detected capacity change from 0 to 256 [ 45.511147][ T4807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.518050][ T4814] exfat: Deprecated parameter 'utf8' [ 45.520166][ T4814] exfat: Deprecated parameter 'namecase' [ 45.521284][ T4814] exfat: Deprecated parameter 'namecase' [ 45.527358][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 45.550303][ T4814] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 45.648143][ T4823] loop1: detected capacity change from 0 to 128 [ 45.657458][ T4823] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 45.659862][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 45.668385][ T4823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.749547][ T4816] loop3: detected capacity change from 0 to 32768 [ 45.789396][ T4816] JBD2: Ignoring recovery information on journal [ 45.818611][ T4834] loop2: detected capacity change from 0 to 64 [ 45.829130][ T4816] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 46.214798][ T4841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 46.225222][ T4327] ocfs2: Unmounting device (7,3) on (node local) [ 46.263031][ T4845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.148'. [ 46.313272][ T4846] HTB: quantum of class 80010008 is big. Consider r2q change. [ 46.416324][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 47.436205][ T4869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.437602][ T4869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.564385][ T4874] loop1: detected capacity change from 0 to 64 [ 48.008312][ T4883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 48.032759][ T4887] loop1: detected capacity change from 0 to 8 [ 48.322358][ T4885] loop2: detected capacity change from 0 to 131072 [ 48.370341][ T4889] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 48.371636][ T4889] netlink: 'syz.1.163': attribute type 8 has an invalid length. [ 48.372720][ T4889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.163'. [ 48.416986][ T4885] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 48.418143][ T4885] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.483396][ T4885] F2FS-fs (loop2): invalid crc value [ 48.596509][ T4885] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.616824][ T4885] F2FS-fs (loop2): recover fsync data on readonly fs [ 48.620370][ T4885] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 48.621593][ T4885] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 48.759657][ T4895] loop0: detected capacity change from 0 to 128 [ 48.763136][ T4895] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 48.764862][ T4895] hpfs: filesystem error: improperly stopped [ 48.765870][ T4895] hpfs: You really don't want any checks? You are crazy... [ 48.767185][ T4895] hpfs: hpfs_map_sector(): read error [ 48.767965][ T4895] hpfs: code page support is disabled [ 48.769519][ T4895] hpfs: hpfs_map_4sectors(): unaligned read [ 48.772280][ T4895] hpfs: hpfs_map_4sectors(): unaligned read [ 48.773259][ T4895] hpfs: filesystem error: unable to find root dir [ 48.833468][ T4901] loop4: detected capacity change from 0 to 24 [ 48.837427][ T4901] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 48.845465][ T4901] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 48.948832][ T4911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'. [ 49.578150][ T4931] binder: 4930:4931 ioctl c0306201 20000080 returned -14 [ 49.584043][ T4931] binder: 4930:4931 ioctl c0306201 200003c0 returned -14 [ 49.587472][ T4931] binder: 4930:4931 got transaction to invalid handle, 1 [ 49.589409][ T4931] binder: 4931:4930 cannot find target node [ 49.590529][ T4931] binder: 4930:4931 transaction call to 0:0 failed 12/29201/-22, size 112-24 line 3045 [ 49.592997][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.658953][ T4935] device netdevsim0 entered promiscuous mode [ 49.669071][ T4935] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 49.740778][ T4943] loop2: detected capacity change from 0 to 64 [ 50.327600][ T4963] binder: 4962:4963 ioctl c0306201 20000080 returned -14 [ 50.329793][ T4963] binder: 4962:4963 ioctl c0306201 200003c0 returned -14 [ 50.331847][ T4963] binder: 4962:4963 got transaction to invalid handle, 1 [ 50.332975][ T4963] binder: 4963:4962 cannot find target node [ 50.333835][ T4963] binder: 4962:4963 transaction call to 0:0 failed 15/29201/-22, size 112-24 line 3045 [ 50.335861][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.136866][ T4979] batman_adv: batadv0: Adding interface: dummy0 [ 51.137925][ T4979] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.141829][ T4979] batman_adv: batadv0: Interface activated: dummy0 [ 51.206816][ T4984] device syzkaller0 entered promiscuous mode [ 51.688425][ T4997] binder: 4996:4997 ioctl c0306201 20000080 returned -14 [ 51.705547][ T4997] binder: 4996:4997 ioctl c0306201 200003c0 returned -14 [ 51.707163][ T4997] binder: 4996:4997 got transaction to invalid handle, 1 [ 51.710355][ T4997] binder: 4997:4996 cannot find target node [ 51.711278][ T4997] binder: 4996:4997 transaction call to 0:0 failed 18/29201/-22, size 112-24 line 3045 [ 51.730948][ T4706] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.765176][ T5005] Zero length message leads to an empty skb [ 52.160630][ T5009] loop4: detected capacity change from 0 to 32768 [ 52.163081][ T5009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.209 (5009) [ 52.168857][ T5009] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.170487][ T5009] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 52.171908][ T5009] BTRFS info (device loop4): metadata ratio 0 [ 52.172814][ T5009] BTRFS info (device loop4): turning on sync discard [ 52.173763][ T5009] BTRFS info (device loop4): using free space tree [ 52.269835][ T5021] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 52.616496][ T5009] BTRFS info (device loop4): enabling ssd optimizations [ 52.647051][ T4337] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.665444][ T5039] device syzkaller0 entered promiscuous mode [ 52.775856][ T4320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4320) [ 52.804804][ T5050] loop1: detected capacity change from 0 to 512 [ 52.882661][ T5055] binder: 5054:5055 ioctl c0306201 20000080 returned -14 [ 52.885266][ T5055] binder: BINDER_SET_CONTEXT_MGR already set [ 52.886936][ T5055] binder: 5054:5055 ioctl 4018620d 20000040 returned -16 [ 52.888539][ T5055] binder: 5054:5055 ioctl c0306201 200003c0 returned -14 [ 52.889899][ T5055] binder: 5054:5055 got transaction to invalid handle, 1 [ 52.891000][ T5055] binder: 5055:5054 cannot find target node [ 53.012651][ T5059] batman_adv: batadv0: Adding interface: dummy0 [ 53.013692][ T5059] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.017440][ T5059] batman_adv: batadv0: Interface activated: dummy0 [ 53.627170][ T5075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.632773][ T5075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.721851][ T5086] loop3: detected capacity change from 0 to 512 [ 54.772991][ T5086] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.229: inode has both inline data and extents flags [ 54.775257][ T5086] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.229: couldn't read orphan inode 15 (err -117) [ 54.779506][ T5086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.852919][ T5092] binder: 5091:5092 ioctl c0306201 20000080 returned -14 [ 54.855132][ T5092] binder: BINDER_SET_CONTEXT_MGR already set [ 54.855996][ T5092] binder: 5091:5092 ioctl 4018620d 20000040 returned -16 [ 54.931774][ T5092] binder: 5091:5092 ioctl c0306201 200003c0 returned -14 [ 54.933042][ T5092] binder: 5091:5092 got transaction to invalid handle, 1 [ 54.943927][ T5092] binder_debug: 2 callbacks suppressed [ 54.943941][ T5092] binder: 5092:5091 cannot find target node [ 54.951628][ T5092] binder: 5091:5092 transaction call to 0:0 failed 24/29201/-22, size 112-24 line 3045 [ 54.956286][ T4706] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.419891][ T5102] overlayfs: overlapping lowerdir path [ 55.432674][ T5087] loop0: detected capacity change from 0 to 32768 [ 55.444661][ T5087] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 55.540183][ T4320] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 55.554968][ T5109] loop0: detected capacity change from 0 to 8 [ 55.578633][ T5109] SQUASHFS error: zlib decompression failed, data probably corrupt [ 55.580359][ T5109] SQUASHFS error: Failed to read block 0x13e: -5 [ 55.703706][ T5109] SQUASHFS error: Unable to read metadata cache entry [13c] [ 55.704921][ T5109] SQUASHFS error: Unable to read directory block [13c:26] [ 55.756494][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 57.648153][ T5131] loop4: detected capacity change from 0 to 32768 [ 57.777075][ T5131] XFS (loop4): Mounting V5 Filesystem [ 58.218865][ T5131] XFS (loop4): Ending clean mount [ 58.271286][ T4337] XFS (loop4): Unmounting Filesystem [ 58.560153][ T5168] loop0: detected capacity change from 0 to 512 [ 58.606122][ T5168] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.249: inode has both inline data and extents flags [ 58.608396][ T5168] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.249: couldn't read orphan inode 15 (err -117) [ 58.610343][ T5168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.625328][ T5174] loop2: detected capacity change from 0 to 1024 [ 59.437457][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 59.544439][ T5170] loop4: detected capacity change from 0 to 32768 [ 61.277758][ T5199] loop0: detected capacity change from 0 to 32768 [ 61.337202][ T5214] loop3: detected capacity change from 0 to 512 [ 61.644922][ T5214] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.264: inode has both inline data and extents flags [ 61.648789][ T5199] XFS (loop0): Mounting V5 Filesystem [ 61.649992][ T5214] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.264: couldn't read orphan inode 15 (err -117) [ 61.654984][ T5214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.237316][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 62.278340][ T5199] XFS (loop0): Ending clean mount [ 62.381692][ T5240] netlink: 52 bytes leftover after parsing attributes in process `syz.4.266'. [ 62.391342][ T5240] loop4: detected capacity change from 0 to 64 [ 62.431977][ T4326] XFS (loop0): Unmounting Filesystem [ 63.046571][ T5247] loop1: detected capacity change from 0 to 128 [ 63.052469][ T5246] binder: BINDER_SET_CONTEXT_MGR already set [ 63.053596][ T5246] binder: 5245:5246 ioctl 4018620d 20000040 returned -16 [ 63.055102][ T5246] binder: 5245:5246 got transaction to invalid handle, 1 [ 63.056252][ T5246] binder: 5246:5245 cannot find target node [ 63.057031][ T5247] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 63.057143][ T5246] binder: 5245:5246 transaction call to 0:0 failed 26/29201/-22, size 112-24 line 3045 [ 63.061207][ T5247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.062973][ T4432] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.198154][ T5254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.275'. [ 63.976092][ T5259] loop2: detected capacity change from 0 to 512 [ 63.996815][ T5259] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.277: inode has both inline data and extents flags [ 64.009319][ T5259] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.277: couldn't read orphan inode 15 (err -117) [ 64.019406][ T5259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.106657][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 64.321365][ C0] sched: RT throttling activated [ 64.493344][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495445][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500268][ T14] cfg80211: failed to load regulatory.db [ 64.848803][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 64.902983][ T5281] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.285'. [ 64.905326][ T5283] binder: BINDER_SET_CONTEXT_MGR already set [ 64.913263][ T5283] binder: 5282:5283 ioctl 4018620d 20000040 returned -16 [ 64.916740][ T5283] binder: 5282:5283 got transaction to invalid handle, 1 [ 64.919053][ T5283] binder: 5283:5282 cannot find target node [ 64.919949][ T5283] binder: 5282:5283 transaction call to 0:0 failed 28/29201/-22, size 112-24 line 3045 [ 64.928039][ T4706] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.326163][ T5292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'. [ 65.414449][ T5294] netlink: 52 bytes leftover after parsing attributes in process `syz.1.286'. [ 65.431218][ T5294] loop1: detected capacity change from 0 to 64 [ 65.841027][ T5303] batman_adv: batadv0: Adding interface: dummy0 [ 65.842255][ T5303] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.846261][ T5303] batman_adv: batadv0: Interface activated: dummy0 [ 65.861066][ T5307] loop3: detected capacity change from 0 to 512 [ 65.870585][ T5307] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.293: inode has both inline data and extents flags [ 65.873159][ T5307] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.293: couldn't read orphan inode 15 (err -117) [ 65.875235][ T5307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.784243][ T5312] loop0: detected capacity change from 0 to 64 [ 66.982216][ T5322] binder: BINDER_SET_CONTEXT_MGR already set [ 66.983463][ T5322] binder: 5318:5322 ioctl 4018620d 20000040 returned -16 [ 66.999196][ T5322] binder: 5318:5322 got transaction to invalid handle, 1 [ 67.000327][ T5322] binder: 5322:5318 cannot find target node [ 67.001201][ T5322] binder: 5318:5322 transaction call to 0:0 failed 30/29201/-22, size 112-24 line 3045 [ 67.028734][ T4521] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.395046][ T5330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.302'. [ 67.500347][ T5339] loop2: detected capacity change from 0 to 8 [ 67.596432][ T5342] netlink: 52 bytes leftover after parsing attributes in process `syz.0.304'. [ 67.605093][ T5342] loop0: detected capacity change from 0 to 64 [ 67.692252][ T5343] netlink: 'syz.2.305': attribute type 2 has an invalid length. [ 67.693700][ T5343] netlink: 'syz.2.305': attribute type 8 has an invalid length. [ 67.695030][ T5343] netlink: 132 bytes leftover after parsing attributes in process `syz.2.305'. [ 68.494161][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 68.539220][ T5361] binder: 5360:5361 Acquire 1 refcount change on invalid ref 0 ret -22 [ 68.540775][ T5361] binder: 5360:5361 ioctl c0306201 20000080 returned -14 [ 68.545651][ T5361] binder: 5360:5361 ioctl c0306201 200003c0 returned -14 [ 68.546884][ T5361] binder: 5360:5361 got transaction to invalid handle, 1 [ 68.547951][ T5361] binder: 5361:5360 cannot find target node [ 68.548856][ T5361] binder: 5360:5361 transaction call to 0:0 failed 33/29201/-22, size 112-24 line 3045 [ 68.550757][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.817423][ T5376] device syzkaller0 entered promiscuous mode [ 69.840117][ T5377] netlink: 'syz.2.318': attribute type 2 has an invalid length. [ 69.842956][ T5377] netlink: 'syz.2.318': attribute type 8 has an invalid length. [ 69.844044][ T5377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.318'. [ 69.962817][ T5385] loop0: detected capacity change from 0 to 256 [ 70.006272][ T5387] loop1: detected capacity change from 0 to 512 [ 70.033813][ T5387] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.323: inode has both inline data and extents flags [ 70.038439][ T5387] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.323: couldn't read orphan inode 15 (err -117) [ 70.052385][ T5387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.673515][ T5408] netlink: 'syz.3.331': attribute type 2 has an invalid length. [ 70.692371][ T5408] netlink: 'syz.3.331': attribute type 8 has an invalid length. [ 70.693819][ T5408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.331'. [ 70.747409][ T5398] loop0: detected capacity change from 0 to 40427 [ 70.759692][ T5398] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x3ffff [ 71.878648][ T5427] netlink: 52 bytes leftover after parsing attributes in process `syz.2.334'. [ 71.904074][ T5427] loop2: detected capacity change from 0 to 64 [ 72.269723][ T5437] mmap: syz.0.339 (5437) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.308035][ T5439] device syzkaller0 entered promiscuous mode [ 72.668718][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 72.713013][ T5447] loop1: detected capacity change from 0 to 64 [ 72.903777][ T5451] loop1: detected capacity change from 0 to 8 [ 74.274065][ T5474] loop2: detected capacity change from 0 to 512 [ 74.299360][ T5474] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.352: inode has both inline data and extents flags [ 74.306122][ T5474] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.352: couldn't read orphan inode 15 (err -117) [ 74.317502][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.324028][ T5478] device syzkaller0 entered promiscuous mode [ 74.562775][ T5486] binder: 5485:5486 Acquire 1 refcount change on invalid ref 0 ret -22 [ 74.564194][ T5486] binder: 5485:5486 ioctl c0306201 20000080 returned -14 [ 74.572402][ T5486] binder: 5485:5486 ioctl c0306201 200003c0 returned -14 [ 75.370173][ T5510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 75.418669][ T5512] loop3: detected capacity change from 0 to 128 [ 75.465130][ T5512] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.468675][ T5512] hpfs: filesystem error: improperly stopped [ 75.481062][ T5512] hpfs: You really don't want any checks? You are crazy... [ 75.483349][ T5512] hpfs: hpfs_map_sector(): read error [ 75.490798][ T5512] hpfs: code page support is disabled [ 75.492168][ T5512] hpfs: hpfs_map_4sectors(): unaligned read [ 75.493304][ T5512] hpfs: hpfs_map_4sectors(): unaligned read [ 75.494357][ T5512] hpfs: filesystem error: unable to find root dir [ 75.504801][ T5512] hpfs: hpfs_map_4sectors(): unaligned read [ 75.551221][ T5519] binder: 5515:5519 Acquire 1 refcount change on invalid ref 0 ret -22 [ 75.552959][ T5519] binder: 5515:5519 ioctl c0306201 20000080 returned -14 [ 75.637656][ T5519] binder: 5515:5519 ioctl c0306201 200003c0 returned -14 [ 76.408033][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 76.548920][ T5532] device syzkaller0 entered promiscuous mode [ 77.376262][ T5545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'. [ 77.418333][ T5555] binder: 5553:5555 Acquire 1 refcount change on invalid ref 0 ret -22 [ 77.419631][ T5555] binder: 5553:5555 ioctl c0306201 20000080 returned -14 [ 77.423930][ T5555] binder: 5553:5555 ioctl c0306201 200003c0 returned -14 [ 77.430413][ T5556] loop4: detected capacity change from 0 to 512 [ 77.469182][ T5556] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.380: inode has both inline data and extents flags [ 77.475942][ T5556] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.380: couldn't read orphan inode 15 (err -117) [ 77.489164][ T5556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.625314][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 77.768599][ T5580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.392'. [ 78.627216][ T5586] device syzkaller0 entered promiscuous mode [ 78.633042][ T5590] binder: 5589:5590 ioctl 4018620d 0 returned -22 [ 78.634554][ T5590] binder: 5589:5590 Acquire 1 refcount change on invalid ref 0 ret -22 [ 78.643945][ T5590] binder: 5589:5590 ioctl c0306201 20000080 returned -14 [ 78.649036][ T5590] binder: 5589:5590 ioctl c0306201 200003c0 returned -14 [ 78.650276][ T5590] binder: 5589:5590 got transaction to invalid handle, 1 [ 78.651200][ T5590] binder: 5590:5589 cannot find target node [ 78.666396][ T5590] binder: 5589:5590 transaction call to 0:0 failed 42/29201/-22, size 112-24 line 3045 [ 78.668324][ T4706] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.780354][ T5596] loop4: detected capacity change from 0 to 512 [ 78.817222][ T5596] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.397: inode has both inline data and extents flags [ 78.819976][ T5596] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.397: couldn't read orphan inode 15 (err -117) [ 78.824309][ T5596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.936754][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 79.460605][ T5623] binder: 5622:5623 ioctl 4018620d 0 returned -22 [ 79.465440][ T5623] binder: 5622:5623 Acquire 1 refcount change on invalid ref 0 ret -22 [ 79.467097][ T5623] binder: 5622:5623 ioctl c0306201 20000080 returned -14 [ 79.469804][ T5623] binder: 5622:5623 ioctl c0306201 200003c0 returned -14 [ 79.471171][ T5623] binder: 5622:5623 got transaction to invalid handle, 1 [ 79.472701][ T5623] binder: 5623:5622 cannot find target node [ 79.473654][ T5623] binder: 5622:5623 transaction call to 0:0 failed 45/29201/-22, size 112-24 line 3045 [ 79.476123][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.601699][ T5629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'. [ 79.630064][ T5636] loop1: detected capacity change from 0 to 8 [ 79.847074][ T5642] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 79.848496][ T5642] netlink: 'syz.1.411': attribute type 8 has an invalid length. [ 79.849851][ T5642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.411'. [ 80.928626][ T5661] binder: 5659:5661 ioctl 4018620d 0 returned -22 [ 80.930651][ T5661] binder: 5659:5661 Acquire 1 refcount change on invalid ref 0 ret -22 [ 80.933149][ T5661] binder: 5659:5661 ioctl c0306201 20000080 returned -14 [ 80.941591][ T5661] binder: 5659:5661 ioctl c0306201 200003c0 returned -14 [ 80.943513][ T5661] binder: 5659:5661 got transaction to invalid handle, 1 [ 80.944731][ T5661] binder: 5661:5659 cannot find target node [ 80.945601][ T5661] binder: 5659:5661 transaction call to 0:0 failed 48/29201/-22, size 112-24 line 3045 [ 80.948559][ T3430] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.976991][ T5665] device syzkaller0 entered promiscuous mode [ 80.987609][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 81.446775][ T5676] loop3: detected capacity change from 0 to 8 [ 81.835703][ T5684] netlink: 'syz.3.427': attribute type 2 has an invalid length. [ 81.837160][ T5684] netlink: 'syz.3.427': attribute type 8 has an invalid length. [ 81.838523][ T5684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.427'. [ 81.870136][ T5686] loop4: detected capacity change from 0 to 8 [ 81.900569][ T5686] SQUASHFS error: zlib decompression failed, data probably corrupt [ 81.909583][ T5686] SQUASHFS error: Failed to read block 0x13e: -5 [ 81.910781][ T5686] SQUASHFS error: Unable to read metadata cache entry [13c] [ 81.919476][ T5686] SQUASHFS error: Unable to read directory block [13c:26] [ 81.957251][ T5693] binder: BINDER_SET_CONTEXT_MGR already set [ 81.958751][ T5693] binder: 5690:5693 ioctl 4018620d 20000040 returned -16 [ 81.960166][ T5693] binder: 5690:5693 got transaction to invalid handle, 1 [ 81.961257][ T5693] binder: 5693:5690 cannot find target node [ 83.514084][ T5722] device syzkaller0 entered promiscuous mode [ 83.878170][ T5729] binder: BINDER_SET_CONTEXT_MGR already set [ 83.879234][ T5729] binder: 5727:5729 ioctl 4018620d 20000040 returned -16 [ 83.883898][ T5729] binder: 5727:5729 got transaction to invalid handle, 1 [ 83.885075][ T5729] binder_debug: 2 callbacks suppressed [ 83.885088][ T5729] binder: 5729:5727 cannot find target node [ 83.905635][ T5729] binder: 5727:5729 transaction call to 0:0 failed 52/29201/-22, size 112-24 line 3045 [ 83.907629][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.940647][ T5732] loop3: detected capacity change from 0 to 8 [ 83.946243][ T5732] SQUASHFS error: zlib decompression failed, data probably corrupt [ 83.947493][ T5732] SQUASHFS error: Failed to read block 0x13e: -5 [ 83.950204][ T5732] SQUASHFS error: Unable to read metadata cache entry [13c] [ 83.954397][ T5732] SQUASHFS error: Unable to read directory block [13c:26] [ 83.955486][ T5734] loop0: detected capacity change from 0 to 8 [ 84.404616][ T5742] netlink: 'syz.0.448': attribute type 2 has an invalid length. [ 84.405672][ T5742] netlink: 'syz.0.448': attribute type 8 has an invalid length. [ 84.406829][ T5742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.448'. [ 84.622432][ T5761] netlink: 52 bytes leftover after parsing attributes in process `syz.2.457'. [ 84.653731][ T5759] loop4: detected capacity change from 0 to 64 [ 84.681225][ T5762] loop2: detected capacity change from 0 to 64 [ 84.992608][ T5765] device syzkaller0 entered promiscuous mode [ 84.999122][ T5767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'. [ 97.121266][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.471'. [ 97.650992][ T5841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.475'. [ 97.710482][ T5842] loop0: detected capacity change from 0 to 64 [ 98.055907][ T5848] loop1: detected capacity change from 0 to 64 [ 98.084503][ T5850] device syzkaller0 entered promiscuous mode [ 109.151463][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 109.236137][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 109.356880][ T5906] loop4: detected capacity change from 0 to 64 [ 109.747339][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.495'. [ 109.925169][ T5929] device syzkaller0 entered promiscuous mode [ 111.031186][ T5951] loop4: detected capacity change from 0 to 64 [ 111.228894][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'. [ 121.589524][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 122.216708][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 122.435016][ T6011] netlink: 108 bytes leftover after parsing attributes in process `syz.3.517'. [ 122.470915][ T6013] device syzkaller0 entered promiscuous mode [ 125.931769][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932831][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.157271][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 135.225274][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 135.370324][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.531'. [ 135.439952][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 136.971341][ T6105] device syzkaller0 entered promiscuous mode [ 137.168893][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 137.776101][ T6137] netlink: 108 bytes leftover after parsing attributes in process `syz.4.545'. [ 148.240300][ T6120] device syzkaller0 entered promiscuous mode [ 152.706470][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.708408][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.709974][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.712158][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.713615][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.714939][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.611571][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 153.612605][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 153.613476][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 153.614390][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 153.615300][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 153.725975][ T4336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.727902][ T4336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.729574][ T4336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.731271][ T4336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.733028][ T4336] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.734178][ T4336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.731476][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 155.781445][ T4336] Bluetooth: hci6: command 0x0409 tx timeout [ 156.812355][ T4336] Bluetooth: hci5: command 0x041b tx timeout [ 157.851397][ T4336] Bluetooth: hci6: command 0x041b tx timeout [ 158.891432][ T4336] Bluetooth: hci5: command 0x040f tx timeout [ 159.363350][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 159.364739][ T6139] bond0: invalid ARP target 0.0.0.0 specified for addition [ 159.365850][ T6139] bond0: option arp_ip_target: invalid value (0) [ 159.501221][ T6186] netlink: 108 bytes leftover after parsing attributes in process `syz.1.556'. [ 159.586127][ T6192] device syzkaller0 entered promiscuous mode [ 159.931418][ T4341] Bluetooth: hci6: command 0x040f tx timeout [ 160.971405][ T4341] Bluetooth: hci5: command 0x0419 tx timeout [ 162.021488][ T4341] Bluetooth: hci6: command 0x0419 tx timeout [ 170.835152][ T6168] chnl_net:caif_netlink_parms(): no params data found [ 170.856334][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.857641][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.859023][ T6168] device bridge_slave_0 entered promiscuous mode [ 170.861004][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.865464][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.866934][ T6168] device bridge_slave_1 entered promiscuous mode [ 171.124692][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 171.139775][ T6168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.203720][ T5621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.210897][ T6168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.227927][ T6168] team0: Port device team_slave_0 added [ 171.229227][ T6220] device syzkaller0 entered promiscuous mode [ 171.238119][ T6168] team0: Port device team_slave_1 added [ 171.371339][ T6228] loop3: detected capacity change from 0 to 128 [ 171.378966][ T6228] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.380833][ T6228] hpfs: filesystem error: improperly stopped [ 171.386793][ T6228] hpfs: You really don't want any checks? You are crazy... [ 171.388911][ T6228] hpfs: hpfs_map_sector(): read error [ 171.389768][ T6228] hpfs: code page support is disabled [ 171.390941][ T6228] hpfs: hpfs_map_4sectors(): unaligned read [ 171.393798][ T6228] hpfs: hpfs_map_4sectors(): unaligned read [ 171.394654][ T6228] hpfs: filesystem error: unable to find root dir [ 171.402997][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.404193][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.407934][ T6168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.418126][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.419308][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.422705][ T6174] device bridge_slave_0 entered promiscuous mode [ 171.438855][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.440066][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.442091][ T6174] device bridge_slave_1 entered promiscuous mode [ 171.446984][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.448128][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.484790][ T6168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.542967][ T6168] device hsr_slave_0 entered promiscuous mode [ 171.585770][ T6168] device hsr_slave_1 entered promiscuous mode [ 171.631473][ T6168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.633633][ T6168] Cannot create hsr debugfs directory [ 171.707586][ T5621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.716265][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.718778][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.758976][ T6174] team0: Port device team_slave_0 added [ 171.808654][ T5621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.833435][ T6174] team0: Port device team_slave_1 added [ 171.848175][ T6241] device syzkaller0 entered promiscuous mode [ 171.858114][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.860862][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.866730][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.779054][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.780095][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.783874][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.844655][ T5621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.883940][ T6282] loop2: detected capacity change from 0 to 128 [ 182.886113][ T6282] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 182.887758][ T6282] hpfs: filesystem error: improperly stopped [ 182.888601][ T6282] hpfs: You really don't want any checks? You are crazy... [ 182.889804][ T6282] hpfs: hpfs_map_sector(): read error [ 182.890862][ T6282] hpfs: code page support is disabled [ 182.893019][ T6174] device hsr_slave_0 entered promiscuous mode [ 182.899509][ T6282] hpfs: hpfs_map_4sectors(): unaligned read [ 182.900698][ T6282] hpfs: hpfs_map_4sectors(): unaligned read [ 182.902005][ T6282] hpfs: filesystem error: unable to find root dir [ 182.949119][ T6174] device hsr_slave_1 entered promiscuous mode [ 183.031628][ T6174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.032907][ T6174] Cannot create hsr debugfs directory [ 183.454730][ T6168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.502989][ T6168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.555517][ T6168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.603941][ T6168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.965319][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.034345][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.035964][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.039555][ T6174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.073976][ T6168] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.123891][ T6174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.172821][ T6174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.215183][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.216858][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.218257][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.219331][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.220524][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.225288][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.227293][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.228465][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.230599][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.233970][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.235822][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.237595][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.239334][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.240963][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.246205][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.247949][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.304256][ T6174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.349069][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.350713][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.450328][ T6324] device syzkaller0 entered promiscuous mode [ 184.461962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.463604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.468030][ T6168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.371851][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372994][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.328726][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.396147][ T6168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.397718][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.398987][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.404026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.405564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.409846][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.417771][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.419622][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.422852][ T235] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.424000][ T235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.427610][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.785481][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.787156][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.788737][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.789851][ T5713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.791205][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.797415][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.801026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.804152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.806130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.809630][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.812376][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.817461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.819185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.825285][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.827131][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.829639][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.968712][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.970635][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.994583][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.996362][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.998000][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.000960][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.009314][ T6168] device veth0_vlan entered promiscuous mode [ 196.412140][ T6417] Bluetooth: MGMT ver 1.22 [ 197.074977][ T6168] device veth1_vlan entered promiscuous mode [ 197.097771][ T6168] device veth0_macvtap entered promiscuous mode [ 197.147536][ T6426] binder: 6425:6426 ioctl c0306201 20000080 returned -14 [ 197.150124][ T6168] device veth1_macvtap entered promiscuous mode [ 197.153967][ T6426] binder: 6425:6426 tried to acquire reference to desc 0, got 1 instead [ 197.155314][ T6426] binder: 6425:6426 ioctl c0306201 200003c0 returned -14 [ 197.182693][ T6426] binder: 6425:6426 not enough space to store 9 fds in buffer [ 197.183934][ T6426] binder: 6426:6425 translate fd array failed [ 197.184968][ T6426] binder: 6425:6426 transaction call to 6425:0 failed 57/29201/-22, size 112-24 line 3486 [ 197.190435][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.197410][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.199077][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.200558][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.206040][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.207407][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.225081][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.837400][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.113891][ T5621] device hsr_slave_0 left promiscuous mode [ 198.182559][ T5621] device hsr_slave_1 left promiscuous mode [ 198.261714][ T5621] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.263881][ T5621] batman_adv: batadv0: Removing interface: dummy0 [ 198.270121][ T5621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.271929][ T5621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.276651][ T5621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.296124][ T5621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.582075][ T5621] device bridge_slave_1 left promiscuous mode [ 198.584124][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.622463][ T5621] device bridge_slave_0 left promiscuous mode [ 198.623673][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.625960][ T6466] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.648461][ T6469] loop2: detected capacity change from 0 to 8 [ 198.771731][ T5621] device veth1_macvtap left promiscuous mode [ 198.772941][ T5621] device veth0_macvtap left promiscuous mode [ 198.774037][ T5621] device veth1_vlan left promiscuous mode [ 198.775052][ T5621] device veth0_vlan left promiscuous mode [ 201.604213][ T5621] team0 (unregistering): Port device team_slave_1 removed [ 201.874385][ T5621] team0 (unregistering): Port device team_slave_0 removed [ 202.282245][ T5621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.482116][ T5621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.942859][ T5621] bond0 (unregistering): Released all slaves [ 204.250097][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.252034][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.253451][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.255022][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.256593][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.258134][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.259600][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.261186][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.267357][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.275350][ T6470] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 204.276624][ T6470] netlink: 'syz.2.609': attribute type 8 has an invalid length. [ 204.277782][ T6470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.609'. [ 204.304330][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.315273][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.403259][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.405508][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.406889][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.408378][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.409773][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.411342][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.425061][ T6513] loop2: detected capacity change from 0 to 40427 [ 204.425735][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.441466][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.443784][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.445507][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.446925][ T6513] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 204.448101][ T6513] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 204.452256][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.457423][ T6168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.458783][ T6168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.460482][ T6513] F2FS-fs (loop2): invalid crc value [ 204.470603][ T6168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.475410][ T6168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.536223][ T6174] device veth0_vlan entered promiscuous mode [ 204.547932][ T6174] device veth1_vlan entered promiscuous mode [ 204.624727][ T6513] F2FS-fs (loop2): Found nat_bits in checkpoint [ 204.651738][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.655367][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.657123][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.658918][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.663923][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.666651][ T6513] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 204.667886][ T6513] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 204.736241][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.740144][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.744087][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.748137][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.752654][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.881447][ T6513] syz.2.618: attempt to access beyond end of device [ 204.881447][ T6513] loop2: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 204.891442][ T6513] syz.2.618: attempt to access beyond end of device [ 204.891442][ T6513] loop2: rw=1, sector=49152, nr_sectors = 2872 limit=40427 [ 204.897516][ T6513] syz.2.618: attempt to access beyond end of device [ 204.897516][ T6513] loop2: rw=1, sector=52024, nr_sectors = 1224 limit=40427 [ 204.904469][ T6513] syz.2.618: attempt to access beyond end of device [ 204.904469][ T6513] loop2: rw=1, sector=57344, nr_sectors = 2048 limit=40427 [ 204.915644][ T6513] syz.2.618: attempt to access beyond end of device [ 204.915644][ T6513] loop2: rw=1, sector=59392, nr_sectors = 3712 limit=40427 [ 204.945153][ T6513] syz.2.618: attempt to access beyond end of device [ 204.945153][ T6513] loop2: rw=1, sector=63104, nr_sectors = 11576 limit=40427 [ 204.960076][ T6513] syz.2.618: attempt to access beyond end of device [ 204.960076][ T6513] loop2: rw=1, sector=74680, nr_sectors = 3144 limit=40427 [ 204.973176][ T6513] syz.2.618: attempt to access beyond end of device [ 204.973176][ T6513] loop2: rw=1, sector=81920, nr_sectors = 3960 limit=40427 [ 205.213079][ T4333] syz-executor: attempt to access beyond end of device [ 205.213079][ T4333] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 205.218311][ T6174] device veth0_macvtap entered promiscuous mode [ 205.220922][ T6174] device veth1_macvtap entered promiscuous mode [ 205.281100][ T5230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.285144][ T5230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.291679][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.297907][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.299495][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.300970][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.321647][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.323195][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.325020][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.326477][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.327911][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.329378][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.367299][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.368609][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.370342][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.372393][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.374001][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.376574][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.389944][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.397905][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.406985][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.415078][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.420434][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.437565][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.439314][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.441073][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.443231][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.445021][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.447817][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.455431][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.457267][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.515770][ T5230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.517124][ T5230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.520079][ T6174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.533338][ T6174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.534772][ T6174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.536147][ T6174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.550536][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.553488][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.556362][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.586384][ T6551] loop2: detected capacity change from 0 to 8 [ 205.695666][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.698538][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.702982][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.711282][ T6555] netlink: 'syz.2.626': attribute type 2 has an invalid length. [ 205.712823][ T6555] netlink: 'syz.2.626': attribute type 8 has an invalid length. [ 205.713884][ T6555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.626'. [ 205.783854][ T5230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.785350][ T5230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.787736][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.845276][ T6566] batman_adv: batadv0: Adding interface: dummy0 [ 205.846472][ T6566] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.850533][ T6566] batman_adv: batadv0: Interface activated: dummy0 [ 205.915193][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.6.554'. [ 206.574017][ T5621] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.125150][ T5621] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.145800][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'. [ 207.533521][ T6615] loop6: detected capacity change from 0 to 2048 [ 207.553646][ T6615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.613005][ T5621] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.678814][ T6627] loop3: detected capacity change from 0 to 64 [ 207.687333][ T6627] hfs: invalid btree extent records [ 207.689725][ T6627] hfs: unable to open extent tree [ 207.714914][ T5621] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.183716][ T6684] loop5: detected capacity change from 0 to 256 [ 210.224364][ T6688] loop1: detected capacity change from 0 to 256 [ 210.228414][ T6688] exfat: Deprecated parameter 'namecase' [ 210.296936][ T6688] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 211.595706][ T6740] binder: 6723:6740 ioctl c0306201 20000080 returned -14 [ 211.830646][ T6747] loop6: detected capacity change from 0 to 1024 [ 213.561349][ T6796] loop3: detected capacity change from 0 to 131072 [ 213.846847][ T6796] F2FS-fs (loop3): invalid crc value [ 213.965630][ T6796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.973467][ T6796] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 213.976194][ T6796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 214.407878][ T6831] loop5: detected capacity change from 0 to 4096 [ 214.456458][ T6831] NILFS (loop5): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 214.458273][ T6831] NILFS (loop5): error -5 getting root inode [ 214.460539][ T6834] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.474964][ T6833] netlink: 'syz.3.678': attribute type 2 has an invalid length. [ 214.476467][ T6833] netlink: 'syz.3.678': attribute type 8 has an invalid length. [ 214.477892][ T6833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.678'. [ 215.148248][ T27] audit: type=1326 audit(216.123:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.152760][ T27] audit: type=1326 audit(216.123:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.228359][ T27] audit: type=1326 audit(216.203:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.232436][ T27] audit: type=1326 audit(216.203:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.240374][ T27] audit: type=1326 audit(216.203:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.272208][ T27] audit: type=1326 audit(216.203:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.279391][ T27] audit: type=1326 audit(216.203:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.289208][ T27] audit: type=1326 audit(216.203:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.331497][ T27] audit: type=1326 audit(216.203:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.335278][ T27] audit: type=1326 audit(216.203:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff9a978f68 code=0x7ffc0000 [ 215.627223][ T6857] loop2: detected capacity change from 0 to 256 [ 215.698838][ T6857] FAT-fs (loop2): Directory bread(block 64) failed [ 215.712165][ T6857] FAT-fs (loop2): Directory bread(block 65) failed [ 215.723675][ T6857] FAT-fs (loop2): Directory bread(block 66) failed [ 215.725357][ T6857] FAT-fs (loop2): Directory bread(block 67) failed [ 215.726486][ T6857] FAT-fs (loop2): Directory bread(block 68) failed [ 215.727516][ T6857] FAT-fs (loop2): Directory bread(block 69) failed [ 215.728582][ T6857] FAT-fs (loop2): Directory bread(block 70) failed [ 215.729564][ T6857] FAT-fs (loop2): Directory bread(block 71) failed [ 215.730599][ T6857] FAT-fs (loop2): Directory bread(block 72) failed [ 215.751532][ T6857] FAT-fs (loop2): Directory bread(block 73) failed [ 216.108807][ T5621] device hsr_slave_0 left promiscuous mode [ 216.207390][ T5621] device hsr_slave_1 left promiscuous mode [ 216.261718][ T5621] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.263152][ T5621] batman_adv: batadv0: Removing interface: dummy0 [ 217.001287][ T5621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.045767][ T5621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.052672][ T5621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.053781][ T5621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.059557][ T5621] device bridge_slave_1 left promiscuous mode [ 217.061436][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.138317][ T6881] loop1: detected capacity change from 0 to 256 [ 217.156129][ T5621] device bridge_slave_0 left promiscuous mode [ 217.157187][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.169621][ T6881] FAT-fs (loop1): Directory bread(block 1285) failed [ 217.179356][ T6881] FAT-fs (loop1): Directory bread(block 1286) failed [ 217.185155][ T6881] FAT-fs (loop1): Directory bread(block 1287) failed [ 217.189826][ T6881] FAT-fs (loop1): Directory bread(block 1288) failed [ 217.208816][ T6881] FAT-fs (loop1): Directory bread(block 1285) failed [ 217.224475][ T6881] FAT-fs (loop1): Directory bread(block 1286) failed [ 217.229082][ T6881] FAT-fs (loop1): Directory bread(block 1287) failed [ 217.241567][ T6881] FAT-fs (loop1): Directory bread(block 1288) failed [ 217.242854][ T6881] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 217.258534][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.259977][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.414379][ T5621] device veth1_macvtap left promiscuous mode [ 217.415551][ T5621] device veth0_macvtap left promiscuous mode [ 217.417023][ T5621] device veth1_vlan left promiscuous mode [ 217.419317][ T5621] device veth0_vlan left promiscuous mode [ 217.590607][ T6894] loop3: detected capacity change from 0 to 64 [ 217.921128][ T6891] loop1: detected capacity change from 0 to 32768 [ 217.927253][ T6891] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 217.970997][ T6361] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 219.366219][ T6904] netlink: 108 bytes leftover after parsing attributes in process `syz.2.701'. [ 220.154100][ T5621] team0 (unregistering): Port device team_slave_1 removed [ 220.325370][ T5621] team0 (unregistering): Port device team_slave_0 removed [ 220.368475][ T6912] loop2: detected capacity change from 0 to 64 [ 220.462602][ T5621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.043364][ T5621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.826475][ T6926] loop2: detected capacity change from 0 to 64 [ 222.761794][ T6932] loop2: detected capacity change from 0 to 4096 [ 222.773715][ T6932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.776055][ T6932] EXT4-fs (loop2): unmounting filesystem. [ 223.082512][ T5621] bond0 (unregistering): Released all slaves [ 223.381664][ T6893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.696'. [ 223.439766][ T6946] loop1: detected capacity change from 0 to 128 [ 223.472797][ T6948] loop5: detected capacity change from 0 to 512 [ 223.477830][ T6946] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.479974][ T6946] hpfs: filesystem error: improperly stopped [ 223.480995][ T6946] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.485369][ T6946] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 223.548667][ T6954] loop3: detected capacity change from 0 to 8 [ 223.692646][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.694523][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.708028][ T6965] loop3: detected capacity change from 0 to 512 [ 223.989071][ T6940] batman_adv: batadv0: Interface deactivated: dummy0 [ 223.996467][ T6965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.056284][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 224.114348][ T6974] loop3: detected capacity change from 0 to 4096 [ 224.120344][ T6974] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 224.250516][ T6979] loop1: detected capacity change from 0 to 64 [ 224.713127][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.729190][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.765816][ T6989] loop6: detected capacity change from 0 to 32768 [ 224.775797][ T6989] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 224.816837][ T6361] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 224.827745][ T6991] loop6: detected capacity change from 0 to 128 [ 224.833260][ T6991] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 224.834948][ T6991] hpfs: filesystem error: improperly stopped [ 224.835793][ T6991] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 224.836958][ T6991] hpfs: You really don't want any checks? You are crazy... [ 224.838071][ T6991] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 224.839210][ T6991] hpfs: code page support is disabled [ 224.848649][ T6991] hpfs: hpfs_map_4sectors(): unaligned read [ 224.851946][ T6991] hpfs: hpfs_map_4sectors(): unaligned read [ 224.852931][ T6991] hpfs: filesystem error: unable to find root dir [ 225.063566][ T6940] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.065244][ T6940] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.066747][ T6940] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.069311][ T6940] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.095352][ T6998] EXT4-fs: Ignoring removed orlov option [ 225.097087][ T6998] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.099573][ T6998] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 225.132542][ T6174] EXT4-fs (loop6): unmounting filesystem. [ 225.156893][ T6995] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 225.194509][ T6362] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 225.588015][ T6978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.727'. [ 225.683843][ T7010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.192114][ T7045] netlink: 'syz.6.746': attribute type 2 has an invalid length. [ 226.318259][ T7052] netlink: 52 bytes leftover after parsing attributes in process `syz.2.747'. [ 226.650850][ T7033] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 227.451593][ T7078] set_capacity_and_notify: 6 callbacks suppressed [ 227.451607][ T7078] loop1: detected capacity change from 0 to 4096 [ 227.515734][ T7090] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.612919][ T7101] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 227.686990][ T7110] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.694657][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.696784][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.747946][ T7177] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 229.221706][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.223392][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.794470][ T7218] loop3: detected capacity change from 0 to 256 [ 229.837787][ T7218] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 229.914670][ T7227] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 230.210902][ T7241] loop3: detected capacity change from 0 to 32768 [ 230.223912][ T7241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.789 (7241) [ 230.243620][ T7241] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.246872][ T7241] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 230.252330][ T7241] BTRFS info (device loop3): setting nodatasum [ 230.256555][ T7241] BTRFS info (device loop3): force zlib compression, level 3 [ 230.259975][ T7241] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 230.267201][ T7241] BTRFS info (device loop3): use lzo compression, level 0 [ 230.272251][ T7241] BTRFS info (device loop3): turning on flush-on-commit [ 230.275852][ T7241] BTRFS info (device loop3): enabling auto defrag [ 230.277564][ T7241] BTRFS info (device loop3): max_inline at 4096 [ 230.279138][ T7241] BTRFS info (device loop3): using free space tree [ 230.297002][ T7253] loop6: detected capacity change from 0 to 2048 [ 230.311314][ T7253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.354937][ T7241] BTRFS info (device loop3): enabling ssd optimizations [ 230.385359][ T7241] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.602466][ T7286] loop5: detected capacity change from 0 to 128 [ 230.608624][ T7286] UBIFS error (pid: 7286): cannot open "/dev/loop5", error -22 [ 230.668503][ T7289] loop1: detected capacity change from 0 to 64 [ 231.825664][ T7328] loop5: detected capacity change from 0 to 4096 [ 231.827874][ T7328] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 231.840174][ T7328] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 231.851188][ T7328] ntfs3: loop5: Inode r=b is not in use! [ 231.853306][ T7328] ntfs3: loop5: Failed to load $Extend. [ 232.145130][ T7357] loop6: detected capacity change from 0 to 512 [ 232.159975][ T7357] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.815: missing EA_INODE flag [ 232.163879][ T7357] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.815: error while reading EA inode 11 err=-117 [ 232.170307][ T7357] EXT4-fs (loop6): 1 orphan inode deleted [ 232.176297][ T7357] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 232.189905][ T7357] tmpfs: Bad value for 'mpol' [ 232.211355][ T6174] EXT4-fs (loop6): unmounting filesystem. [ 232.371732][ T7361] loop3: detected capacity change from 0 to 32768 [ 232.381093][ T7361] XFS (loop3): Mounting V5 Filesystem [ 232.402093][ T7361] XFS (loop3): Ending clean mount [ 232.662851][ T4327] XFS (loop3): Unmounting Filesystem [ 233.303307][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 233.343650][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 233.364694][ T7407] netlink: 104 bytes leftover after parsing attributes in process `syz.6.831'. [ 233.412031][ T7405] loop3: detected capacity change from 0 to 256 [ 233.422482][ T7405] FAT-fs (loop3): Directory bread(block 64) failed [ 233.423606][ T7405] FAT-fs (loop3): Directory bread(block 65) failed [ 233.424725][ T7405] FAT-fs (loop3): Directory bread(block 66) failed [ 233.425741][ T7405] FAT-fs (loop3): Directory bread(block 67) failed [ 233.426676][ T7405] FAT-fs (loop3): Directory bread(block 68) failed [ 233.427741][ T7405] FAT-fs (loop3): Directory bread(block 69) failed [ 233.428824][ T7405] FAT-fs (loop3): Directory bread(block 70) failed [ 233.429780][ T7405] FAT-fs (loop3): Directory bread(block 71) failed [ 233.430689][ T7405] FAT-fs (loop3): Directory bread(block 72) failed [ 233.431597][ T7405] FAT-fs (loop3): Directory bread(block 73) failed [ 233.444579][ T7412] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.446246][ T7412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.008803][ T7420] loop1: detected capacity change from 0 to 32768 [ 234.042354][ T7420] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 234.043654][ T7420] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 234.055550][ T7420] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 234.058714][ T5044] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 234.059936][ T5044] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 234.069906][ T5044] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 9ms [ 234.074316][ T5044] gfs2: fsid=syz:syz.0: jid=0: Done [ 234.075803][ T7420] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 234.146736][ T7420] gfs2: fsid=syz:syz.0: found 1 quota changes [ 234.158429][ T7432] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 234.158429][ T7432] inode = 11 2339 [ 234.158429][ T7432] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 234.162293][ T7432] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 234.358662][ T7432] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7432 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x4e8 [ 234.360602][ T7432] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 234.361919][ T7432] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 234.575999][ T7432] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 234.577803][ T7432] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 234.579208][ T7432] gfs2: fsid=syz:syz.0: File system withdrawn [ 234.580181][ T7432] CPU: 1 PID: 7432 Comm: gfs2_quotad Not tainted syzkaller #0 [ 234.581396][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 234.582970][ T7432] Call trace: [ 234.583531][ T7432] dump_backtrace+0x1c4/0x1f0 [ 234.584331][ T7432] show_stack+0x2c/0x3c [ 234.585000][ T7432] __dump_stack+0x30/0x40 [ 234.585685][ T7432] dump_stack_lvl+0xf4/0x15c [ 234.586450][ T7432] dump_stack+0x1c/0x5c [ 234.587111][ T7432] gfs2_withdraw+0x9f8/0x1244 [ 234.587823][ T7432] gfs2_consist_inode_i+0xf8/0x114 [ 234.588616][ T7432] gfs2_inode_refresh+0x9a0/0xe64 [ 234.589396][ T7432] inode_go_instantiate+0x4c/0x68 [ 234.590131][ T7432] gfs2_instantiate+0x178/0x2b4 [ 234.591128][ T7432] gfs2_glock_wait+0x1b0/0x290 [ 234.591858][ T7432] gfs2_glock_nq+0x8bc/0x11c4 [ 234.592654][ T7432] do_sync+0x414/0xa68 [ 234.593493][ T7432] gfs2_quota_sync+0x2cc/0x4e8 [ 234.594292][ T7432] gfs2_quotad+0x30c/0x520 [ 234.595099][ T7432] kthread+0x254/0x2e0 [ 234.595844][ T7432] ret_from_fork+0x10/0x20 [ 234.610773][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 234.615994][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 234.617250][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 234.618769][ T4328] Call trace: [ 234.619270][ T4328] dump_backtrace+0x1c4/0x1f0 [ 234.619956][ T4328] show_stack+0x2c/0x3c [ 234.620679][ T4328] __dump_stack+0x30/0x40 [ 234.621407][ T4328] dump_stack_lvl+0xf4/0x15c [ 234.622078][ T4328] dump_stack+0x1c/0x5c [ 234.622730][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 234.623601][ T4328] gfs2_quota_cleanup+0x444/0x640 [ 234.624468][ T4328] gfs2_put_super+0x1ec/0x744 [ 234.625178][ T4328] generic_shutdown_super+0x138/0x32c [ 234.626055][ T4328] kill_block_super+0x78/0xe0 [ 234.626872][ T4328] gfs2_kill_sb+0xc4/0xd8 [ 234.627582][ T4328] deactivate_locked_super+0xb4/0x128 [ 234.628469][ T4328] deactivate_super+0xe4/0x104 [ 234.629228][ T4328] cleanup_mnt+0x3a8/0x430 [ 234.629953][ T4328] __cleanup_mnt+0x20/0x30 [ 234.630644][ T4328] task_work_run+0x1f4/0x280 [ 234.631325][ T4328] do_notify_resume+0x20f8/0x2c84 [ 234.632099][ T4328] el0_svc+0x98/0x128 [ 234.632780][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 234.633518][ T4328] el0t_64_sync+0x18c/0x190 [ 234.737853][ T7446] netlink: 104 bytes leftover after parsing attributes in process `syz.1.842'. [ 234.744437][ T7444] loop6: detected capacity change from 0 to 256 [ 234.760796][ T7444] FAT-fs (loop6): Directory bread(block 64) failed [ 234.762057][ T7444] FAT-fs (loop6): Directory bread(block 65) failed [ 234.763116][ T7444] FAT-fs (loop6): Directory bread(block 66) failed [ 234.764193][ T7444] FAT-fs (loop6): Directory bread(block 67) failed [ 234.765232][ T7444] FAT-fs (loop6): Directory bread(block 68) failed [ 234.766217][ T7444] FAT-fs (loop6): Directory bread(block 69) failed [ 234.767302][ T7444] FAT-fs (loop6): Directory bread(block 70) failed [ 234.768263][ T7444] FAT-fs (loop6): Directory bread(block 71) failed [ 234.769290][ T7444] FAT-fs (loop6): Directory bread(block 72) failed [ 234.770326][ T7444] FAT-fs (loop6): Directory bread(block 73) failed [ 234.829069][ T7452] device syzkaller1 entered promiscuous mode [ 234.890702][ T7456] loop1: detected capacity change from 0 to 1024 [ 235.128463][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 235.230144][ T7472] netlink: 104 bytes leftover after parsing attributes in process `syz.6.855'. [ 235.363127][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.374269][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.401891][ T7491] loop1: detected capacity change from 0 to 256 [ 235.442748][ T7491] FAT-fs (loop1): Directory bread(block 64) failed [ 235.444023][ T7491] FAT-fs (loop1): Directory bread(block 65) failed [ 235.445305][ T7491] FAT-fs (loop1): Directory bread(block 66) failed [ 235.446526][ T7491] FAT-fs (loop1): Directory bread(block 67) failed [ 235.447590][ T7491] FAT-fs (loop1): Directory bread(block 68) failed [ 235.448693][ T7491] FAT-fs (loop1): Directory bread(block 69) failed [ 235.449787][ T7491] FAT-fs (loop1): Directory bread(block 70) failed [ 235.450710][ T7491] FAT-fs (loop1): Directory bread(block 71) failed [ 235.451961][ T7491] FAT-fs (loop1): Directory bread(block 72) failed [ 235.453099][ T7491] FAT-fs (loop1): Directory bread(block 73) failed [ 235.889978][ T7502] loop2: detected capacity change from 0 to 512 [ 236.187076][ T7511] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 236.276348][ T7519] loop1: detected capacity change from 0 to 4096 [ 236.303547][ T7527] device syzkaller0 entered promiscuous mode [ 236.312951][ T7531] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.447783][ T7542] netlink: 104 bytes leftover after parsing attributes in process `syz.1.871'. [ 237.840875][ T7563] loop3: detected capacity change from 0 to 256 [ 237.848747][ T7563] FAT-fs (loop3): Directory bread(block 64) failed [ 237.850010][ T7563] FAT-fs (loop3): Directory bread(block 65) failed [ 237.851094][ T7563] FAT-fs (loop3): Directory bread(block 66) failed [ 237.852221][ T7563] FAT-fs (loop3): Directory bread(block 67) failed [ 237.853314][ T7563] FAT-fs (loop3): Directory bread(block 68) failed [ 237.854363][ T7563] FAT-fs (loop3): Directory bread(block 69) failed [ 237.855416][ T7563] FAT-fs (loop3): Directory bread(block 70) failed [ 237.856536][ T7563] FAT-fs (loop3): Directory bread(block 71) failed [ 237.857806][ T7563] FAT-fs (loop3): Directory bread(block 72) failed [ 237.858853][ T7563] FAT-fs (loop3): Directory bread(block 73) failed [ 238.455844][ T7573] loop5: detected capacity change from 0 to 512 [ 240.421007][ T7591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 240.422600][ T7591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.224812][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.226187][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.433143][ T7607] loop3: detected capacity change from 0 to 256 [ 245.442309][ T7607] FAT-fs (loop3): Directory bread(block 64) failed [ 245.443421][ T7607] FAT-fs (loop3): Directory bread(block 65) failed [ 245.444558][ T7607] FAT-fs (loop3): Directory bread(block 66) failed [ 245.445583][ T7607] FAT-fs (loop3): Directory bread(block 67) failed [ 245.446589][ T7607] FAT-fs (loop3): Directory bread(block 68) failed [ 245.447611][ T7607] FAT-fs (loop3): Directory bread(block 69) failed [ 245.448693][ T7607] FAT-fs (loop3): Directory bread(block 70) failed [ 245.449687][ T7607] FAT-fs (loop3): Directory bread(block 71) failed [ 245.450671][ T7607] FAT-fs (loop3): Directory bread(block 72) failed [ 245.451805][ T7607] FAT-fs (loop3): Directory bread(block 73) failed [ 246.151591][ T7609] loop3: detected capacity change from 0 to 512 [ 247.136869][ T7617] loop3: detected capacity change from 0 to 2048 [ 247.149361][ T7618] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.163695][ T7617] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 247.172944][ T7617] Remounting filesystem read-only [ 247.295662][ T7623] loop3: detected capacity change from 0 to 512 [ 247.297168][ T7623] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.318097][ T7623] syz.3.896: attempt to access beyond end of device [ 247.318097][ T7623] loop3: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 247.320398][ T7623] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 247.322795][ T7623] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 247.442255][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.444202][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.811813][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.812999][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.950313][ T7711] device syzkaller0 entered promiscuous mode [ 250.044905][ T7717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.913'. [ 251.873932][ T7743] loop6: detected capacity change from 0 to 164 [ 251.887088][ T7743] isofs: isofs_export_get_parent(): child directory not normalized! [ 262.515009][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.524276][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.524436][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.525570][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.535509][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.536844][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.615094][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.616536][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.626292][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.628639][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.982846][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.987974][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.993922][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.996711][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.000124][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.002845][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.006067][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.008405][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.182011][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.183666][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.194093][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.195631][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.386777][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.388259][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.400095][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.403178][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.599002][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.600544][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.604759][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.606160][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.471579][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.477856][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.088378][ T7432] ================================================================== [ 265.089732][ T7432] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6634 [ 265.090912][ T7432] Read of size 8 at addr ffff0000df708bb0 by task gfs2_quotad/7432 [ 265.092162][ T7432] [ 265.092552][ T7432] CPU: 1 PID: 7432 Comm: gfs2_quotad Not tainted syzkaller #0 [ 265.093799][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 265.095374][ T7432] Call trace: [ 265.095869][ T7432] dump_backtrace+0x1c4/0x1f0 [ 265.096665][ T7432] show_stack+0x2c/0x3c [ 265.097430][ T7432] __dump_stack+0x30/0x40 [ 265.098134][ T7432] dump_stack_lvl+0xf4/0x15c [ 265.098856][ T7432] print_address_description+0x88/0x218 [ 265.099736][ T7432] print_report+0x50/0x68 [ 265.100448][ T7432] kasan_report+0xa8/0xfc [ 265.101038][ T7865] loop6: detected capacity change from 0 to 32768 [ 265.101139][ T7432] __asan_report_load8_noabort+0x2c/0x38 [ 265.103278][ T7432] __lock_acquire+0x104/0x6634 [ 265.104012][ T7432] lock_acquire+0x20c/0x638 [ 265.104720][ T7432] _raw_spin_lock_irqsave+0x6c/0xb0 [ 265.105551][ T7432] finish_wait+0xc8/0x1ac [ 265.106226][ T7432] gfs2_quotad+0x3c4/0x520 [ 265.106993][ T7432] kthread+0x254/0x2e0 [ 265.107626][ T7432] ret_from_fork+0x10/0x20 [ 265.108360][ T7432] [ 265.108754][ T7432] Allocated by task 7623: [ 265.109480][ T7432] kasan_set_track+0x4c/0x80 [ 265.110235][ T7432] kasan_save_alloc_info+0x24/0x30 [ 265.111005][ T7432] __kasan_kmalloc+0xa0/0xb8 [ 265.111873][ T7432] kmalloc_trace+0x7c/0x94 [ 265.112589][ T7432] fat_fill_super+0x12c/0x3d24 [ 265.113416][ T7432] vfat_fill_super+0x40/0x54 [ 265.114124][ T7432] mount_bdev+0x264/0x35c [ 265.114857][ T7432] vfat_mount+0x44/0x58 [ 265.115582][ T7432] legacy_get_tree+0xd8/0x174 [ 265.116351][ T7432] vfs_get_tree+0x90/0x278 [ 265.117074][ T7432] do_new_mount+0x228/0x804 [ 265.117877][ T7432] path_mount+0x5ac/0xe6c [ 265.118601][ T7432] __arm64_sys_mount+0x4a0/0x5a0 [ 265.119405][ T7432] invoke_syscall+0x98/0x290 [ 265.120233][ T7432] el0_svc_common+0x13c/0x258 [ 265.121029][ T7432] do_el0_svc+0x5c/0x134 [ 265.121716][ T7432] el0_svc+0x58/0x128 [ 265.122436][ T7432] el0t_64_sync_handler+0x84/0xf0 [ 265.123288][ T7432] el0t_64_sync+0x18c/0x190 [ 265.124090][ T7432] [ 265.124446][ T7432] Last potentially related work creation: [ 265.125369][ T7432] kasan_save_stack+0x40/0x70 [ 265.126134][ T7432] __kasan_record_aux_stack+0xc0/0xdc [ 265.127030][ T7432] kasan_record_aux_stack_noalloc+0x14/0x20 [ 265.127951][ T7432] call_rcu+0x104/0x958 [ 265.128587][ T7432] fat_put_super+0xa4/0xb8 [ 265.129219][ T7432] generic_shutdown_super+0x138/0x32c [ 265.130127][ T7432] kill_block_super+0x78/0xe0 [ 265.130887][ T7432] deactivate_locked_super+0xb4/0x128 [ 265.131727][ T7432] deactivate_super+0xe4/0x104 [ 265.132575][ T7432] cleanup_mnt+0x3a8/0x430 [ 265.133310][ T7432] __cleanup_mnt+0x20/0x30 [ 265.133991][ T7432] task_work_run+0x1f4/0x280 [ 265.134795][ T7432] do_notify_resume+0x20f8/0x2c84 [ 265.135551][ T7432] el0_svc+0x98/0x128 [ 265.136227][ T7432] el0t_64_sync_handler+0x84/0xf0 [ 265.137072][ T7432] el0t_64_sync+0x18c/0x190 [ 265.137842][ T7432] [ 265.138191][ T7432] The buggy address belongs to the object at ffff0000df708000 [ 265.138191][ T7432] which belongs to the cache kmalloc-8k of size 8192 [ 265.140330][ T7432] The buggy address is located 2992 bytes inside of [ 265.140330][ T7432] 8192-byte region [ffff0000df708000, ffff0000df70a000) [ 265.142481][ T7432] [ 265.142869][ T7432] The buggy address belongs to the physical page: [ 265.143885][ T7432] page:00000000ee091d36 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000df708000 pfn:0x11f708 [ 265.145694][ T7432] head:00000000ee091d36 order:3 compound_mapcount:0 compound_pincount:0 [ 265.147007][ T7432] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 265.148314][ T7432] raw: 05ffc00000010200 fffffc000370d200 dead000000000003 ffff0000c0002c00 [ 265.149657][ T7432] raw: ffff0000df708000 0000000080020000 00000001ffffffff 0000000000000000 [ 265.150977][ T7432] page dumped because: kasan: bad access detected [ 265.151979][ T7432] [ 265.152337][ T7432] Memory state around the buggy address: [ 265.153197][ T7432] ffff0000df708a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.154416][ T7432] ffff0000df708b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.155693][ T7432] >ffff0000df708b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.156902][ T7432] ^ [ 265.157768][ T7432] ffff0000df708c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.158960][ T7432] ffff0000df708c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.160182][ T7432] ================================================================== [ 265.161571][ T7432] Disabling lock debugging due to kernel taint [ 265.162508][ T7432] INFO: trying to register non-static key. [ 265.163477][ T7432] The code is fine but needs lockdep annotation, or maybe [ 265.164573][ T7432] you didn't initialize this object before use? [ 265.165554][ T7432] turning off the locking correctness validator. [ 265.166559][ T7432] CPU: 1 PID: 7432 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 265.167850][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 265.169355][ T7432] Call trace: [ 265.169864][ T7432] dump_backtrace+0x1c4/0x1f0 [ 265.170585][ T7432] show_stack+0x2c/0x3c [ 265.171233][ T7432] __dump_stack+0x30/0x40 [ 265.171929][ T7432] dump_stack_lvl+0xf4/0x15c [ 265.172583][ T7432] dump_stack+0x1c/0x5c [ 265.173245][ T7432] assign_lock_key+0x230/0x264 [ 265.174047][ T7432] register_lock_class+0x1ac/0x690 [ 265.174986][ T7432] __lock_acquire+0x164/0x6634 [ 265.175791][ T7432] lock_acquire+0x20c/0x638 [ 265.176574][ T7432] _raw_spin_lock_irqsave+0x6c/0xb0 [ 265.177493][ T7432] finish_wait+0xc8/0x1ac [ 265.178199][ T7432] gfs2_quotad+0x3c4/0x520 [ 265.178878][ T7432] kthread+0x254/0x2e0 [ 265.179520][ T7432] ret_from_fork+0x10/0x20 [ 265.180237][ T7432] list_del corruption. prev->next should be ffff8000215b7d98, but was 0000000000000000. (prev=ffff0000df708bd8) [ 265.182244][ T7432] ------------[ cut here ]------------ [ 265.183135][ T7432] kernel BUG at lib/list_debug.c:61! [ 265.184004][ T7432] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 265.185249][ T7432] Modules linked in: [ 265.185844][ T7432] CPU: 1 PID: 7432 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 265.187270][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 265.188961][ T7432] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 265.190248][ T7432] pc : __list_del_entry_valid+0x140/0x15c [ 265.191181][ T7432] lr : __list_del_entry_valid+0x140/0x15c [ 265.192146][ T7432] sp : ffff8000215b7c70 [ 265.192772][ T7432] x29: ffff8000215b7c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 265.193983][ T7432] x26: 0000000000000bb8 x25: 0000000000001770 x24: ffff8000215b7d98 [ 265.195412][ T7432] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000df708bd8 [ 265.196755][ T7432] x20: ffff0000df708bd8 x19: ffff8000215b7d98 x18: 1fffe00033e7697e [ 265.198158][ T7432] x17: 20747562202c3839 x16: ffff800011b8ee98 x15: 3038666666662065 [ 265.199463][ T7432] x14: 0000000000000001 x13: 1fffe00033e769a3 x12: 0000000000000000 [ 265.200724][ T7432] x11: ff00800008315174 x10: 0000000000000000 x9 : ca4de52dcd378400 [ 265.202024][ T7432] x8 : ca4de52dcd378400 x7 : 0000000000000001 x6 : 0000000000000001 [ 265.203264][ T7432] x5 : ffff8000215b7738 x4 : ffff800015464e60 x3 : ffff800008540378 [ 265.204562][ T7432] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 265.205851][ T7432] Call trace: [ 265.206369][ T7432] __list_del_entry_valid+0x140/0x15c [ 265.207176][ T7432] finish_wait+0xd4/0x1ac [ 265.207828][ T7432] gfs2_quotad+0x3c4/0x520 [ 265.208522][ T7432] kthread+0x254/0x2e0 [ 265.209285][ T7432] ret_from_fork+0x10/0x20 [ 265.210024][ T7432] Code: 911c0000 aa1303e1 aa1503e3 95c505ca (d4210000) [ 265.211130][ T7432] ---[ end trace 0000000000000000 ]--- [ 265.488003][ T7432] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 265.489107][ T7432] SMP: stopping secondary CPUs [ 265.489882][ T7432] Kernel Offset: disabled [ 265.490623][ T7432] CPU features: 0x0a0000,000f0097,a65bfea7 [ 265.491529][ T7432] Memory Limit: none [ 265.750069][ T7432] Rebooting in 86400 seconds..