last executing test programs: 4.709900082s ago: executing program 3 (id=1168): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2(&(0x7f0000000040), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(r3, 0x26, 0x0) 4.169154805s ago: executing program 2 (id=1176): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2(&(0x7f0000000040), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(r1, 0x26, 0x0) 4.041777405s ago: executing program 2 (id=1177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.944904103s ago: executing program 2 (id=1178): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fusebl\x01\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='#-!-U^-\'\\\x00', &(0x7f0000000680)=':!:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x04', &(0x7f0000000080)='&k\xa4\x89\x04\x94\xa8\xc5b\x18/)\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\x1c@\\\x00\xd8\x91\xc6\x90\x06cFg\x9dCQt U\xd2\xca\x8e\x1c\xe4\xb8\xa2\xb7\xaf\xeci_\x0e\xf6\xdf\xa7\xf7\x8d\xd0\xab\x02\xc0\xcf\xcaf8\xa2\xf6\x92\x92\x7fu\x93m*U(=\xf5\xa2\x94G7K$\xdbmq\xa0>\xf7\xd5\a\xf7n\xf9\xe0\xc4\xf7\xd7\xdd\x82N\x84#&\xb5g\xd4W\xd4\x03\xef\x19\x00d\x1a\x7f-\v\xa3w\x03h\x9f\\\xa2b\xabS`\xf7\xb5\x94\x89\xd7\xbe:\xe6\x8d\x94\xd47\x068\xd3\xeaA\x1d\xe0I$\xc87\xfc\"\xde\"\x15\x9c\x1c\xbb\xbdDM\xc7\xf2\xddN\'\x94g\xec\xcc\xb3\xbbb\x86\x1b\x8c]6r\vm\x1f\xc3%\x10 \xe3\xb4\xd9\x1a\x91\x05\xcd\xeapJ\xfd\xb1\v\xb2\xa1I\xc9\x11c\xdap\xe5\xe8&A\xe1~O\xaen\x1b\xae\x1b\x12\xc2\n\x1d\xb8\x16\x82\x0f\x15i\xf4\xf4\xa0;H\xab\x8f\xc5\xdc\x00\xc9kI\x8d\xb4\xdc\x82o\xf9c(\xbe\xcd|#\xa2\xc4# O\b\xce\xcf\xb4\x1d\x03\xea9\x05\x90gA\x81\xa5\xb2r\x8eY\x10\x9140U\xb2\a0\x9a\x9f0{\xffF\xc5\x89\x0eK$AFt\xdd\xf8\xa6!S \xabB\xa5\xcc\xe9\xb4W~(eq\xe52\x0f`\xc0#\x8b\x99\xf2\xf1j\x81\xd4\xa6\x88kK\xf1\xe7\x90\x13!H\x1e4a\x1a\x15\xd9\xe91\xe2j_-F\x1c\xff\xff\xe7\xd7V^v\xc0\x84s\xb4\xb9v\xd7\x8d\xe2\x81;\xcf\x16IyI3W\xc5hM^\xf9\xcf\x81\xf6\xa9^4\xb3\x7f*\xfa\xd4M\xa5\xd4\xa2\xb9Q8\xaca\xbaXf\xeb\x00l\xb6\x01\x8c=JQ\xdb\xc7\x92\xf6\xd5:\xc2\xf4\x81\t\x95\a\x84\x85\x1e\x8fO\x8e\x13\x8f6\x19Bi\xa5\xf5\xc2\x81\x9c\x01\x00\x11\xcf\xe4:S\x93', &(0x7f00000002c0)='\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='Quseblk\x00', &(0x7f0000000c00)='\f\x1e\xe5\x8c\xa4k&U[\xa1\xba\x90\xda\x16E\xff\xf9\x8dH\xb2\xf8\x06V\x03q^\x88\x1b\xd02\xf7\x18\xef\xcd\x8a\x16\x03M\xdcz\xaa]e\xe7\x9e:\xab\xdbj\xf0\x94)\xd1\xfcq\x97\x90 T\xba\xa2\xe5zZy\'*d\xa6\xe07\x9b\xd8`\xe3\xc7\xa4\x19%L\xf4&\x90\xcf\x85\x01\xf0b\x13v\x1e\x15\xad\x9e\x12\x97%)u\xe3\xc9DN\x99p\xf7\x86\x95\xc6\xd7\x8b>v\xf2\xf5W\x89Fi\x8ex\xaa\xb6GMh\x1c\xf9* \xf8\xa3c\xbc#D1\t(gH>D\xaa\x86\x0f\x9c\x97u\xd1\xcc\xd2\xc1\xd6&c\xf4sI\xf0\x99\x0fd5\xd2\x0e9\xf2\xc3\xdc\x80\xd9\rD\x11%3\xd7\r*N\x18\xb7\xd1\xd4\xa5\x87\x818\xcf\xb7\xaeq=5@>\xd1\xe67\x18\x03\xce:1\x114\f\x97\xd0\xee\x18\xffl4T\xf1\t\x98\x8c\x90\xfb\x8d\x10}=\x00\xd4yn\xbe\xc6\tlT\xbd)wRz,X\xd0\xee5\xe1Q\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) read(r0, 0x0, 0x0) close(r0) 3.878992918s ago: executing program 2 (id=1179): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 3.576146493s ago: executing program 0 (id=1180): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 3.368129359s ago: executing program 3 (id=1181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x6, 0x0, @tick, {}, {}, @raw32}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 3.225234061s ago: executing program 4 (id=1184): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x8000000003c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000700)=ANY=[], 0x0) 3.186610434s ago: executing program 4 (id=1186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) 2.726102181s ago: executing program 0 (id=1187): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2(&(0x7f0000000040), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(r1, 0x26, 0x0) 2.602547451s ago: executing program 0 (id=1189): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fusebl\x01\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='#-!-U^-\'\\\x00', &(0x7f0000000680)=':!:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x04', &(0x7f0000000080)='&k\xa4\x89\x04\x94\xa8\xc5b\x18/)\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\x1c@\\\x00\xd8\x91\xc6\x90\x06cFg\x9dCQt U\xd2\xca\x8e\x1c\xe4\xb8\xa2\xb7\xaf\xeci_\x0e\xf6\xdf\xa7\xf7\x8d\xd0\xab\x02\xc0\xcf\xcaf8\xa2\xf6\x92\x92\x7fu\x93m*U(=\xf5\xa2\x94G7K$\xdbmq\xa0>\xf7\xd5\a\xf7n\xf9\xe0\xc4\xf7\xd7\xdd\x82N\x84#&\xb5g\xd4W\xd4\x03\xef\x19\x00d\x1a\x7f-\v\xa3w\x03h\x9f\\\xa2b\xabS`\xf7\xb5\x94\x89\xd7\xbe:\xe6\x8d\x94\xd47\x068\xd3\xeaA\x1d\xe0I$\xc87\xfc\"\xde\"\x15\x9c\x1c\xbb\xbdDM\xc7\xf2\xddN\'\x94g\xec\xcc\xb3\xbbb\x86\x1b\x8c]6r\vm\x1f\xc3%\x10 \xe3\xb4\xd9\x1a\x91\x05\xcd\xeapJ\xfd\xb1\v\xb2\xa1I\xc9\x11c\xdap\xe5\xe8&A\xe1~O\xaen\x1b\xae\x1b\x12\xc2\n\x1d\xb8\x16\x82\x0f\x15i\xf4\xf4\xa0;H\xab\x8f\xc5\xdc\x00\xc9kI\x8d\xb4\xdc\x82o\xf9c(\xbe\xcd|#\xa2\xc4# O\b\xce\xcf\xb4\x1d\x03\xea9\x05\x90gA\x81\xa5\xb2r\x8eY\x10\x9140U\xb2\a0\x9a\x9f0{\xffF\xc5\x89\x0eK$AFt\xdd\xf8\xa6!S \xabB\xa5\xcc\xe9\xb4W~(eq\xe52\x0f`\xc0#\x8b\x99\xf2\xf1j\x81\xd4\xa6\x88kK\xf1\xe7\x90\x13!H\x1e4a\x1a\x15\xd9\xe91\xe2j_-F\x1c\xff\xff\xe7\xd7V^v\xc0\x84s\xb4\xb9v\xd7\x8d\xe2\x81;\xcf\x16IyI3W\xc5hM^\xf9\xcf\x81\xf6\xa9^4\xb3\x7f*\xfa\xd4M\xa5\xd4\xa2\xb9Q8\xaca\xbaXf\xeb\x00l\xb6\x01\x8c=JQ\xdb\xc7\x92\xf6\xd5:\xc2\xf4\x81\t\x95\a\x84\x85\x1e\x8fO\x8e\x13\x8f6\x19Bi\xa5\xf5\xc2\x81\x9c\x01\x00\x11\xcf\xe4:S\x93', &(0x7f00000002c0)='\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='Quseblk\x00', &(0x7f0000000c00)='\f\x1e\xe5\x8c\xa4k&U[\xa1\xba\x90\xda\x16E\xff\xf9\x8dH\xb2\xf8\x06V\x03q^\x88\x1b\xd02\xf7\x18\xef\xcd\x8a\x16\x03M\xdcz\xaa]e\xe7\x9e:\xab\xdbj\xf0\x94)\xd1\xfcq\x97\x90 T\xba\xa2\xe5zZy\'*d\xa6\xe07\x9b\xd8`\xe3\xc7\xa4\x19%L\xf4&\x90\xcf\x85\x01\xf0b\x13v\x1e\x15\xad\x9e\x12\x97%)u\xe3\xc9DN\x99p\xf7\x86\x95\xc6\xd7\x8b>v\xf2\xf5W\x89Fi\x8ex\xaa\xb6GMh\x1c\xf9* \xf8\xa3c\xbc#D1\t(gH>D\xaa\x86\x0f\x9c\x97u\xd1\xcc\xd2\xc1\xd6&c\xf4sI\xf0\x99\x0fd5\xd2\x0e9\xf2\xc3\xdc\x80\xd9\rD\x11%3\xd7\r*N\x18\xb7\xd1\xd4\xa5\x87\x818\xcf\xb7\xaeq=5@>\xd1\xe67\x18\x03\xce:1\x114\f\x97\xd0\xee\x18\xffl4T\xf1\t\x98\x8c\x90\xfb\x8d\x10}=\x00\xd4yn\xbe\xc6\tlT\xbd)wRz,X\xd0\xee5\xe1Q\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) read(r0, 0x0, 0x0) close(r0) 2.574874633s ago: executing program 1 (id=1190): shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) dup3(r3, r4, 0x0) 2.556946945s ago: executing program 0 (id=1191): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2(&(0x7f0000000040), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(r3, 0x26, 0x0) 2.399395647s ago: executing program 3 (id=1192): shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) dup3(r3, r4, 0x0) 2.301023325s ago: executing program 4 (id=1193): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14088eb406397b78089e5ad87f63f5c9241e6379219aa32fb19fbe2d4f0346a7a9c152b1222bff7e0b62c18a6e9ad18de4a35ac260e480b8f8a3209218f60722", 0x40, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2.201580403s ago: executing program 2 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.715108692s ago: executing program 1 (id=1195): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.631825409s ago: executing program 1 (id=1196): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.551813735s ago: executing program 1 (id=1197): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 1.059334305s ago: executing program 3 (id=1198): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 965.551882ms ago: executing program 0 (id=1199): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2(&(0x7f0000000040), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(r3, 0x26, 0x0) 933.338505ms ago: executing program 4 (id=1200): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2(&(0x7f0000000040), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(r1, 0x26, 0x0) 533.046037ms ago: executing program 4 (id=1201): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fusebl\x01\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='#-!-U^-\'\\\x00', &(0x7f0000000680)=':!:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x04', &(0x7f0000000080)='&k\xa4\x89\x04\x94\xa8\xc5b\x18/)\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\x1c@\\\x00\xd8\x91\xc6\x90\x06cFg\x9dCQt U\xd2\xca\x8e\x1c\xe4\xb8\xa2\xb7\xaf\xeci_\x0e\xf6\xdf\xa7\xf7\x8d\xd0\xab\x02\xc0\xcf\xcaf8\xa2\xf6\x92\x92\x7fu\x93m*U(=\xf5\xa2\x94G7K$\xdbmq\xa0>\xf7\xd5\a\xf7n\xf9\xe0\xc4\xf7\xd7\xdd\x82N\x84#&\xb5g\xd4W\xd4\x03\xef\x19\x00d\x1a\x7f-\v\xa3w\x03h\x9f\\\xa2b\xabS`\xf7\xb5\x94\x89\xd7\xbe:\xe6\x8d\x94\xd47\x068\xd3\xeaA\x1d\xe0I$\xc87\xfc\"\xde\"\x15\x9c\x1c\xbb\xbdDM\xc7\xf2\xddN\'\x94g\xec\xcc\xb3\xbbb\x86\x1b\x8c]6r\vm\x1f\xc3%\x10 \xe3\xb4\xd9\x1a\x91\x05\xcd\xeapJ\xfd\xb1\v\xb2\xa1I\xc9\x11c\xdap\xe5\xe8&A\xe1~O\xaen\x1b\xae\x1b\x12\xc2\n\x1d\xb8\x16\x82\x0f\x15i\xf4\xf4\xa0;H\xab\x8f\xc5\xdc\x00\xc9kI\x8d\xb4\xdc\x82o\xf9c(\xbe\xcd|#\xa2\xc4# O\b\xce\xcf\xb4\x1d\x03\xea9\x05\x90gA\x81\xa5\xb2r\x8eY\x10\x9140U\xb2\a0\x9a\x9f0{\xffF\xc5\x89\x0eK$AFt\xdd\xf8\xa6!S \xabB\xa5\xcc\xe9\xb4W~(eq\xe52\x0f`\xc0#\x8b\x99\xf2\xf1j\x81\xd4\xa6\x88kK\xf1\xe7\x90\x13!H\x1e4a\x1a\x15\xd9\xe91\xe2j_-F\x1c\xff\xff\xe7\xd7V^v\xc0\x84s\xb4\xb9v\xd7\x8d\xe2\x81;\xcf\x16IyI3W\xc5hM^\xf9\xcf\x81\xf6\xa9^4\xb3\x7f*\xfa\xd4M\xa5\xd4\xa2\xb9Q8\xaca\xbaXf\xeb\x00l\xb6\x01\x8c=JQ\xdb\xc7\x92\xf6\xd5:\xc2\xf4\x81\t\x95\a\x84\x85\x1e\x8fO\x8e\x13\x8f6\x19Bi\xa5\xf5\xc2\x81\x9c\x01\x00\x11\xcf\xe4:S\x93', &(0x7f00000002c0)='\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='Quseblk\x00', &(0x7f0000000c00)='\f\x1e\xe5\x8c\xa4k&U[\xa1\xba\x90\xda\x16E\xff\xf9\x8dH\xb2\xf8\x06V\x03q^\x88\x1b\xd02\xf7\x18\xef\xcd\x8a\x16\x03M\xdcz\xaa]e\xe7\x9e:\xab\xdbj\xf0\x94)\xd1\xfcq\x97\x90 T\xba\xa2\xe5zZy\'*d\xa6\xe07\x9b\xd8`\xe3\xc7\xa4\x19%L\xf4&\x90\xcf\x85\x01\xf0b\x13v\x1e\x15\xad\x9e\x12\x97%)u\xe3\xc9DN\x99p\xf7\x86\x95\xc6\xd7\x8b>v\xf2\xf5W\x89Fi\x8ex\xaa\xb6GMh\x1c\xf9* \xf8\xa3c\xbc#D1\t(gH>D\xaa\x86\x0f\x9c\x97u\xd1\xcc\xd2\xc1\xd6&c\xf4sI\xf0\x99\x0fd5\xd2\x0e9\xf2\xc3\xdc\x80\xd9\rD\x11%3\xd7\r*N\x18\xb7\xd1\xd4\xa5\x87\x818\xcf\xb7\xaeq=5@>\xd1\xe67\x18\x03\xce:1\x114\f\x97\xd0\xee\x18\xffl4T\xf1\t\x98\x8c\x90\xfb\x8d\x10}=\x00\xd4yn\xbe\xc6\tlT\xbd)wRz,X\xd0\xee5\xe1Q\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) read(r0, 0x0, 0x0) close(r0) 532.056387ms ago: executing program 1 (id=1202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 507.677209ms ago: executing program 1 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x6, 0x0, @tick, {}, {}, @raw32}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 431.315815ms ago: executing program 2 (id=1204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) 431.010615ms ago: executing program 4 (id=1205): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 40.620567ms ago: executing program 3 (id=1206): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 32.796417ms ago: executing program 0 (id=1207): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 0s ago: executing program 3 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 36.337360][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.338875][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.340299][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.341380][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.354559][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.356165][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.357764][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.362620][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.368829][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.370527][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.371936][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.378292][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.381017][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.382697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.385404][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.387395][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.388866][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.390418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.391979][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.395653][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.398357][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.399908][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.401406][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.402524][ T1712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.405379][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.407484][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.409150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.414604][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.416284][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.417813][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.419347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.420767][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.421852][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.423513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.428837][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.430886][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.432464][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.435340][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.436495][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.442335][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.447382][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.449038][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.450575][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.452095][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.453260][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.459734][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.461456][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.468238][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.471749][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.474100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.481684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.483658][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.485251][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.486673][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.488181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.489661][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.491108][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.496390][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.501565][ T4054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.506238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.507716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.509098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.510642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.519526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.521037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.522529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.524562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.531910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.536826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.538389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.540662][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.553222][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.554816][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.556141][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.558320][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.575964][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.586415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.587727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.588968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.590628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.593648][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.600751][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.602369][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.608018][ T4052] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.618378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.619905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.621330][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.622408][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.624270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.625965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.627392][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.628555][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.629933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.646779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.648211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.649837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.651810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.654553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.656121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.657626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.659222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.660761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.662144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.665498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.669881][ T4054] device veth0_vlan entered promiscuous mode [ 36.679800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.681065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.682259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.684529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.687012][ T4054] device veth1_vlan entered promiscuous mode [ 36.690687][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.692168][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.694535][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.695722][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.697273][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.701068][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.707570][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.712497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.714724][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.716264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.722238][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.723816][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.726170][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.736114][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.737525][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.738951][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.740530][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.750163][ T4044] device veth0_vlan entered promiscuous mode [ 36.757771][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.759356][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.760989][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.762279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.770191][ T4045] device veth0_vlan entered promiscuous mode [ 36.778124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.779683][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.782379][ T4054] device veth0_macvtap entered promiscuous mode [ 36.785996][ T4044] device veth1_vlan entered promiscuous mode [ 36.789983][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.791499][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.792880][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.794921][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.802275][ T4054] device veth1_macvtap entered promiscuous mode [ 36.808748][ T4045] device veth1_vlan entered promiscuous mode [ 36.820406][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.821903][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.826940][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.828319][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.829872][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.836983][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.838509][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.839958][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.841322][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.842732][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.845276][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.846797][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.848290][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.851373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.852699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.860058][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.861703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.863548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.865002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.866469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.868778][ T4046] device veth0_vlan entered promiscuous mode [ 36.870573][ T4044] device veth0_macvtap entered promiscuous mode [ 36.874878][ T4045] device veth0_macvtap entered promiscuous mode [ 36.877303][ T4044] device veth1_macvtap entered promiscuous mode [ 36.882026][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.885711][ T4045] device veth1_macvtap entered promiscuous mode [ 36.887983][ T4054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.889446][ T4054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.890818][ T4054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.892283][ T4054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.898124][ T4046] device veth1_vlan entered promiscuous mode [ 36.907768][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.909513][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.911542][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.914578][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.916317][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.917790][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.919542][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.921845][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.924627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.926010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.927364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.928893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.930258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.932006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.937377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.938960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.940518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.942102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.944750][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.946359][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.948263][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.958614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.960104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.961746][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.964421][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.965878][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.967507][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.969644][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.974506][ T4044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.975914][ T4044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.977208][ T4044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.978437][ T4044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.981646][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.983411][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.997430][ T4045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.998778][ T4045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.000068][ T4045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.001328][ T4045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.005324][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.006865][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.015261][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.016815][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.025992][ T4046] device veth0_macvtap entered promiscuous mode [ 37.041206][ T1712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.042480][ T1712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.056325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.057744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.059455][ T4046] device veth1_macvtap entered promiscuous mode [ 37.074289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.075697][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.077173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.086072][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.087391][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.090909][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.092164][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.095010][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.099214][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.101043][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.102476][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.104904][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.106407][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.108021][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.110301][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.111610][ T4052] device veth0_vlan entered promiscuous mode [ 37.115757][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.117459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.121699][ T4052] device veth1_vlan entered promiscuous mode [ 37.130783][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.132451][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.134399][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.135993][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.137610][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.139231][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.141256][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.155870][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.157429][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.159066][ T1680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.160251][ T1680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.161823][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.179115][ T4046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.180528][ T4046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.181884][ T4046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.182689][ T4156] loop2: detected capacity change from 0 to 1024 [ 37.189340][ T4046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.189639][ T4156] ======================================================= [ 37.189639][ T4156] WARNING: The mand mount option has been deprecated and [ 37.189639][ T4156] and is ignored by this kernel. Remove the mand [ 37.189639][ T4156] option from the mount to silence this warning. [ 37.189639][ T4156] ======================================================= [ 37.201563][ T4052] device veth0_macvtap entered promiscuous mode [ 37.204850][ T1712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.206192][ T1712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.210247][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.211437][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.212678][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.214114][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.217125][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.218673][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.220201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.221685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.223910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.225299][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.229280][ T4052] device veth1_macvtap entered promiscuous mode [ 37.242290][ T4156] EXT4-fs (loop2): inline encryption not supported [ 37.245278][ T4156] EXT4-fs (loop2): Ignoring removed bh option [ 37.246258][ T4156] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.255304][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.256919][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.258546][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.260202][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.261742][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.263853][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.265302][ T4156] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 37.265815][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.270432][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.272550][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.294704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.296194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.298013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.306188][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.307857][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.309383][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.311183][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.312759][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.316194][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.317616][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.319202][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.321475][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.336800][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.338522][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.352070][ T4161] device syzkaller0 entered promiscuous mode [ 37.368221][ T4156] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.4: Allocating blocks 497-513 which overlap fs metadata [ 37.370959][ T4156] EXT4-fs (loop2): Remounting filesystem read-only [ 37.372171][ T4156] EXT4-fs (loop2): pa 0000000005969321: logic 128, phys. 385, len 8 [ 37.373497][ T4156] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 37.377698][ T4156] EXT4-fs (loop2): Remounting filesystem read-only [ 37.401521][ T1712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.402811][ T1712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.417900][ T1712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.419247][ T1712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.428355][ T4052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.429794][ T4052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.431223][ T4052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.432525][ T4052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.439214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.440682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.831782][ T1606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.833405][ T1606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.852573][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.897930][ T4169] tipc: Started in network mode [ 37.898801][ T4169] tipc: Node identity a24be31e0403, cluster identity 4711 [ 37.902363][ T4169] tipc: Enabled bearer , priority 0 [ 37.909166][ T4169] device syzkaller0 entered promiscuous mode [ 37.920899][ T1712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.922200][ T1712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.924316][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.944300][ T4169] tipc: Resetting bearer [ 37.961124][ T4168] tipc: Resetting bearer [ 37.964831][ T4168] tipc: Disabling bearer [ 37.982115][ T4175] tipc: Started in network mode [ 37.982871][ T4175] tipc: Node identity 4af5435d9d7d, cluster identity 4711 [ 37.984295][ T4175] tipc: Enabled bearer , priority 0 [ 37.986209][ T4175] device syzkaller0 entered promiscuous mode [ 38.276755][ T4128] Bluetooth: hci1: command 0x041b tx timeout [ 38.277844][ T4128] Bluetooth: hci2: command 0x041b tx timeout [ 38.278815][ T4128] Bluetooth: hci0: command 0x041b tx timeout [ 38.279781][ T4128] Bluetooth: hci3: command 0x041b tx timeout [ 38.280743][ T4128] Bluetooth: hci4: command 0x041b tx timeout [ 38.286799][ T4175] tipc: Resetting bearer [ 38.327777][ T4173] tipc: Resetting bearer [ 38.332745][ T4173] tipc: Disabling bearer [ 38.391507][ T4183] tipc: Enabling of bearer rejected, failed to enable media [ 38.421506][ T4183] device syzkaller0 entered promiscuous mode [ 39.027229][ T4190] IPVS: Error joining to the multicast group [ 40.310739][ T4207] netlink: 'syz.4.15': attribute type 10 has an invalid length. [ 40.347657][ T3625] Bluetooth: hci4: command 0x040f tx timeout [ 40.348778][ T3625] Bluetooth: hci3: command 0x040f tx timeout [ 40.349672][ T3625] Bluetooth: hci0: command 0x040f tx timeout [ 40.350600][ T3625] Bluetooth: hci2: command 0x040f tx timeout [ 40.351539][ T3625] Bluetooth: hci1: command 0x040f tx timeout [ 40.361524][ T4207] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 40.375397][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 40.391053][ T4210] tipc: Started in network mode [ 40.391854][ T4210] tipc: Node identity 080211000001, cluster identity 4711 [ 40.394038][ T4210] tipc: Enabled bearer , priority 0 [ 40.396310][ T4210] device syzkaller0 entered promiscuous mode [ 40.406154][ T4210] tipc: Resetting bearer [ 40.500212][ T4220] loop4: detected capacity change from 0 to 1024 [ 40.548741][ T4220] EXT4-fs (loop4): inline encryption not supported [ 40.550048][ T4220] EXT4-fs (loop4): Ignoring removed bh option [ 40.551093][ T4220] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.564926][ T4220] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 40.587856][ T4220] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.21: Allocating blocks 497-513 which overlap fs metadata [ 40.590727][ T4220] EXT4-fs (loop4): Remounting filesystem read-only [ 40.591873][ T4220] EXT4-fs (loop4): pa 00000000d0ebb246: logic 128, phys. 385, len 8 [ 40.593169][ T4220] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 40.595027][ T4220] EXT4-fs (loop4): Remounting filesystem read-only [ 41.393502][ T4128] tipc: Node number set to 134418688 [ 41.686748][ T4236] IPVS: Error joining to the multicast group [ 41.866837][ T4242] process 'syz.0.25' launched './file3' with NULL argv: empty string added [ 42.437232][ T4246] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 42.495154][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 42.498806][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 42.499772][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 42.500683][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 42.501721][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 42.522430][ T4246] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 42.994125][ T4248] device syzkaller0 entered promiscuous mode [ 43.058397][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 43.280787][ T4256] syz.0.29 (4256): drop_caches: 2 [ 43.281944][ T4256] syz.0.29 (4256): drop_caches: 2 [ 43.442211][ T4268] loop0: detected capacity change from 0 to 22 [ 43.799606][ T4268] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 43.802873][ T4268] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 44.009368][ T4274] tipc: Started in network mode [ 44.010537][ T4274] tipc: Node identity ac1414aa, cluster identity 4711 [ 44.014029][ T4274] tipc: Enabled bearer , priority 10 [ 44.273593][ T4278] trusted_key: encrypted_key: insufficient parameters specified [ 44.360912][ T4281] tipc: Started in network mode [ 44.372990][ T4281] tipc: Node identity 5ec20bdaa47d, cluster identity 4711 [ 44.374199][ T4281] tipc: Enabled bearer , priority 0 [ 44.376358][ T4281] device syzkaller0 entered promiscuous mode [ 45.320891][ T4289] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 45.333477][ T4283] device syzkaller0 left promiscuous mode [ 45.334577][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 45.338753][ T4111] tipc: Node number set to 2886997162 [ 45.365631][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 45.381787][ T4281] tipc: Resetting bearer [ 45.384574][ T4291] netlink: 'syz.2.43': attribute type 10 has an invalid length. [ 45.406570][ T4280] tipc: Resetting bearer [ 45.410512][ T4280] tipc: Disabling bearer [ 46.739811][ T4314] syz.2.47 (4314): drop_caches: 2 [ 46.741281][ T4314] syz.2.47 (4314): drop_caches: 2 [ 46.896597][ T4319] trusted_key: encrypted_key: insufficient parameters specified [ 48.596861][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 48.689204][ T4330] netlink: 'syz.4.55': attribute type 10 has an invalid length. [ 48.713128][ T4339] netlink: 'syz.0.56': attribute type 10 has an invalid length. [ 49.181912][ T4339] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 49.183551][ T4352] trusted_key: encrypted_key: insufficient parameters specified [ 50.089468][ T4361] device syzkaller0 entered promiscuous mode [ 50.127852][ T4369] trusted_key: encrypted_key: insufficient parameters specified [ 50.153646][ T4366] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 50.306794][ T4377] syz.1.65 (4377): drop_caches: 2 [ 50.322091][ T4377] syz.1.65 (4377): drop_caches: 2 [ 50.597363][ T4375] tipc: Enabled bearer , priority 0 [ 50.598961][ T4375] device syzkaller0 entered promiscuous mode [ 50.601092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 50.609246][ T4373] tipc: Resetting bearer [ 50.616725][ T4373] tipc: Disabling bearer [ 50.627820][ T4384] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 50.700703][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 50.707751][ T4390] netlink: 'syz.4.76': attribute type 10 has an invalid length. [ 51.182367][ T4399] trusted_key: encrypted_key: key user:syz not found [ 51.507079][ T4402] tipc: Enabled bearer , priority 0 [ 51.512730][ T4402] device syzkaller0 entered promiscuous mode [ 51.521833][ T4402] tipc: Resetting bearer [ 51.554356][ T4401] tipc: Resetting bearer [ 51.562170][ T4401] tipc: Disabling bearer [ 51.629615][ T4407] trusted_key: encrypted_key: insufficient parameters specified [ 51.639464][ T4409] device syzkaller0 entered promiscuous mode [ 51.640579][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 51.663673][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 51.687801][ T4415] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 51.740429][ T4420] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 52.092502][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 52.106876][ T4425] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 52.565061][ T4436] syz.4.89 (4436): drop_caches: 2 [ 52.566014][ T4436] syz.4.89 (4436): drop_caches: 2 [ 52.840341][ T4449] trusted_key: encrypted_key: key user:syz not found [ 53.305070][ T4448] sctp: [Deprecated]: syz.2.95 (pid 4448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.305070][ T4448] Use struct sctp_sack_info instead [ 53.530052][ T4452] trusted_key: encrypted_key: insufficient parameters specified [ 53.627897][ T4454] tipc: Enabled bearer , priority 0 [ 53.629438][ T4454] device syzkaller0 entered promiscuous mode [ 53.648437][ T4457] tipc: Enabled bearer , priority 0 [ 53.665984][ T4454] tipc: Resetting bearer [ 53.667554][ T4460] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 53.688892][ T4460] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 53.690340][ T4461] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 53.736696][ T4461] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 53.757923][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 53.765901][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 53.772775][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 53.796510][ T4467] netlink: 'syz.2.102': attribute type 10 has an invalid length. [ 53.798981][ T4469] tipc: Enabling of bearer rejected, already enabled [ 53.809914][ T4471] tipc: Enabling of bearer rejected, already enabled [ 54.296063][ T4497] trusted_key: encrypted_key: insufficient parameters specified [ 54.983118][ T4499] trusted_key: encrypted_key: key user:syz not found [ 55.136706][ T4502] device syzkaller0 entered promiscuous mode [ 55.202334][ T4111] tipc: Node number set to 2789794590 [ 55.207684][ T4504] tipc: Enabling of bearer rejected, already enabled [ 55.214703][ T4506] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 55.227314][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 55.241375][ T4506] device syzkaller0 left promiscuous mode [ 55.242495][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 55.246060][ T4509] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 55.272229][ T4513] tipc: Enabled bearer , priority 0 [ 56.223246][ T4534] trusted_key: encrypted_key: insufficient parameters specified [ 56.755217][ T4099] tipc: Node number set to 3616031581 [ 57.677819][ T4544] tipc: Enabling of bearer rejected, already enabled [ 57.707392][ T4552] validate_nla: 1 callbacks suppressed [ 57.707400][ T4552] netlink: 'syz.2.133': attribute type 10 has an invalid length. [ 57.713440][ T4553] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 57.745677][ T4552] device syzkaller0 left promiscuous mode [ 57.746726][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 57.755811][ T4556] tipc: Enabling of bearer rejected, already enabled [ 57.757379][ T4556] device syzkaller0 entered promiscuous mode [ 57.758467][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 57.772501][ T4553] device syzkaller0 left promiscuous mode [ 57.778953][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 57.779436][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 57.788231][ T4559] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 57.917323][ T4572] device syzkaller0 entered promiscuous mode [ 57.918469][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 57.955979][ T4576] syz.1.143 (4576): drop_caches: 2 [ 58.276844][ T4581] trusted_key: encrypted_key: insufficient parameters specified [ 58.454701][ T4576] syz.1.143 (4576): drop_caches: 2 [ 58.850675][ T4590] syz.3.147 (4590): drop_caches: 2 [ 59.102544][ T4596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.148'. [ 59.509769][ T4590] syz.3.147 (4590): drop_caches: 2 [ 59.657035][ T4603] Zero length message leads to an empty skb [ 59.668825][ T4605] netlink: 'syz.2.149': attribute type 10 has an invalid length. [ 59.699503][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 59.711272][ T4604] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 59.744331][ T4611] device syzkaller0 entered promiscuous mode [ 60.200621][ T4622] netlink: 68 bytes leftover after parsing attributes in process `syz.2.156'. [ 61.229249][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 61.575256][ T4643] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 61.645130][ T4649] syz.3.163 (4649): drop_caches: 2 [ 61.646244][ T4649] syz.3.163 (4649): drop_caches: 2 [ 61.992750][ T4659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.164'. [ 62.390906][ T4671] trusted_key: encrypted_key: insufficient parameters specified [ 62.862721][ T4681] tipc: Enabling of bearer rejected, already enabled [ 62.900618][ T4686] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 62.922979][ T4689] device syzkaller0 entered promiscuous mode [ 62.924205][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 63.864643][ T4700] syz.4.182 (4700): drop_caches: 2 [ 63.865697][ T4700] syz.4.182 (4700): drop_caches: 2 [ 64.432651][ T4724] trusted_key: encrypted_key: insufficient parameters specified [ 65.040137][ T4733] tipc: Enabling of bearer rejected, already enabled [ 65.485160][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 65.520728][ T4748] tipc: Enabling of bearer rejected, already enabled [ 66.381990][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.439323][ T4755] netlink: 68 bytes leftover after parsing attributes in process `syz.4.198'. [ 66.758887][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 66.762021][ T4771] netlink: 'syz.4.203': attribute type 10 has an invalid length. [ 66.813073][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.815160][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 66.996551][ T4775] trusted_key: encrypted_key: insufficient parameters specified [ 67.303388][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 67.305582][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.308047][ T25] usb 1-1: Product: syz [ 67.308699][ T25] usb 1-1: Manufacturer: syz [ 67.309480][ T25] usb 1-1: SerialNumber: syz [ 67.319976][ T25] usb 1-1: config 0 descriptor?? [ 67.489579][ T4786] tipc: Enabling of bearer rejected, already enabled [ 67.714963][ T4788] trusted_key: encrypted_key: key user:syz not found [ 68.000502][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 68.048247][ T25] usb 1-1: USB disconnect, device number 2 [ 68.435040][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 68.441453][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 68.444559][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 68.447617][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 68.449773][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 68.986336][ T4813] netlink: 68 bytes leftover after parsing attributes in process `syz.3.214'. [ 69.129785][ T4038] udevd[4038]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.146313][ T4823] syz.0.218 (4823): drop_caches: 2 [ 69.150195][ T4823] syz.0.218 (4823): drop_caches: 2 [ 69.169471][ T4826] tipc: Enabling of bearer rejected, already enabled [ 69.237043][ T4827] loop1: detected capacity change from 0 to 128 [ 69.283046][ T4827] qnx6: superblock #1 checksum error [ 69.653770][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.659069][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.670023][ T21] cfg80211: failed to load regulatory.db [ 70.115859][ T4832] netlink: 'syz.4.223': attribute type 10 has an invalid length. [ 70.342106][ T4846] trusted_key: encrypted_key: key user:syz not found [ 71.198564][ T4856] udc-core: couldn't find an available UDC or it's busy [ 71.200758][ T4856] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.886631][ T4860] __nla_validate_parse: 1 callbacks suppressed [ 71.886643][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 71.911438][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 72.331974][ T4883] netlink: 68 bytes leftover after parsing attributes in process `syz.0.233'. [ 73.385651][ T4900] netlink: 68 bytes leftover after parsing attributes in process `syz.2.239'. [ 73.488720][ T4906] netlink: 'syz.1.242': attribute type 10 has an invalid length. [ 73.616302][ T4919] tipc: Enabling of bearer rejected, already enabled [ 74.048793][ T4933] udc-core: couldn't find an available UDC or it's busy [ 74.117483][ T4934] netlink: 68 bytes leftover after parsing attributes in process `syz.3.249'. [ 74.408244][ T4933] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.450706][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 74.516328][ T4945] netlink: 'syz.4.256': attribute type 10 has an invalid length. [ 74.549357][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 74.551262][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 74.552822][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 74.556151][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 75.010038][ T4965] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 75.012669][ T4965] device syzkaller0 left promiscuous mode [ 75.014099][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 76.396969][ T4985] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 76.911070][ T5006] loop3: detected capacity change from 0 to 2048 [ 77.005130][ T5006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.370847][ T5019] udc-core: couldn't find an available UDC or it's busy [ 77.372067][ T5019] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.429627][ T5019] __nla_validate_parse: 10 callbacks suppressed [ 77.429638][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 77.499348][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 77.506332][ T5029] netlink: 'syz.3.285': attribute type 10 has an invalid length. [ 77.509343][ T5029] device syzkaller0 left promiscuous mode [ 77.510988][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 78.187386][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 78.335036][ T5051] delete_channel: no stack [ 78.389068][ T5053] netlink: 68 bytes leftover after parsing attributes in process `syz.4.291'. [ 78.806409][ T5060] loop1: detected capacity change from 0 to 2048 [ 78.822619][ T5060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.662566][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 80.670219][ T5093] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 80.713860][ T5093] device syzkaller0 left promiscuous mode [ 80.715178][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 81.283841][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 81.297107][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 81.306053][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 81.312254][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 81.317828][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 81.328466][ T5120] tipc: Enabling of bearer rejected, already enabled [ 81.435307][ T5129] netlink: 'syz.4.322': attribute type 10 has an invalid length. [ 81.437880][ T5129] device syzkaller0 left promiscuous mode [ 81.438962][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 82.840499][ T5147] tipc: Enabling of bearer rejected, already enabled [ 82.845936][ T5147] device syzkaller0 entered promiscuous mode [ 82.847066][ T5147] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 83.177003][ T5152] __nla_validate_parse: 1 callbacks suppressed [ 83.177014][ T5152] netlink: 68 bytes leftover after parsing attributes in process `syz.2.325'. [ 83.445912][ T5165] netlink: 68 bytes leftover after parsing attributes in process `syz.4.331'. [ 83.707885][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 83.710866][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 83.718774][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 83.720356][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 83.746481][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 83.928391][ T5171] loop2: detected capacity change from 0 to 4096 [ 84.474633][ T5171] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 84.960594][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 84.966595][ T5196] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 85.350243][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 85.352513][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 85.371348][ T5212] tipc: Enabled bearer , priority 0 [ 85.372898][ T5212] device syzkaller0 entered promiscuous mode [ 85.374367][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 86.403696][ T7] tipc: Node number set to 4206824410 [ 86.589977][ T5248] loop2: detected capacity change from 0 to 64 [ 87.870907][ T5269] loop2: detected capacity change from 0 to 64 [ 89.504828][ T5307] loop3: detected capacity change from 0 to 64 [ 89.590249][ T5311] tipc: Enabling of bearer rejected, already enabled [ 89.592240][ T5311] device syzkaller0 entered promiscuous mode [ 89.596415][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 90.887633][ T5326] __nla_validate_parse: 8 callbacks suppressed [ 90.887655][ T5326] netlink: 68 bytes leftover after parsing attributes in process `syz.2.382'. [ 91.234993][ T5327] loop0: detected capacity change from 0 to 32768 [ 91.337444][ T5327] (syz.0.381,5327,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.346141][ T5327] (syz.0.381,5327,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.432283][ T5327] JBD2: Ignoring recovery information on journal [ 91.758222][ T5327] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.312910][ C0] sched: RT throttling activated [ 93.356060][ T4044] ocfs2: Unmounting device (7,0) on (node local) [ 93.470628][ T5351] loop3: detected capacity change from 0 to 4096 [ 93.506509][ T5351] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 94.226658][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 94.559451][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 94.568693][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 95.303049][ T5392] udc-core: couldn't find an available UDC or it's busy [ 95.567510][ T5392] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.750679][ T5401] loop1: detected capacity change from 0 to 8 [ 96.009355][ T5401] SQUASHFS error: zlib decompression failed, data probably corrupt [ 96.010933][ T5401] SQUASHFS error: Failed to read block 0x9b: -5 [ 96.012018][ T5401] SQUASHFS error: Unable to read metadata cache entry [99] [ 96.013282][ T5401] SQUASHFS error: Unable to read inode 0x127 [ 96.202235][ T5410] delete_channel: no stack [ 96.277072][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 96.281639][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 96.285223][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 96.288505][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 96.290673][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 96.767273][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 96.771979][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 96.775492][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 96.778830][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 96.781213][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 97.025827][ T5424] loop4: detected capacity change from 0 to 64 [ 97.589145][ T5435] loop0: detected capacity change from 0 to 64 [ 100.214026][ T5482] loop0: detected capacity change from 0 to 64 [ 101.728562][ T5496] loop1: detected capacity change from 0 to 1024 [ 101.812898][ T5493] loop3: detected capacity change from 0 to 32768 [ 101.832386][ T5496] EXT4-fs (loop1): Ignoring removed nobh option [ 101.834581][ T5496] EXT4-fs (loop1): Ignoring removed bh option [ 101.912234][ T5493] [ 101.912234][ T5493] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.912234][ T5493] [ 102.288983][ T5518] __nla_validate_parse: 15 callbacks suppressed [ 102.289019][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 102.294288][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 102.297179][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 102.300256][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 102.302323][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 102.332484][ T5496] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 102.475412][ T5521] [ 102.475412][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.475412][ T5521] [ 102.477656][ T5521] [ 102.477656][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.477656][ T5521] [ 102.618205][ T5521] [ 102.618205][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.618205][ T5521] [ 102.634434][ T5521] [ 102.634434][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.634434][ T5521] [ 102.647589][ T5521] [ 102.647589][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.647589][ T5521] [ 102.649362][ T5521] [ 102.649362][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.649362][ T5521] [ 102.881918][ T248] [ 102.881918][ T248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.881918][ T248] [ 102.894547][ T4045] [ 102.894547][ T4045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.894547][ T4045] [ 102.896845][ T4045] [ 102.896845][ T4045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.896845][ T4045] [ 103.768406][ T5545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 103.770020][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 103.791599][ T5547] loop0: detected capacity change from 0 to 64 [ 104.429055][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 104.433602][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 104.437466][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 106.099881][ T5590] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 106.106572][ T5590] device syzkaller0 left promiscuous mode [ 106.108947][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 106.446957][ T5598] syz.0.459 (5598): drop_caches: 2 [ 106.504956][ T5598] syz.0.459 (5598): drop_caches: 2 [ 107.591453][ T5615] __nla_validate_parse: 2 callbacks suppressed [ 107.591466][ T5615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 107.595336][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 107.726571][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 107.730610][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 107.734136][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 107.737429][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 107.739440][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 107.995713][ T5620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 107.997285][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 109.256308][ T5644] loop3: detected capacity change from 0 to 32768 [ 109.299840][ T5644] (syz.3.469,5644,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.303281][ T5644] (syz.3.469,5644,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.739376][ T5644] JBD2: Ignoring recovery information on journal [ 109.942668][ T5644] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.151702][ T4045] ocfs2: Unmounting device (7,3) on (node local) [ 110.411809][ T5652] syz.2.473 (5652): drop_caches: 2 [ 110.414052][ T5658] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 110.414385][ T5652] syz.2.473 (5652): drop_caches: 2 [ 110.417632][ T5658] device syzkaller0 left promiscuous mode [ 110.418815][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 110.630500][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 111.030470][ T5683] loop2: detected capacity change from 0 to 8 [ 111.099147][ T5683] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.477723][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop2 [ 112.490980][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop2 [ 112.493982][ T5699] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 112.496447][ T5699] device syzkaller0 left promiscuous mode [ 112.497450][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 112.516959][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop2 [ 112.527430][ T5702] tipc: Enabling of bearer rejected, failed to enable media [ 112.533503][ T5702] device syzkaller0 entered promiscuous mode [ 112.535596][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 112.973069][ T5718] syz.2.492 (5718): drop_caches: 2 [ 112.975372][ T5718] syz.2.492 (5718): drop_caches: 2 [ 113.511432][ T5733] loop2: detected capacity change from 0 to 64 [ 113.519673][ T5735] loop1: detected capacity change from 0 to 64 [ 114.540740][ T5747] tipc: Enabling of bearer rejected, failed to enable media [ 114.715859][ T5752] __nla_validate_parse: 6 callbacks suppressed [ 114.715892][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 114.725963][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 114.732419][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 114.738624][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 114.741941][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 116.086470][ T5767] tipc: Enabling of bearer rejected, already enabled [ 116.606282][ T5773] syz.1.509 (5773): drop_caches: 2 [ 116.622364][ T5773] syz.1.509 (5773): drop_caches: 2 [ 116.877047][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 116.946101][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 117.395584][ T5786] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 117.423011][ T5788] tipc: Enabling of bearer rejected, failed to enable media [ 117.424726][ T5788] device syzkaller0 entered promiscuous mode [ 117.425844][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 117.473374][ T5793] loop3: detected capacity change from 0 to 64 [ 117.686587][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 117.694600][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 117.701758][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 118.177212][ T5799] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 118.184076][ T5800] delete_channel: no stack [ 118.775980][ T5816] syz.1.524 (5816): drop_caches: 2 [ 118.785260][ T5816] syz.1.524 (5816): drop_caches: 2 [ 118.942882][ T5819] netlink: 'syz.3.526': attribute type 10 has an invalid length. [ 118.946899][ T5819] device syzkaller0 left promiscuous mode [ 118.948072][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 118.978122][ T5821] tipc: Enabling of bearer rejected, failed to enable media [ 118.981112][ T5823] loop4: detected capacity change from 0 to 64 [ 118.982495][ T5821] device syzkaller0 entered promiscuous mode [ 118.985445][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 119.598867][ T5831] delete_channel: no stack [ 119.627515][ T5838] netlink: 'syz.1.533': attribute type 10 has an invalid length. [ 119.646008][ T5840] loop1: detected capacity change from 0 to 64 [ 120.116915][ T5844] tipc: Enabling of bearer rejected, already enabled [ 120.189890][ T5847] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 120.192440][ T5847] device syzkaller0 left promiscuous mode [ 120.195092][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 120.282477][ T5850] __nla_validate_parse: 14 callbacks suppressed [ 120.282485][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 120.285343][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 120.286852][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 120.288322][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 120.289748][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 120.552246][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.553788][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.768105][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 120.777384][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 120.783812][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 121.062148][ T5867] delete_channel: no stack [ 121.666578][ T5883] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 121.669189][ T5883] device syzkaller0 left promiscuous mode [ 121.670249][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 121.756023][ T5891] loop0: detected capacity change from 0 to 64 [ 122.332204][ T5903] tipc: Enabling of bearer rejected, failed to enable media [ 122.336955][ T5903] device syzkaller0 entered promiscuous mode [ 122.338207][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 122.435770][ T5911] loop3: detected capacity change from 0 to 64 [ 123.382882][ T5936] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 123.399332][ T5939] tipc: Enabling of bearer rejected, already enabled [ 124.113973][ T5960] udc-core: couldn't find an available UDC or it's busy [ 124.115139][ T5960] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.130932][ T5962] loop3: detected capacity change from 0 to 64 [ 125.092181][ T5970] loop2: detected capacity change from 0 to 512 [ 125.210988][ T5970] EXT4-fs (loop2): Ignoring removed nobh option [ 125.212038][ T5970] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.233121][ T5970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.295812][ T5979] __nla_validate_parse: 21 callbacks suppressed [ 125.295842][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 125.300349][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 125.303242][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 125.305881][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 125.307705][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 125.572753][ T5977] device syzkaller0 entered promiscuous mode [ 125.577083][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 125.657823][ T5970] EXT4-fs (loop2): 1 truncate cleaned up [ 125.658911][ T5970] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 126.578300][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 126.606526][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 126.690981][ T6004] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 126.720341][ T6006] loop3: detected capacity change from 0 to 64 [ 126.773274][ T6010] tipc: Enabling of bearer rejected, already enabled [ 126.778154][ T6010] device syzkaller0 entered promiscuous mode [ 126.781444][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 126.928955][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 126.932712][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 126.935602][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 128.887511][ T6037] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 128.894131][ T6037] device syzkaller0 left promiscuous mode [ 128.895142][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 129.001450][ T6050] tipc: Enabling of bearer rejected, already enabled [ 129.399567][ T6057] delete_channel: no stack [ 129.478373][ T6071] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 129.481133][ T6071] device syzkaller0 left promiscuous mode [ 129.482332][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 129.712383][ T6081] device syzkaller0 entered promiscuous mode [ 129.716234][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 129.803643][ T6083] loop2: detected capacity change from 0 to 512 [ 129.889683][ T6083] EXT4-fs (loop2): Ignoring removed nobh option [ 129.890812][ T6083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.257784][ T6083] EXT4-fs (loop2): 1 truncate cleaned up [ 130.258721][ T6083] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 131.099194][ T6102] loop3: detected capacity change from 0 to 512 [ 131.131970][ T6099] delete_channel: no stack [ 131.165873][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.166880][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.188258][ T6104] __nla_validate_parse: 11 callbacks suppressed [ 131.188265][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 131.201012][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 131.212808][ T6102] EXT4-fs (loop3): Ignoring removed nobh option [ 131.213928][ T6102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.252255][ T6102] EXT4-fs (loop3): 1 truncate cleaned up [ 131.253305][ T6102] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 131.473496][ T6113] netlink: 128 bytes leftover after parsing attributes in process `syz.3.622'. [ 131.475926][ T6113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.622'. [ 132.358336][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 132.360212][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 132.361701][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 132.363342][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 132.364697][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 133.091752][ T6130] device syzkaller0 entered promiscuous mode [ 133.092877][ T6130] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 133.152420][ T6135] loop2: detected capacity change from 0 to 512 [ 133.209992][ T6135] EXT4-fs (loop2): Ignoring removed nobh option [ 133.211048][ T6135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.645551][ T6135] EXT4-fs (loop2): 1 truncate cleaned up [ 133.646542][ T6135] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 134.405310][ T6159] loop4: detected capacity change from 0 to 512 [ 134.551781][ T6159] EXT4-fs (loop4): Ignoring removed nobh option [ 134.552873][ T6159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.564791][ T6159] EXT4-fs (loop4): 1 truncate cleaned up [ 134.565730][ T6159] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 134.619950][ T6178] tipc: Enabling of bearer rejected, already enabled [ 134.670133][ T6180] loop2: detected capacity change from 0 to 64 [ 135.560472][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 136.907796][ T6215] tipc: Enabling of bearer rejected, already enabled [ 137.632417][ T6235] loop3: detected capacity change from 0 to 64 [ 137.859971][ T6241] __nla_validate_parse: 4 callbacks suppressed [ 137.859981][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 137.863152][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 137.864734][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 137.866175][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 137.867519][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 137.920082][ T6246] tipc: Enabling of bearer rejected, already enabled [ 138.143794][ T6252] loop4: detected capacity change from 0 to 512 [ 138.216606][ T6252] EXT4-fs (loop4): Ignoring removed nobh option [ 138.219312][ T6252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.234632][ T6252] EXT4-fs (loop4): 1 truncate cleaned up [ 138.237422][ T6252] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 138.436172][ T6258] netlink: 128 bytes leftover after parsing attributes in process `syz.4.671'. [ 138.437864][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.4.671'. [ 138.887785][ T6267] tipc: Enabling of bearer rejected, already enabled [ 139.104079][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 139.107710][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 139.110604][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 140.786236][ T6298] loop1: detected capacity change from 0 to 64 [ 141.082620][ T6305] tipc: Enabling of bearer rejected, already enabled [ 141.675273][ T6321] tipc: Enabling of bearer rejected, already enabled [ 142.437075][ T6331] tipc: Enabling of bearer rejected, already enabled [ 142.447173][ T6332] loop0: detected capacity change from 0 to 512 [ 142.479840][ T6332] EXT4-fs (loop0): Ignoring removed nobh option [ 142.483104][ T6332] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.055353][ T6344] loop1: detected capacity change from 0 to 32768 [ 145.092415][ T6344] (syz.1.692,6344,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.095286][ T6344] (syz.1.692,6344,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.312446][ T6344] JBD2: Ignoring recovery information on journal [ 145.331065][ T6344] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 145.497331][ T6355] loop3: detected capacity change from 0 to 64 [ 145.503166][ T6332] EXT4-fs: error -4 creating inode table initialization thread [ 145.504613][ T6332] EXT4-fs (loop0): mount failed [ 145.528274][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 145.759952][ T4046] ocfs2: Unmounting device (7,1) on (node local) [ 145.920125][ T6366] loop2: detected capacity change from 0 to 64 [ 145.925300][ T6361] __nla_validate_parse: 19 callbacks suppressed [ 145.925310][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 145.928081][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 145.929835][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 145.931276][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 145.932701][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 146.243406][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 146.245305][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 146.246853][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 146.248374][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 146.249734][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 146.391791][ T6378] tipc: Enabling of bearer rejected, already enabled [ 146.868056][ T6394] loop3: detected capacity change from 0 to 512 [ 148.980921][ T6400] loop4: detected capacity change from 0 to 32768 [ 149.691490][ T6394] EXT4-fs (loop3): Ignoring removed nobh option [ 149.692497][ T6394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.711536][ T6394] EXT4-fs (loop3): 1 truncate cleaned up [ 149.712538][ T6394] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 149.830015][ T6407] loop2: detected capacity change from 0 to 512 [ 150.217254][ T6411] tipc: Enabling of bearer rejected, already enabled [ 150.229554][ T6400] (syz.4.716,6400,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.232051][ T6400] (syz.4.716,6400,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.244461][ T6407] EXT4-fs (loop2): Ignoring removed nobh option [ 150.245560][ T6407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.277498][ T6400] JBD2: Ignoring recovery information on journal [ 150.359378][ T6400] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 150.379627][ T6407] EXT4-fs (loop2): 1 truncate cleaned up [ 150.380648][ T6407] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 150.507258][ T4052] ocfs2: Unmounting device (7,4) on (node local) [ 150.977246][ T6436] __nla_validate_parse: 3 callbacks suppressed [ 150.977257][ T6436] netlink: 128 bytes leftover after parsing attributes in process `syz.2.719'. [ 150.979799][ T6436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.719'. [ 151.079392][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 151.081188][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 151.082738][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 151.084343][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 151.085830][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 151.759811][ T6444] loop3: detected capacity change from 0 to 32768 [ 152.188894][ T6444] (syz.3.727,6444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.195404][ T6444] (syz.3.727,6444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.679156][ T6444] JBD2: Ignoring recovery information on journal [ 153.202793][ T6456] loop1: detected capacity change from 0 to 512 [ 153.205558][ T6444] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.292823][ T6458] tipc: Enabling of bearer rejected, already enabled [ 153.307068][ T6456] EXT4-fs (loop1): Ignoring removed nobh option [ 153.309248][ T6456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.343067][ T4045] ocfs2: Unmounting device (7,3) on (node local) [ 153.356800][ T6456] EXT4-fs (loop1): 1 truncate cleaned up [ 153.357783][ T6456] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 153.582131][ T6465] netlink: 128 bytes leftover after parsing attributes in process `syz.1.731'. [ 153.583865][ T6465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.731'. [ 153.845516][ T6467] loop4: detected capacity change from 0 to 512 [ 153.892980][ T6467] EXT4-fs (loop4): Ignoring removed nobh option [ 153.894049][ T6467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.906693][ T6467] EXT4-fs (loop4): 1 truncate cleaned up [ 153.907611][ T6467] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 154.216227][ T6478] netlink: 128 bytes leftover after parsing attributes in process `syz.4.736'. [ 155.197302][ T6493] delete_channel: no stack [ 155.284698][ T6497] udc-core: couldn't find an available UDC or it's busy [ 155.285878][ T6497] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.597151][ T6498] tipc: Enabling of bearer rejected, already enabled [ 155.611381][ T6504] loop3: detected capacity change from 0 to 64 [ 155.637369][ T6508] loop4: detected capacity change from 0 to 512 [ 155.674631][ T6508] EXT4-fs (loop4): Ignoring removed nobh option [ 155.675785][ T6508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.686401][ T6508] EXT4-fs (loop4): 1 truncate cleaned up [ 155.687430][ T6508] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 156.434687][ T6523] __nla_validate_parse: 13 callbacks suppressed [ 156.434723][ T6523] netlink: 68 bytes leftover after parsing attributes in process `syz.3.750'. [ 156.791014][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 156.792646][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 156.868605][ T6530] udc-core: couldn't find an available UDC or it's busy [ 156.869835][ T6530] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.886002][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 157.122871][ T6531] delete_channel: no stack [ 158.485641][ T6558] loop4: detected capacity change from 0 to 512 [ 158.497730][ T6558] EXT4-fs (loop4): Ignoring removed nobh option [ 158.498800][ T6558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.524378][ T6558] EXT4-fs (loop4): 1 truncate cleaned up [ 158.525306][ T6558] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 158.648736][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 158.650625][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 158.652082][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 158.653749][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 158.655060][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 158.752180][ T3625] Bluetooth: hci1: command 0x0406 tx timeout [ 158.755087][ T3625] Bluetooth: hci2: command 0x0406 tx timeout [ 158.757345][ T3625] Bluetooth: hci0: command 0x0406 tx timeout [ 158.823063][ T3625] Bluetooth: hci4: command 0x0406 tx timeout [ 158.824655][ T3625] Bluetooth: hci3: command 0x0406 tx timeout [ 159.334167][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 159.633854][ T6577] loop2: detected capacity change from 0 to 512 [ 159.641658][ T6577] EXT4-fs (loop2): Ignoring removed nobh option [ 159.649168][ T6577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.677587][ T6577] EXT4-fs (loop2): 1 truncate cleaned up [ 159.678564][ T6577] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 160.624719][ T6600] udc-core: couldn't find an available UDC or it's busy [ 160.625847][ T6600] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 161.408783][ T6609] loop3: detected capacity change from 0 to 64 [ 161.775168][ T6617] __nla_validate_parse: 7 callbacks suppressed [ 161.775178][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 161.775539][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 161.775712][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 161.775863][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 161.775918][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 162.164037][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 162.164434][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 162.164564][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 162.164703][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 162.164759][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 162.539963][ T6626] loop2: detected capacity change from 0 to 32768 [ 163.357457][ T6626] (syz.2.779,6626,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.360708][ T6626] (syz.2.779,6626,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.936879][ T6626] JBD2: Ignoring recovery information on journal [ 163.959464][ T6626] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 163.978963][ T6638] loop3: detected capacity change from 0 to 512 [ 163.984995][ T6638] EXT4-fs (loop3): Ignoring removed nobh option [ 163.986045][ T6638] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.166897][ T6638] EXT4-fs (loop3): 1 truncate cleaned up [ 164.168218][ T6638] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 164.395308][ T4054] ocfs2: Unmounting device (7,2) on (node local) [ 165.934910][ T6668] loop1: detected capacity change from 0 to 32768 [ 166.013105][ T6668] (syz.1.791,6668,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.017150][ T6668] (syz.1.791,6668,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.338144][ T6668] JBD2: Ignoring recovery information on journal [ 166.724103][ T6668] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 166.800738][ T6673] __nla_validate_parse: 10 callbacks suppressed [ 166.800746][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 166.803549][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 166.805046][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 166.806418][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 166.807758][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 167.316479][ T4046] ocfs2: Unmounting device (7,1) on (node local) [ 167.329256][ T6680] netlink: 68 bytes leftover after parsing attributes in process `syz.3.797'. [ 167.429661][ T6684] loop1: detected capacity change from 0 to 512 [ 167.467104][ T6684] EXT4-fs (loop1): Ignoring removed nobh option [ 167.468315][ T6684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.535242][ T6689] netlink: 68 bytes leftover after parsing attributes in process `syz.3.798'. [ 167.787486][ T6684] EXT4-fs (loop1): 1 truncate cleaned up [ 167.790929][ T6684] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 168.011379][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 168.013432][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 168.014901][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 169.492269][ T6714] loop0: detected capacity change from 0 to 32768 [ 170.325169][ T6714] (syz.0.806,6714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.327454][ T6714] (syz.0.806,6714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.903766][ T6729] loop3: detected capacity change from 0 to 32768 [ 171.048749][ T6714] JBD2: Ignoring recovery information on journal [ 171.165133][ T6729] (syz.3.811,6729,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.169092][ T6729] (syz.3.811,6729,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.466444][ T6729] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 171.474782][ T6729] JBD2: Ignoring recovery information on journal [ 171.926285][ T6714] JBD2: recovery failed [ 171.927073][ T6714] (syz.0.806,6714,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 171.928708][ T6714] (syz.0.806,6714,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 171.930339][ T6714] (syz.0.806,6714,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 171.931630][ T6714] (syz.0.806,6714,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 171.957114][ T6714] (syz.0.806,6714,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 172.191697][ T6729] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 172.369503][ T4045] ocfs2: Unmounting device (7,3) on (node local) [ 173.813532][ T6755] __nla_validate_parse: 5 callbacks suppressed [ 173.813543][ T6755] netlink: 128 bytes leftover after parsing attributes in process `syz.0.816'. [ 173.816069][ T6755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.816'. [ 174.707352][ T6774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.822'. [ 174.841905][ T6776] syz.1.820 (6776): drop_caches: 2 [ 174.846235][ T6776] syz.1.820 (6776): drop_caches: 2 [ 174.893493][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 174.895457][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 174.897064][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 174.898704][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 174.900298][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 175.435843][ T6799] netlink: 68 bytes leftover after parsing attributes in process `syz.3.828'. [ 176.115916][ T6802] loop2: detected capacity change from 0 to 32768 [ 177.206716][ T6802] (syz.2.827,6802,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.208988][ T6802] (syz.2.827,6802,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.209915][ T6795] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.830'. [ 177.220598][ T6802] JBD2: Ignoring recovery information on journal [ 177.251026][ T6802] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.034901][ T6813] loop4: detected capacity change from 0 to 32768 [ 178.322943][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.423067][ T6813] (syz.4.832,6813,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.428099][ T6813] (syz.4.832,6813,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.824369][ T6813] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 178.827428][ T6813] JBD2: Ignoring recovery information on journal [ 178.841730][ T6817] loop0: detected capacity change from 0 to 64 [ 178.847178][ T4054] ocfs2: Unmounting device (7,2) on (node local) [ 178.866884][ T6813] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 179.409592][ T4052] ocfs2: Unmounting device (7,4) on (node local) [ 179.412380][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 179.414286][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 179.415825][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 179.417429][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 179.418760][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 179.586214][ T6832] loop4: detected capacity change from 0 to 64 [ 180.405479][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 180.407395][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 180.408859][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 180.410474][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 180.411968][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 180.603057][ T6854] loop1: detected capacity change from 0 to 32768 [ 181.870847][ T6854] (syz.1.844,6854,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.873157][ T6854] (syz.1.844,6854,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.879969][ T6854] JBD2: Ignoring recovery information on journal [ 181.918270][ T6854] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 182.065292][ T4046] ocfs2: Unmounting device (7,1) on (node local) [ 182.364193][ T6872] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 182.541258][ T6879] syz.2.848 (6879): drop_caches: 2 [ 182.545248][ T6879] syz.2.848 (6879): drop_caches: 2 [ 182.697108][ T6881] loop4: detected capacity change from 0 to 512 [ 182.715647][ T6881] EXT4-fs (loop4): Ignoring removed nobh option [ 182.718932][ T6881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.744709][ T6881] EXT4-fs (loop4): 1 truncate cleaned up [ 182.745889][ T6881] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 183.822308][ T6899] loop3: detected capacity change from 0 to 64 [ 183.849432][ T6901] loop4: detected capacity change from 0 to 512 [ 183.924404][ T6903] loop2: detected capacity change from 0 to 64 [ 183.940802][ T6901] EXT4-fs (loop4): Ignoring removed nobh option [ 183.941940][ T6901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.947040][ T6901] EXT4-fs (loop4): 1 truncate cleaned up [ 183.947957][ T6901] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 184.281732][ T6915] netlink: 'syz.1.860': attribute type 10 has an invalid length. [ 184.826711][ T6925] delete_channel: no stack [ 184.913521][ T6931] loop4: detected capacity change from 0 to 64 [ 185.096402][ T6933] __nla_validate_parse: 23 callbacks suppressed [ 185.096412][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 185.099461][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 185.101113][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 185.102803][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 185.104431][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 185.290428][ T6938] loop1: detected capacity change from 0 to 512 [ 185.297999][ T6938] EXT4-fs (loop1): Ignoring removed nobh option [ 185.299282][ T6938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.385584][ T6941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.866'. [ 185.587177][ T6943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.867'. [ 185.745490][ T6938] EXT4-fs (loop1): 1 truncate cleaned up [ 185.746387][ T6938] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 185.791989][ T6946] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 185.890702][ T6947] netlink: 128 bytes leftover after parsing attributes in process `syz.1.868'. [ 185.892358][ T6947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.868'. [ 186.023826][ T6951] netlink: 68 bytes leftover after parsing attributes in process `syz.0.870'. [ 186.492609][ T6958] loop1: detected capacity change from 0 to 512 [ 186.495200][ T6958] EXT4-fs (loop1): Ignoring removed nobh option [ 186.496210][ T6958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.505391][ T6958] EXT4-fs (loop1): 1 truncate cleaned up [ 186.506250][ T6958] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 186.618338][ T6964] delete_channel: no stack [ 186.642598][ T6968] loop4: detected capacity change from 0 to 64 [ 186.762533][ T6972] loop0: detected capacity change from 0 to 64 [ 187.533433][ T6987] loop2: detected capacity change from 0 to 32768 [ 187.685183][ T6987] (syz.2.880,6987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.688523][ T6987] (syz.2.880,6987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.915537][ T6987] JBD2: Ignoring recovery information on journal [ 188.082228][ T6987] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.480218][ T6995] udc-core: couldn't find an available UDC or it's busy [ 188.481415][ T6995] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 189.002837][ T4054] ocfs2: Unmounting device (7,2) on (node local) [ 189.273799][ T7002] loop2: detected capacity change from 0 to 512 [ 189.320934][ T7002] EXT4-fs (loop2): Ignoring removed nobh option [ 189.322218][ T7002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.332749][ T7005] loop0: detected capacity change from 0 to 64 [ 189.339825][ T7002] EXT4-fs (loop2): 1 truncate cleaned up [ 189.340880][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 189.687148][ T7010] delete_channel: no stack [ 189.738662][ T7013] loop1: detected capacity change from 0 to 512 [ 189.765299][ T7013] EXT4-fs (loop1): Ignoring removed nobh option [ 189.768298][ T7013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.777920][ T7013] EXT4-fs (loop1): 1 truncate cleaned up [ 189.779008][ T7013] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 190.165370][ T7019] udc-core: couldn't find an available UDC or it's busy [ 190.166525][ T7019] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 190.182378][ T7019] __nla_validate_parse: 21 callbacks suppressed [ 190.182386][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 190.238804][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.888'. [ 190.947252][ T7033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 190.998237][ T7035] loop4: detected capacity change from 0 to 64 [ 191.512800][ T7042] delete_channel: no stack [ 191.633331][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 191.635271][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 191.636838][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 191.638387][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 191.639800][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 191.675679][ T7050] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 191.781352][ T7053] loop0: detected capacity change from 0 to 512 [ 191.792217][ T7054] loop2: detected capacity change from 0 to 512 [ 191.825263][ T7054] EXT4-fs (loop2): Ignoring removed nobh option [ 191.828606][ T7054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.841998][ T7054] EXT4-fs (loop2): 1 truncate cleaned up [ 191.842879][ T7054] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 191.844873][ T7053] EXT4-fs (loop0): Ignoring removed nobh option [ 191.848644][ T7053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.929210][ T7054] netlink: 128 bytes leftover after parsing attributes in process `syz.2.900'. [ 191.930672][ T7054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.900'. [ 191.942119][ T7053] EXT4-fs (loop0): 1 truncate cleaned up [ 191.946315][ T7053] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 192.418772][ T7068] netlink: 'syz.4.906': attribute type 10 has an invalid length. [ 192.462040][ T7073] tipc: Enabling of bearer rejected, already enabled [ 192.503867][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.505022][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.773164][ T5952] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.888732][ T7086] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 193.352587][ T7094] loop2: detected capacity change from 0 to 64 [ 193.413723][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.416083][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 193.673164][ T5952] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 193.675911][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.679030][ T5952] usb 1-1: Product: syz [ 193.679783][ T5952] usb 1-1: Manufacturer: syz [ 193.680712][ T5952] usb 1-1: SerialNumber: syz [ 193.689488][ T5952] usb 1-1: config 0 descriptor?? [ 193.796732][ T7100] loop3: detected capacity change from 0 to 512 [ 193.798841][ T7099] loop1: detected capacity change from 0 to 512 [ 193.837494][ T7100] EXT4-fs (loop3): Ignoring removed nobh option [ 193.838529][ T7100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.840026][ T7099] EXT4-fs (loop1): Ignoring removed nobh option [ 193.841045][ T7099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.851848][ T7100] EXT4-fs (loop3): 1 truncate cleaned up [ 193.856402][ T7100] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 193.862100][ T7099] EXT4-fs (loop1): 1 truncate cleaned up [ 193.866553][ T7099] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 194.045588][ T7109] tipc: Enabling of bearer rejected, already enabled [ 194.118579][ T5952] usb 1-1: USB disconnect, device number 4 [ 194.138570][ T7114] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 194.205848][ T7119] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 195.903317][ T7131] loop1: detected capacity change from 0 to 32768 [ 195.903579][ T7130] loop4: detected capacity change from 0 to 32768 [ 197.322869][ T7115] udevd[7115]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.583890][ T7135] loop2: detected capacity change from 0 to 512 [ 198.613827][ T7137] netlink: 'syz.0.929': attribute type 10 has an invalid length. [ 198.675936][ T7135] EXT4-fs (loop2): Ignoring removed nobh option [ 198.676989][ T7135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.691766][ T7143] tipc: Enabling of bearer rejected, already enabled [ 198.698315][ T7143] device syzkaller0 entered promiscuous mode [ 198.699386][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 198.835302][ T7135] EXT4-fs (loop2): 1 truncate cleaned up [ 198.836252][ T7135] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 198.891522][ T7152] loop4: detected capacity change from 0 to 512 [ 198.904348][ T7135] __nla_validate_parse: 14 callbacks suppressed [ 198.904356][ T7135] netlink: 128 bytes leftover after parsing attributes in process `syz.2.928'. [ 198.906800][ T7135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.928'. [ 199.004257][ T7152] EXT4-fs (loop4): Ignoring removed nobh option [ 199.005359][ T7152] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.012502][ T7155] loop1: detected capacity change from 0 to 64 [ 199.030419][ T7152] EXT4-fs (loop4): 1 truncate cleaned up [ 199.031289][ T7152] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 199.156817][ T7152] netlink: 128 bytes leftover after parsing attributes in process `syz.4.933'. [ 199.158227][ T7152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.933'. [ 199.174438][ T7162] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 199.211269][ T7167] loop2: detected capacity change from 0 to 64 [ 199.452372][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 199.454313][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 199.455818][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 199.457267][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 199.458649][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 199.612355][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 199.902846][ T7179] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 200.643873][ T7184] loop3: detected capacity change from 0 to 32768 [ 200.723542][ T7184] (syz.3.942,7184,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 200.726897][ T7184] (syz.3.942,7184,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.072521][ T7184] JBD2: Ignoring recovery information on journal [ 201.389291][ T7184] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 201.558195][ T4045] ocfs2: Unmounting device (7,3) on (node local) [ 201.604336][ T7201] tipc: Enabling of bearer rejected, already enabled [ 201.752017][ T7207] loop4: detected capacity change from 0 to 512 [ 201.919784][ T7207] EXT4-fs (loop4): Ignoring removed nobh option [ 201.920855][ T7207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.932485][ T7215] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 201.938153][ T7207] EXT4-fs (loop4): 1 truncate cleaned up [ 201.939005][ T7207] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 201.956444][ T7215] device syzkaller0 left promiscuous mode [ 201.957444][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 202.094966][ T7230] loop1: detected capacity change from 0 to 64 [ 202.229882][ T7236] tipc: Enabling of bearer rejected, failed to enable media [ 202.276825][ T7238] loop4: detected capacity change from 0 to 64 [ 202.749374][ T7246] loop2: detected capacity change from 0 to 1024 [ 202.799897][ T7246] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.689278][ T7255] loop2: detected capacity change from 0 to 512 [ 203.738103][ T7255] EXT4-fs (loop2): Ignoring removed nobh option [ 203.739163][ T7255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.746687][ T7258] loop0: detected capacity change from 0 to 512 [ 203.768859][ T7258] EXT4-fs (loop0): Ignoring removed nobh option [ 203.770030][ T7258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.773327][ T7255] EXT4-fs (loop2): 1 truncate cleaned up [ 203.774248][ T7255] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 203.900370][ T7258] EXT4-fs (loop0): 1 truncate cleaned up [ 203.901593][ T7258] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 203.916008][ T7258] __nla_validate_parse: 25 callbacks suppressed [ 203.916016][ T7258] netlink: 128 bytes leftover after parsing attributes in process `syz.0.965'. [ 203.918376][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.965'. [ 203.949806][ T7263] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 203.960568][ T7263] device syzkaller0 left promiscuous mode [ 203.965960][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 204.001852][ T7265] netlink: 128 bytes leftover after parsing attributes in process `syz.2.964'. [ 204.008472][ T7265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.964'. [ 204.101388][ T7274] tipc: Enabling of bearer rejected, failed to enable media [ 204.111739][ T7274] device syzkaller0 entered promiscuous mode [ 204.123524][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 204.428644][ T7282] loop4: detected capacity change from 0 to 64 [ 204.461315][ T7283] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 204.708668][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 204.714671][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 204.718990][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 204.724076][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 204.728820][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 205.069224][ T7295] loop3: detected capacity change from 0 to 1024 [ 205.512010][ T7295] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.664086][ T7305] loop0: detected capacity change from 0 to 64 [ 206.069116][ T7309] loop2: detected capacity change from 0 to 512 [ 206.094324][ T7309] EXT4-fs (loop2): Ignoring removed nobh option [ 206.095356][ T7309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.114691][ T7309] EXT4-fs (loop2): 1 truncate cleaned up [ 206.115583][ T7309] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 206.124599][ T7309] netlink: 128 bytes leftover after parsing attributes in process `syz.2.979'. [ 206.150259][ T7312] netlink: 'syz.3.980': attribute type 10 has an invalid length. [ 206.284468][ T7322] tipc: Enabling of bearer rejected, failed to enable media [ 207.194142][ T7339] loop2: detected capacity change from 0 to 40427 [ 207.240071][ T7339] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 207.241515][ T7339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 207.246529][ T7339] F2FS-fs (loop2): invalid crc value [ 207.279035][ T7339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.301651][ T7339] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 207.302877][ T7339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.553172][ T7370] tipc: Enabling of bearer rejected, failed to enable media [ 208.572820][ T7372] netlink: 'syz.2.995': attribute type 10 has an invalid length. [ 208.589375][ T7372] device syzkaller0 left promiscuous mode [ 208.591550][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 208.941020][ T7386] __nla_validate_parse: 12 callbacks suppressed [ 208.941032][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 208.967427][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 208.999563][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 209.002387][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 209.003309][ T7389] loop4: detected capacity change from 0 to 64 [ 209.004824][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 209.541628][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 209.553486][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 209.554971][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 209.556486][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 209.578244][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 210.310822][ T7404] tipc: Enabling of bearer rejected, failed to enable media [ 210.317961][ T7404] device syzkaller0 entered promiscuous mode [ 210.320351][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 210.409455][ T7411] netlink: 'syz.3.1011': attribute type 10 has an invalid length. [ 211.189517][ T7432] loop4: detected capacity change from 0 to 32768 [ 211.227381][ T7432] (syz.4.1017,7432,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 211.229840][ T7432] (syz.4.1017,7432,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 211.242409][ T7432] JBD2: Ignoring recovery information on journal [ 211.262125][ T7432] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 211.566724][ T7441] tipc: Enabling of bearer rejected, failed to enable media [ 211.580026][ T4052] ocfs2: Unmounting device (7,4) on (node local) [ 211.779382][ T7452] netlink: 'syz.4.1023': attribute type 10 has an invalid length. [ 211.790644][ T7452] device syzkaller0 left promiscuous mode [ 211.798900][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 211.919788][ T7457] loop4: detected capacity change from 0 to 64 [ 213.402617][ T7480] tipc: Enabling of bearer rejected, failed to enable media [ 213.729005][ T7488] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 214.122790][ T7492] loop1: detected capacity change from 0 to 32768 [ 215.246853][ T7498] loop4: detected capacity change from 0 to 64 [ 215.272102][ T7492] (syz.1.1034,7492,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.274863][ T7492] (syz.1.1034,7492,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.342634][ T7492] JBD2: Ignoring recovery information on journal [ 215.456575][ T7510] __nla_validate_parse: 12 callbacks suppressed [ 215.456596][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 215.461149][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 215.463935][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 215.466565][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 215.468545][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 215.561293][ T7492] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 215.840763][ T4046] ocfs2: Unmounting device (7,1) on (node local) [ 215.966909][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 215.968906][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 215.978470][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 215.995297][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 216.008701][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 216.023408][ T7518] tipc: Enabling of bearer rejected, failed to enable media [ 217.462670][ T7547] tipc: Enabling of bearer rejected, failed to enable media [ 217.473326][ T7547] device syzkaller0 entered promiscuous mode [ 217.474480][ T7547] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 219.105059][ T7589] udc-core: couldn't find an available UDC or it's busy [ 219.106268][ T7589] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 219.939058][ T7594] loop1: detected capacity change from 0 to 64 [ 220.071874][ T7596] netlink: 'syz.0.1069': attribute type 10 has an invalid length. [ 220.074487][ T7596] device syzkaller0 left promiscuous mode [ 220.075600][ T7596] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 221.001820][ T7610] syz.4.1072 (7610): drop_caches: 2 [ 221.003426][ T7610] syz.4.1072 (7610): drop_caches: 2 [ 221.282023][ T7612] loop0: detected capacity change from 0 to 64 [ 221.642830][ T7619] __nla_validate_parse: 11 callbacks suppressed [ 221.642840][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 221.661517][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 221.669085][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 221.670641][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 221.672087][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 221.938589][ T7628] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1076'. [ 222.356012][ T7631] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 222.358269][ T7631] device syzkaller0 left promiscuous mode [ 222.359352][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 223.768743][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 223.770643][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 223.772315][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 223.774129][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 224.229823][ T7671] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 224.263984][ T7675] syz.0.1087 (7675): drop_caches: 2 [ 224.265002][ T7675] syz.0.1087 (7675): drop_caches: 2 [ 224.287044][ T7674] trusted_key: encrypted_key: insufficient parameters specified [ 224.771824][ T7682] loop1: detected capacity change from 0 to 64 [ 226.334248][ T7712] netlink: 'syz.1.1103': attribute type 10 has an invalid length. [ 226.645598][ T7712] device syzkaller0 left promiscuous mode [ 226.652093][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 226.745536][ T7724] trusted_key: encrypted_key: insufficient parameters specified [ 226.763523][ T7726] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 226.889741][ T7733] loop3: detected capacity change from 0 to 64 [ 227.377482][ T7746] __nla_validate_parse: 17 callbacks suppressed [ 227.377516][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 227.388000][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 227.394414][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 227.401016][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 227.404442][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 228.049953][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 228.051816][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 228.053663][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 228.055295][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 228.056799][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 228.128327][ T7761] netlink: 'syz.3.1117': attribute type 10 has an invalid length. [ 228.178300][ T7765] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 228.440726][ T7776] loop2: detected capacity change from 0 to 64 [ 228.999803][ T7788] trusted_key: encrypted_key: insufficient parameters specified [ 229.253156][ T7792] loop1: detected capacity change from 0 to 64 [ 229.259430][ T7793] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 229.299086][ T7797] loop3: detected capacity change from 0 to 64 [ 229.769678][ T7804] netlink: 'syz.4.1134': attribute type 10 has an invalid length. [ 229.794462][ T7804] device syzkaller0 left promiscuous mode [ 229.795625][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 229.859316][ T7808] device syzkaller0 entered promiscuous mode [ 229.860518][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 230.749517][ T7830] tipc: Enabling of bearer rejected, failed to enable media [ 230.770253][ T7832] netlink: 'syz.1.1141': attribute type 10 has an invalid length. [ 231.190490][ T7841] netlink: 'syz.4.1146': attribute type 10 has an invalid length. [ 231.193243][ T7841] device syzkaller0 left promiscuous mode [ 231.194318][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 231.260912][ T7846] device syzkaller0 entered promiscuous mode [ 231.262192][ T7846] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 231.676836][ T7866] tipc: Enabling of bearer rejected, failed to enable media [ 231.860153][ T7872] loop1: detected capacity change from 0 to 64 [ 232.318064][ T7878] netlink: 'syz.4.1158': attribute type 10 has an invalid length. [ 232.326880][ T7878] device syzkaller0 left promiscuous mode [ 232.328064][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 232.393468][ T7882] device syzkaller0 entered promiscuous mode [ 232.394603][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 232.424839][ T7886] loop0: detected capacity change from 0 to 64 [ 232.830337][ T7898] __nla_validate_parse: 42 callbacks suppressed [ 232.830347][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 232.840758][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 232.851995][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 232.862707][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 232.871726][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 233.158258][ T7900] tipc: Enabling of bearer rejected, failed to enable media [ 233.351002][ T7908] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 233.511373][ T7916] device syzkaller0 entered promiscuous mode [ 233.517321][ T7916] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 233.658531][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 233.660416][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 233.662128][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 233.663795][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 233.665376][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 233.941910][ T7930] tipc: Enabling of bearer rejected, failed to enable media [ 234.686373][ T7945] netlink: 'syz.4.1182': attribute type 10 has an invalid length. [ 234.688721][ T7945] device syzkaller0 left promiscuous mode [ 234.689815][ T7945] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 234.691365][ T7946] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 234.867185][ T7953] device syzkaller0 entered promiscuous mode [ 234.871735][ T7953] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 235.299244][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 236.238856][ T7984] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 236.244568][ T7984] device syzkaller0 left promiscuous mode [ 236.248118][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 236.335527][ T7986] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 237.405697][ T8000] tipc: Enabling of bearer rejected, failed to enable media [ 237.836199][ T8011] __nla_validate_parse: 16 callbacks suppressed [ 237.836210][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 237.839309][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 237.840809][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 237.842163][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 237.843656][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 237.892560][ T8015] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 238.583025][ C0] ================================================================== [ 238.584318][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x40c/0x470 [ 238.585363][ C0] Read of size 2 at addr ffff0000cf009c2a by task syz-executor/4052 [ 238.586569][ C0] [ 238.586882][ C0] CPU: 0 PID: 4052 Comm: syz-executor Not tainted 5.15.189-syzkaller #0 [ 238.588017][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 238.589405][ C0] Call trace: [ 238.589896][ C0] dump_backtrace+0x0/0x43c [ 238.590505][ C0] show_stack+0x2c/0x3c [ 238.591107][ C0] __dump_stack+0x30/0x40 [ 238.591767][ C0] dump_stack_lvl+0xf8/0x160 [ 238.592423][ C0] print_address_description+0x78/0x30c [ 238.593244][ C0] kasan_report+0xec/0x15c [ 238.593887][ C0] __asan_report_load2_noabort+0x44/0x50 [ 238.594711][ C0] rose_timer_expiry+0x40c/0x470 [ 238.595399][ C0] call_timer_fn+0x19c/0x858 [ 238.596088][ C0] __run_timers+0x46c/0x6c4 [ 238.596767][ C0] run_timer_softirq+0x7c/0x114 [ 238.597454][ C0] handle_softirqs+0x344/0xbf0 [ 238.598230][ C0] __irq_exit_rcu+0x240/0x440 [ 238.599000][ C0] irq_exit+0x14/0x88 [ 238.599635][ C0] handle_domain_irq+0x14c/0x1fc [ 238.600428][ C0] gic_handle_irq+0x78/0x1c8 [ 238.601178][ C0] call_on_irq_stack+0x24/0x30 [ 238.601996][ C0] do_interrupt_handler+0x6c/0x88 [ 238.602812][ C0] el1_interrupt+0x30/0x58 [ 238.603470][ C0] el1h_64_irq_handler+0x18/0x24 [ 238.604232][ C0] el1h_64_irq+0x78/0x7c [ 238.604888][ C0] __schedule+0x1408/0x1c0c [ 238.605576][ C0] preempt_schedule_irq+0x90/0x214 [ 238.606347][ C0] arm64_preempt_schedule_irq+0x14c/0x21c [ 238.607216][ C0] el1_interrupt+0x40/0x58 [ 238.607872][ C0] el1h_64_irq_handler+0x18/0x24 [ 238.608596][ C0] el1h_64_irq+0x78/0x7c [ 238.609282][ C0] arch_local_irq_restore+0x8/0x10 [ 238.610036][ C0] ___might_sleep+0x48/0x4d4 [ 238.610718][ C0] __might_sleep+0x98/0x124 [ 238.611400][ C0] __might_fault+0x80/0x128 [ 238.612109][ C0] do_notify_resume+0x874/0x3128 [ 238.612954][ C0] el0_svc+0xf0/0x1e0 [ 238.613610][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 238.614453][ C0] el0t_64_sync+0x1a0/0x1a4 [ 238.615185][ C0] [ 238.615551][ C0] The buggy address belongs to the page: [ 238.616454][ C0] page:000000003da00202 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f009 [ 238.618047][ C0] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 238.619260][ C0] raw: 05ffc00000000000 fffffc0003a8b148 fffffc0003c14a88 0000000000000000 [ 238.620620][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 238.621999][ C0] page dumped because: kasan: bad access detected [ 238.623011][ C0] [ 238.623389][ C0] Memory state around the buggy address: [ 238.624239][ C0] ffff0000cf009b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.625509][ C0] ffff0000cf009b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.626831][ C0] >ffff0000cf009c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.628045][ C0] ^ [ 238.628866][ C0] ffff0000cf009c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.630085][ C0] ffff0000cf009d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.631321][ C0] ================================================================== [ 238.632569][ C0] Disabling lock debugging due to kernel taint SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 238.657428][ T4052] BUG: Bad page map in process syz-executor pte:6800012609fbc3 pmd:800000126ade003 [ 238.658883][ T4052] page:0000000095556ab9 refcount:1 mapcount:-1 mapping:0000000000000000 index:0x0 pfn:0x12609f [ 238.660385][ T4052] flags: 0x5ffc00000000002(referenced|node=0|zone=2|lastcpupid=0x7ff) [ 238.661574][ T4052] raw: 05ffc00000000002 0000000000000000 dead000000000122 0000000000000000 [ 238.663070][ T4052] raw: 0000000000000000 0000000000000000 00000001fffffffe 0000000000000000 [ 238.664470][ T4052] page dumped because: bad pte [ 238.665212][ T4052] addr:0000ffffa9175000 vm_flags:100400fb anon_vma:0000000000000000 mapping:ffff0000c04fdb78 index:2c7 [ 238.666951][ T4052] file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0 [ 238.668011][ T4052] CPU: 0 PID: 4052 Comm: syz-executor Tainted: G B 5.15.189-syzkaller #0 [ 238.669585][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 238.671138][ T4052] Call trace: [ 238.671633][ T4052] dump_backtrace+0x0/0x43c [ 238.672318][ T4052] show_stack+0x2c/0x3c [ 238.672996][ T4052] __dump_stack+0x30/0x40 [ 238.673661][ T4052] dump_stack_lvl+0xf8/0x160 [ 238.674447][ T4052] dump_stack+0x1c/0x5c [ 238.675091][ T4052] print_bad_pte+0x4d0/0x504 [ 238.675827][ T4052] unmap_page_range+0x1440/0x1958 [ 238.676643][ T4052] unmap_single_vma+0x13c/0x1e4 [ 238.677455][ T4052] unmap_vmas+0x104/0x200 [ 238.678143][ T4052] exit_mmap+0x2a8/0x4e0 [ 238.678833][ T4052] __mmput+0xec/0x3b8 [ 238.679488][ T4052] mmput+0x80/0xc8 [ 238.680122][ T4052] exit_mm+0x4a0/0x684 [ 238.680754][ T4052] do_exit+0x4ec/0x1f58 [ 238.681463][ T4052] do_group_exit+0x100/0x268 [ 238.682214][ T4052] __wake_up_parent+0x0/0x60 [ 238.682955][ T4052] invoke_syscall+0x98/0x2b8 [ 238.683679][ T4052] el0_svc_common+0x138/0x258 [ 238.684410][ T4052] do_el0_svc+0x58/0x14c [ 238.685046][ T4052] el0_svc+0x78/0x1e0 [ 238.685617][ T4052] el0t_64_sync_handler+0xcc/0xe4 [ 238.686375][ T4052] el0t_64_sync+0x1a0/0x1a4 [ 238.693116][ T4052] BUG: Bad page state in process syz-executor pfn:12609f [ 238.694132][ T4052] page:0000000095556ab9 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x0 pfn:0x12609f [ 238.695688][ T4052] flags: 0x5ffc00000000002(referenced|node=0|zone=2|lastcpupid=0x7ff) [ 238.696894][ T4052] raw: 05ffc00000000002 ffff80001f2277c0 ffff80001f2277c0 0000000000000000 [ 238.698185][ T4052] raw: 0000000000000000 0000000000000000 00000000fffffffe 0000000000000000 [ 238.699549][ T4052] page dumped because: nonzero mapcount [ 238.700429][ T4052] Modules linked in: [ 238.701043][ T4052] CPU: 0 PID: 4052 Comm: syz-executor Tainted: G B 5.15.189-syzkaller #0 [ 238.702500][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 238.704011][ T4052] Call trace: [ 238.704507][ T4052] dump_backtrace+0x0/0x43c [ 238.705288][ T4052] show_stack+0x2c/0x3c [ 238.705986][ T4052] __dump_stack+0x30/0x40 [ 238.706708][ T4052] dump_stack_lvl+0xf8/0x160 [ 238.707496][ T4052] dump_stack+0x1c/0x5c [ 238.708178][ T4052] bad_page+0x188/0x1a8 [ 238.708914][ T4052] check_free_page_bad+0xf4/0x16c [ 238.709664][ T4052] free_unref_page_prepare+0x744/0xaa0 [ 238.710465][ T4052] free_unref_page_list+0xdc/0x754 [ 238.711253][ T4052] release_pages+0x13c8/0x16e0 [ 238.711967][ T4052] free_pages_and_swap_cache+0xa0/0xb8 [ 238.712767][ T4052] tlb_finish_mmu+0x170/0x324 [ 238.713508][ T4052] exit_mmap+0x2c4/0x4e0 [ 238.714185][ T4052] __mmput+0xec/0x3b8 [ 238.714819][ T4052] mmput+0x80/0xc8 [ 238.715435][ T4052] exit_mm+0x4a0/0x684 [ 238.716109][ T4052] do_exit+0x4ec/0x1f58 [ 238.716825][ T4052] do_group_exit+0x100/0x268 [ 238.717553][ T4052] __wake_up_parent+0x0/0x60 [ 238.718266][ T4052] invoke_syscall+0x98/0x2b8 [ 238.718994][ T4052] el0_svc_common+0x138/0x258 [ 238.719773][ T4052] do_el0_svc+0x58/0x14c [ 238.720506][ T4052] el0_svc+0x78/0x1e0 [ 238.721100][ T4052] el0t_64_sync_handler+0xcc/0xe4 [ 238.721883][ T4052] el0t_64_sync+0x1a0/0x1a4 [ 238.785737][ T4052] page:0000000095556ab9 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12609f [ 238.787401][ T4052] flags: 0x5ffc00000000002(referenced|node=0|zone=2|lastcpupid=0x7ff) [ 238.788733][ T4052] raw: 05ffc00000000002 dead000000000100 dead000000000122 0000000000000000 [ 238.790161][ T4052] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 238.791469][ T4052] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 238.792740][ T4052] ------------[ cut here ]------------ [ 238.793574][ T4052] kernel BUG at include/linux/mm.h:747! [ 238.794401][ T4052] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 238.795552][ T4052] Modules linked in: [ 238.796140][ T4052] CPU: 1 PID: 4052 Comm: syz-executor Tainted: G B 5.15.189-syzkaller #0 [ 238.797705][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 238.799207][ T4052] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 238.800304][ T4052] pc : __free_pages+0x1d0/0x1d4 [ 238.800984][ T4052] lr : __free_pages+0x1d0/0x1d4 [ 238.801718][ T4052] sp : ffff80001f227980 [ 238.802322][ T4052] x29: ffff80001f227980 x28: ffff0000cd819400 x27: ffff0000cd819418 [ 238.803678][ T4052] x26: 00000000000002c8 x25: ffff80001139ec60 x24: ffff80001b874638 [ 238.804933][ T4052] x23: dfff800000000000 x22: 05ffc00000000002 x21: fffffc00039827f4 [ 238.806133][ T4052] x20: 0000000000000000 x19: fffffc00039827c0 x18: 0000000000000001 [ 238.807323][ T4052] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 238.808486][ T4052] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 238.809746][ T4052] x11: 0000000000000000 x10: 0000000000000000 x9 : ed3e6f747acf1f00 [ 238.811117][ T4052] x8 : ed3e6f747acf1f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 238.812435][ T4052] x5 : ffff80001f226f98 x4 : ffff80001424f400 x3 : ffff80000850433c [ 238.813694][ T4052] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003e [ 238.815006][ T4052] Call trace: [ 238.815567][ T4052] __free_pages+0x1d0/0x1d4 [ 238.816292][ T4052] __vunmap+0x7fc/0x9bc [ 238.816953][ T4052] vfree+0xbc/0x154 [ 238.817554][ T4052] kcov_close+0x44/0xa0 [ 238.818194][ T4052] __fput+0x1c0/0x7f8 [ 238.818810][ T4052] ____fput+0x20/0x30 [ 238.819423][ T4052] task_work_run+0x12c/0x1e0 [ 238.820092][ T4052] do_exit+0x684/0x1f58 [ 238.820709][ T4052] do_group_exit+0x100/0x268 [ 238.821455][ T4052] __wake_up_parent+0x0/0x60 [ 238.822181][ T4052] invoke_syscall+0x98/0x2b8 [ 238.822883][ T4052] el0_svc_common+0x138/0x258 [ 238.823606][ T4052] do_el0_svc+0x58/0x14c [ 238.824243][ T4052] el0_svc+0x78/0x1e0 [ 238.824838][ T4052] el0t_64_sync_handler+0xcc/0xe4 [ 238.825632][ T4052] el0t_64_sync+0x1a0/0x1a4 [ 238.826410][ T4052] Code: d0046001 91398021 aa1303e0 97fe3f44 (d4210000) [ 238.827529][ T4052] ---[ end trace b7324ae40bf4e25e ]--- [ 239.116931][ T4052] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 239.117951][ T4052] SMP: stopping secondary CPUs [ 239.118639][ T4052] Kernel Offset: disabled [ 239.119314][ T4052] CPU features: 0x8,000003c1,7d33ffd9 [ 239.120164][ T4052] Memory Limit: none [ 239.400822][ T4052] Rebooting in 86400 seconds..