last executing test programs: 2m30.775063332s ago: executing program 2 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m30.48408884s ago: executing program 2 (id=1575): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000000)='y\x105\xfb\x14u\x83%:r\xc2\x00!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\x04M\xc0]\xde\x19\n\xd7\xf5\x00\xf6\xc5\x90\xd0\xea\x90\xbc\x1e\x9d5v9\xf2. \x15\x16\xa1\xd7\x9fY\'\xfe\x85\xbb\xad&\xd6\xa2\xf1P\x99_p\xc6\xb9\x1d\\\x11\xad\xe0\xbd\"\xce\xcb\xe6\x93\x828\xea\x04\x00\x00\x00\xe9x\xabyq\xbe\xdf\x1f\xad\xa6(\xc2M\xea$\x01~\x13\xda\xc9|@\xee\xab\xab#TS\xf9)+\x00\x00\x8f\xa6i\xbb\x96>\xc916\x86\xecn\x00\x95^am\xf3\xbb)\xcb\xed\"`\xc8/\t\xe2U\xd225\xe2\x02\xc9\x15\x04#\xe3\x06{V\x9d\xfb\x9a\x9d\xc7\x9af\xe3-\fr\x03\xe7R~M\xa2\xbdG\x96\xf4\xf1\xb7&S\xf1\xbd\x9e\xb91\xd0]g\xd0Z\v\xd4X\xec\x8a\xb9w\xcby\xfe\xf9\xe1\xac\x91\xaa\xb1?\xe1\x1bi\x93\xff\xf0\xf6 \xf6\xd6\x8c1\xd6P\xd3\xd1\x03!\x12\xbeb\xb6\xf8u\r\xfcI\xdbB9\x1d\x03\x11({Jb8@x\x8b\xc2\xc1\x9eL\x85\x04\x98}o\xad\xb7X\xed\xa5\x82\x99\xf2\b\xde\xdf\xbdn\x82N\xdbDX\xe9\xb9\xad\xd2\xcd1\xac\xbf\xc2\xf0e=\xf6V0p\x1c7\xa4\xae`\x13\xf1H\x18*\x10O\x17\xad~\xc9k\x16\xf6\x8bm\xf4\x8atY\xb1D\x83\xb8\n\x84\x8fr(\x81\x94\x15d>\xd0\xdaf\xd4u\xc9\xf4#\v\xd7\x84\x8f`%\x89@\x82~2\x968\xe6\x9f\x8ey\x9e\xc2;@\xcb\x85\x85\x8e\xa46-P2\x86W\x12\xf2\xdf\xabC\xf9\xb2\x14\xdc\t`\xb8\xdf\xcc\x15[(AfJ \xa6\x98\x19\x89\xae\xb4I;\f\\\v\xa2\x158\xd8\xbe\x99k\xa6\xd9\x99\xf9Uu\x90\xd4\xfd\x90\xd3z\x98w\x8e\xe7\xb5\xe8\xb4\xa3Z\x15\xafTo\xa1\no\x1d\xd9V#8\x7f\xa8r\xef\xa6\xee\xbe7a\r\xfaM\xbf\x15K\xc3\xdc\x02\xd8w\xa5\xeb0\x94\x97\xa6\xaf;n\xc6\xafr\xe7\x05\x7f\xc31v&\x7fd\x03\xe0\xdc\xfd\xc8)\x8a\xda\xce\xbd\xf9\xb5\x92\x8a<\xba\xd6^g\x11\x86\xee\xcfjB\x91\xd4Q\xf5{\xeb}\xd5\xfe\x02X8\"\xdd\x1c-\xa3\x8c\xba\x150*d\xef\x83\xael;~K\x9e7q\x0fi=\xef\b\xc5g\xf6\a\xd5\xe6\t\xa4_\r\xc1\x91G\xe9\xc9E\x88\xd8N3\x9a/S5\xd4Rj\xf4\xea\x7f\xf4\xf90\b\xde\xae%\x8b/$[X\x86I\xeehB\x12\x03*\xecv\xa9\xda\xe2\xbf\xe4\xd7R\x925_\xa2\x99Hf\xda8|F\x14]H\xdae\xb9\x83\\\xbe\x9f\xc8\xb7\xc6\xc1\xb7\xc4\x80\xe4\xee+\xcbl\xb7\x16\x0f #\x93\xa2\x04\x95\x86\x97\xa5\xa0\xe7\xd7\x9a\x1cB\x7f\x128j\x14{b\x8f\xc3\xbb\x9d\x1c\x85\xbc\x9fM\x17\xb9\xc8f\xaa\xcf\xb9\xacY\xc1\xd6*W\xa2j\x1e\xf5\x12\xe4\xdb@\xba\xf0Sx\x9d\xd2\x06\xd9jaL:\x82lc\xf1>\xe9*g\xb7\x82.\x7f\xbb\x10\xc0~\xcc\x85\xe4L\xa6P(\xf6\xec\xa6\xbc\xcf\xe2\xe0\xfa\xa4\xc3.\x1b\x8e\xc8\xc1\xf5\xeav\xb7\xaa\x93\x02\xe9b\xbf8\x966\x8c\xab\vL :|\xb4\x84\xbd\x0fOO\xc0EnYE\x9c(%\xc9x\x1e\x82\x1fHA\xe4\xd7\x98\x83S\xe65\xe5\xdf\x96\xf2N\xe41.\x82R\xf7!\xf9\xb4\xa8\xd3\xe1\xcaFn}N\xc8\x06B\xa0\x82\x05\xcc\xdc\x13\xf7\xc4\xb8$F\xf0*\xb6\xfb\xddg', 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2m30.332873383s ago: executing program 2 (id=1577): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x9801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000000)=0x4006, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x209, 0x70bd28, 0x25dfdbfe, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x1}}]}, 0x1c}}, 0x8800) 2m29.23670162s ago: executing program 2 (id=1581): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='4294967295 2000000000 \\\n', 0x18) 2m28.964114016s ago: executing program 2 (id=1584): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)={[{@nodots}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@usefree}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {@fat=@errors_continue}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) lseek(0xffffffffffffffff, 0x101, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) 2m28.584155035s ago: executing program 2 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='udp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) 2m13.428173331s ago: executing program 32 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='udp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) 5.868353309s ago: executing program 3 (id=2247): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x201002, &(0x7f0000000d00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4.376572385s ago: executing program 3 (id=2249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setregid(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x2100, 0x3) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setreuid(0xee01, 0xee01) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 3.775407739s ago: executing program 1 (id=2253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x81000) 3.515159796s ago: executing program 3 (id=2255): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.503173986s ago: executing program 1 (id=2256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008c40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.194236043s ago: executing program 3 (id=2258): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "0000366834c0a20000b7aac63a0100000000005cc6040700000000770060e000002021e9000000000000000040000000000000d000000000000000000000000f", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 2.831069962s ago: executing program 4 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.628616387s ago: executing program 1 (id=2262): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x24}], 0x1) r0 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1) 2.567628188s ago: executing program 5 (id=2263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.567407478s ago: executing program 0 (id=2264): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) 2.248947706s ago: executing program 0 (id=2265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 2.248663226s ago: executing program 4 (id=2266): openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x88041, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x109042, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.209555477s ago: executing program 1 (id=2267): mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x7d3, 0x0) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) 2.1075541s ago: executing program 3 (id=2268): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x278, 0x5802, 0x294, 0x278, 0x294, 0x390, 0x325, 0x378, 0x390, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x1f8, 0x240, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0xfffffffffffffffe, 0x4, 0x3f, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x80}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0xfffffff7, 0x6, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0xffff, 0x2000, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d99be899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2.054752821s ago: executing program 5 (id=2269): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) 1.990899552s ago: executing program 0 (id=2270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x201002, &(0x7f0000000d00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.912244374s ago: executing program 4 (id=2271): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.701166899s ago: executing program 5 (id=2272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008c40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.68135344s ago: executing program 0 (id=2273): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x44080) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.572176872s ago: executing program 4 (id=2274): unshare(0x2a020400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x22) 1.404086417s ago: executing program 0 (id=2275): mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x300, 0x4}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) syz_open_dev$evdev(0x0, 0x2, 0x2002) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r5 = dup(r4) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.27592272s ago: executing program 1 (id=2276): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000cf000/0x7000)=nil, 0x7000, 0x8) 1.160102492s ago: executing program 5 (id=2277): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") 1.116159184s ago: executing program 4 (id=2278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x80d, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8}}}}]}, 0x38}}, 0x2000a080) 1.030928416s ago: executing program 0 (id=2279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 998.411086ms ago: executing program 3 (id=2280): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 393.046201ms ago: executing program 33 (id=2280): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 372.410991ms ago: executing program 5 (id=2282): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff"], 0x34}}, 0x0) 372.224891ms ago: executing program 4 (id=2283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x201002, &(0x7f0000000d00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 115.931268ms ago: executing program 1 (id=2284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0xfffa83) 0s ago: executing program 5 (id=2285): r0 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001dc0)=[{&(0x7f0000000040)=""/35, 0x23}, {0x0}], 0x2, 0x8261, 0x7) kernel console output (not intermixed with test programs): [ 89.344159][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.363654][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.379831][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.388342][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.411092][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.430780][ T4388] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 89.438013][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.534630][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.596354][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.617587][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.643147][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.662708][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.675372][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.685577][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.696456][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.711345][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.840103][ T4390] device syzkaller0 entered promiscuous mode [ 89.869158][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.885192][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.680121][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690756][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.700194][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.711918][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722827][ T4388] device syzkaller1 entered promiscuous mode [ 91.791740][ T4409] tipc: Started in network mode [ 91.797076][ T4409] tipc: Node identity 9a0b0b03ae9, cluster identity 4711 [ 91.818294][ T4409] tipc: Enabled bearer , priority 0 [ 91.891551][ T4417] device syzkaller0 entered promiscuous mode [ 91.905969][ T14] cfg80211: failed to load regulatory.db [ 91.920816][ T4427] device syzkaller0 entered promiscuous mode [ 92.112820][ T4427] tipc: Resetting bearer [ 92.170824][ T4427] tipc: Disabling bearer [ 93.620603][ T4459] ======================================================= [ 93.620603][ T4459] WARNING: The mand mount option has been deprecated and [ 93.620603][ T4459] and is ignored by this kernel. Remove the mand [ 93.620603][ T4459] option from the mount to silence this warning. [ 93.620603][ T4459] ======================================================= [ 96.413213][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432981][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.466443][ T4443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.532913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.591601][ T4458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.620482][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.626635][ T4458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.632637][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.648894][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.681221][ T4458] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 96.694867][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.722207][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.723293][ T4458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.747914][ T4458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.777725][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.820406][ T4472] device bridge_slave_0 left promiscuous mode [ 96.836658][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.847023][ T4458] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 96.894877][ T4458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.909057][ T4458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.952102][ T4458] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 96.961081][ T4472] device bridge_slave_1 left promiscuous mode [ 96.970100][ T4458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.981610][ T4458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.988911][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.009188][ T4458] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 97.020772][ T4472] bond0: (slave bond_slave_0): Releasing backup interface [ 97.038858][ T4458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 97.046509][ T4458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 97.067487][ T4458] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 97.079460][ T4472] bond0: (slave bond_slave_1): Releasing backup interface [ 97.191353][ T4472] team0: Port device team_slave_0 removed [ 97.229113][ T4472] team0: Port device team_slave_1 removed [ 97.248058][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.261055][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.301274][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.328356][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.485628][ T4483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 97.807572][ T4499] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 98.644626][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.783726][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.953785][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.033743][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.113711][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.306782][ T4519] netlink: 'syz.2.38': attribute type 142 has an invalid length. [ 99.728791][ T4526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 100.707146][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 100.823986][ T4542] device syzkaller0 entered promiscuous mode [ 100.898005][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 101.023905][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 101.103725][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 101.183857][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 101.528228][ T4557] lo speed is unknown, defaulting to 1000 [ 101.557027][ T4557] lo speed is unknown, defaulting to 1000 [ 101.582370][ T4557] lo speed is unknown, defaulting to 1000 [ 101.996067][ T4557] infiniband syz0: set active [ 102.014255][ T127] lo speed is unknown, defaulting to 1000 [ 102.073703][ T4557] infiniband syz0: added lo [ 102.302707][ T4557] RDS/IB: syz0: added [ 102.333157][ T4557] smc: adding ib device syz0 with port count 1 [ 102.372655][ T4557] smc: ib device syz0 port 1 has pnetid [ 102.410409][ T33] lo speed is unknown, defaulting to 1000 [ 102.442295][ T4557] lo speed is unknown, defaulting to 1000 [ 102.829521][ T4557] lo speed is unknown, defaulting to 1000 [ 103.864476][ T4557] lo speed is unknown, defaulting to 1000 [ 104.319438][ T4557] lo speed is unknown, defaulting to 1000 [ 105.416026][ T4557] lo speed is unknown, defaulting to 1000 [ 105.725597][ T4612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.731900][ T4612] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.748308][ T4612] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 105.757089][ T4612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.771544][ T4612] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.784705][ T4612] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 105.792208][ T4612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.800328][ T4612] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.864830][ T4612] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 105.896503][ T4612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.127171][ T4612] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.971856][ T4612] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 106.981092][ T4612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.001898][ T4612] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.040914][ T4612] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 107.104483][ T4642] device syzkaller0 entered promiscuous mode [ 107.152924][ T4642] 0: reclassify loop, rule prio 0, protocol 800 [ 107.810554][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.823993][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.830259][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.964628][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.077956][ T4658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 109.023654][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.825901][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 109.851511][ T4684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.88'. [ 109.882143][ T4681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.89'. [ 109.903736][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 109.910007][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 109.993943][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 110.147246][ T4684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.88'. [ 111.005517][ T4683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.040382][ T4683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.057716][ T4683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.112872][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 111.127040][ T4683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.143093][ T4683] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.903751][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.101256][ T4716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.98'. [ 113.103663][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.109744][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.183664][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.184305][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.951890][ T4733] netlink: 68 bytes leftover after parsing attributes in process `syz.1.104'. [ 114.553631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.983851][ T4748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 115.023660][ T4748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 117.365284][ T4784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.118'. [ 119.392341][ T4812] afs: Bad value for 'source' [ 119.475293][ T4812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 119.723186][ T4816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 119.733217][ T4816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 122.613608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 123.157898][ T4861] afs: Bad value for 'source' [ 123.175133][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 123.189881][ T4861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 124.609439][ T4893] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.725846][ T4908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 125.885436][ T4911] afs: Bad value for 'source' [ 125.930549][ T4911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.156'. [ 125.963725][ T4908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 127.155155][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.156'. [ 127.343033][ T4926] device syzkaller0 entered promiscuous mode [ 127.848568][ T4947] netlink: 140 bytes leftover after parsing attributes in process `syz.4.170'. [ 130.918416][ T4977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 131.004433][ T4977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 132.363586][ C0] sched: RT throttling activated [ 132.770275][ T5010] netlink: 140 bytes leftover after parsing attributes in process `syz.4.194'. [ 132.866447][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872825][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.947181][ T5012] device syzkaller0 entered promiscuous mode [ 136.056865][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 136.334826][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 136.552286][ T5072] device syzkaller0 entered promiscuous mode [ 136.892056][ T5083] device syzkaller0 entered promiscuous mode [ 138.673179][ T5111] afs: Bad value for 'source' [ 138.698670][ T5111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.231'. [ 138.714509][ T5111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.231'. [ 139.103609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 139.261628][ T5117] device syzkaller0 entered promiscuous mode [ 139.492323][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 139.539518][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 139.597872][ T5135] netlink: 140 bytes leftover after parsing attributes in process `syz.3.242'. [ 141.586033][ T5153] afs: Bad value for 'source' [ 141.599627][ T5153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 141.612571][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'. [ 141.864684][ T5163] device syzkaller0 entered promiscuous mode [ 142.604329][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'. [ 142.629647][ T5190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'. [ 143.648121][ T5208] afs: Bad value for 'source' [ 143.662348][ T5208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 144.029252][ T5208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 144.214852][ T5222] x_tables: duplicate underflow at hook 3 [ 144.933594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.953596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 145.355940][ T5231] device syzkaller0 entered promiscuous mode [ 146.079153][ T9] wlan1: Trigger new scan to find an IBSS to join [ 146.400900][ T5250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 146.428422][ T5250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 150.944010][ T47] wlan1: Trigger new scan to find an IBSS to join [ 151.227706][ T5298] device syzkaller0 entered promiscuous mode [ 152.225540][ T5209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.448185][ T5310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 152.473949][ T5310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 152.828855][ T5326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 152.873101][ T5326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 152.986681][ T5327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 153.005631][ T5327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 154.495848][ T5366] afs: Bad value for 'source' [ 154.559618][ T5366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'. [ 156.008233][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.054570][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 157.391993][ T5400] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.709355][ T5406] device syzkaller0 entered promiscuous mode [ 162.162570][ T5453] device syzkaller0 entered promiscuous mode [ 162.197126][ T5453] tipc: Started in network mode [ 162.214888][ T5453] tipc: Node identity , cluster identity 4711 [ 162.221372][ T5453] tipc: Failed to obtain node identity [ 162.258852][ T5453] tipc: Enabling of bearer rejected, failed to enable media [ 162.375731][ T5462] device syzkaller0 entered promiscuous mode [ 163.163573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 163.373605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 163.383589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 163.393582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 163.403592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 165.310497][ T5505] device syzkaller0 entered promiscuous mode [ 165.698466][ T5513] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 165.706711][ T5513] netlink: 224 bytes leftover after parsing attributes in process `syz.3.353'. [ 166.482145][ T5506] syz.2.349 (5506) used greatest stack depth: 18128 bytes left [ 173.964175][ T5628] sctp: failed to load transform for md5: -2 [ 175.688642][ T5672] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 179.716103][ T5729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.429'. [ 180.828542][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 180.870089][ T5749] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 182.340159][ T5779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.445'. [ 187.885135][ T5817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.459'. [ 189.034020][ T5836] tipc: Enabling of bearer rejected, failed to enable media [ 190.426091][ T5863] infiniband syz0: set active [ 190.668762][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.868535][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.915927][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.128195][ T4321] lo speed is unknown, defaulting to 1000 [ 192.789304][ T5910] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 192.820832][ T5910] netlink: 'syz.1.479': attribute type 2 has an invalid length. [ 193.242248][ T5921] fuse: Unknown parameter 'group_i00000000000000000000' [ 194.324616][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340089][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.471788][ T5960] netlink: 'syz.3.495': attribute type 142 has an invalid length. [ 195.879947][ T5975] fuse: Unknown parameter 'group_i00000000000000000000' [ 195.971212][ T5977] device syzkaller0 entered promiscuous mode [ 197.383760][ T5998] device syzkaller0 entered promiscuous mode [ 198.038326][ T6027] fuse: Unknown parameter 'group_i00000000000000000000' [ 200.487064][ T6046] rdma_rxe: rxe_register_device failed with error -23 [ 200.510492][ T6046] rdma_rxe: failed to add lo [ 200.746328][ T6055] device syzkaller0 entered promiscuous mode [ 202.136824][ T6069] device syzkaller0 entered promiscuous mode [ 202.292499][ T6086] fuse: Unknown parameter 'group_id00000000000000000000' [ 204.969525][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 206.644141][ T6143] fuse: Unknown parameter 'group_id00000000000000000000' [ 208.073522][ T6172] device syzkaller0 entered promiscuous mode [ 208.460335][ T6188] fuse: Unknown parameter 'group_id00000000000000000000' [ 208.618506][ T6186] device syzkaller0 entered promiscuous mode [ 208.643490][ T6176] tipc: Enabled bearer , priority 0 [ 208.677121][ T6191] tipc: Resetting bearer [ 208.698460][ T6175] tipc: Resetting bearer [ 208.734642][ T6175] tipc: Disabling bearer [ 208.824915][ T6197] batman_adv: batadv0: Adding interface: gretap1 [ 208.844096][ T6197] batman_adv: batadv0: The MTU of interface gretap1 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.994659][ T6197] batman_adv: batadv0: Interface activated: gretap1 [ 210.471825][ T6238] fuse: Bad value for 'user_id' [ 210.560337][ T6241] device syzkaller0 entered promiscuous mode [ 211.381364][ T6251] tipc: Started in network mode [ 211.522061][ T6251] tipc: Node identity 8ec8ea6304d, cluster identity 4711 [ 211.643275][ T6251] tipc: Enabled bearer , priority 0 [ 211.873912][ T6248] tipc: Disabling bearer [ 212.450841][ T6291] fuse: Bad value for 'user_id' [ 212.703286][ T6301] device syzkaller0 entered promiscuous mode [ 214.179565][ T6330] device syzkaller0 entered promiscuous mode [ 214.218368][ T6330] tipc: Enabled bearer , priority 0 [ 214.264185][ T6328] tipc: Resetting bearer [ 214.409025][ T6345] fuse: Bad value for 'user_id' [ 215.170087][ T6328] tipc: Disabling bearer [ 215.457701][ T6356] device syzkaller0 entered promiscuous mode [ 215.762034][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 217.360235][ T6403] fuse: Bad value for 'fd' [ 217.785564][ T6414] tipc: Enabling of bearer rejected, failed to enable media [ 218.276880][ T6421] device syzkaller0 entered promiscuous mode [ 222.320188][ T6442] device syzkaller0 entered promiscuous mode [ 222.363249][ T6442] tipc: Started in network mode [ 222.398830][ T6442] tipc: Node identity 2a95dbfdf72a, cluster identity 4711 [ 222.429540][ T6442] tipc: Enabled bearer , priority 0 [ 222.453309][ T6441] tipc: Resetting bearer [ 222.549741][ T6441] tipc: Disabling bearer [ 222.876264][ T6459] device syzkaller0 entered promiscuous mode [ 223.544877][ T6476] device syzkaller0 entered promiscuous mode [ 227.318977][ T6544] netlink: 6 bytes leftover after parsing attributes in process `syz.2.650'. [ 229.386262][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 229.692614][ T6614] fuse: Bad value for 'fd' [ 231.257718][ T6645] fuse: Bad value for 'fd' [ 231.903960][ T32] wlan1: Trigger new scan to find an IBSS to join [ 232.762112][ T6684] fuse: Bad value for 'fd' [ 233.225152][ T6706] device syzkaller0 entered promiscuous mode [ 233.904157][ T4777] wlan1: Trigger new scan to find an IBSS to join [ 234.422466][ T6728] fuse: Bad value for 'fd' [ 234.523441][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 234.915593][ T6750] device syzkaller0 entered promiscuous mode [ 234.943662][ T4521] wlan1: Trigger new scan to find an IBSS to join [ 234.943956][ T4777] wlan1: Trigger new scan to find an IBSS to join [ 235.234797][ T6758] device syzkaller0 entered promiscuous mode [ 236.053131][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 236.082563][ T6766] fuse: Bad value for 'fd' [ 236.787247][ T6798] device syzkaller0 entered promiscuous mode [ 236.810264][ T6797] device syzkaller0 entered promiscuous mode [ 236.874724][ T4345] wlan1: Trigger new scan to find an IBSS to join [ 236.911911][ T6797] tipc: Enabled bearer , priority 0 [ 236.924535][ T6796] tipc: Resetting bearer [ 236.949465][ T32] wlan1: Trigger new scan to find an IBSS to join [ 236.960525][ T6796] tipc: Disabling bearer [ 237.570647][ T6800] device syzkaller0 entered promiscuous mode [ 237.898133][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.751'. [ 237.904406][ T4777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.965783][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.581282][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 238.642617][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 238.746665][ T6847] tipc: Enabling of bearer rejected, failed to enable media [ 239.354624][ T6856] device syzkaller0 entered promiscuous mode [ 239.671315][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'. [ 239.912097][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.921409][ T9] wlan1: Trigger new scan to find an IBSS to join [ 239.921412][ T11] wlan1: Trigger new scan to find an IBSS to join [ 239.941839][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.125544][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.778'. [ 240.163241][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.778'. [ 240.444958][ T6899] device syzkaller0 entered promiscuous mode [ 241.123926][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.191598][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.205316][ T6904] device syzkaller0 entered promiscuous mode [ 241.215872][ T6904] tipc: Enabled bearer , priority 0 [ 241.229044][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 241.248726][ T6903] tipc: Resetting bearer [ 241.346760][ T6903] tipc: Disabling bearer [ 242.008862][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.798'. [ 242.157118][ T6944] device syzkaller0 entered promiscuous mode [ 242.969504][ T6952] tipc: Enabling of bearer rejected, failed to enable media [ 243.216653][ T6954] device syzkaller0 entered promiscuous mode [ 243.800370][ T6992] fuse: Invalid rootmode [ 244.045377][ T4425] wlan1: Trigger new scan to find an IBSS to join [ 244.217240][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.815'. [ 244.946629][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.091149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.382364][ T7013] device syzkaller0 entered promiscuous mode [ 246.889092][ T7031] fuse: Bad value for 'rootmode' [ 247.162779][ T7041] device syzkaller0 entered promiscuous mode [ 247.351851][ T7046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.828'. [ 248.354313][ T7066] fuse: Bad value for 'rootmode' [ 248.620710][ T7080] device syzkaller0 entered promiscuous mode [ 249.071949][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.849'. [ 249.882828][ T7103] fuse: Bad value for 'rootmode' [ 250.281099][ T7119] device syzkaller0 entered promiscuous mode [ 250.312237][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 251.890556][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.880'. [ 252.416119][ T7181] device syzkaller0 entered promiscuous mode [ 255.225860][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.895'. [ 255.634375][ T7232] device syzkaller0 entered promiscuous mode [ 255.675760][ T7236] fuse: Unknown parameter 'use00000000000000000000' [ 255.753880][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.760243][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.786104][ T7240] device syzkaller0 entered promiscuous mode [ 255.953167][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 257.324075][ T7257] device syzkaller0 entered promiscuous mode [ 257.434761][ T7277] fuse: Unknown parameter 'user_i00000000000000000000' [ 259.393693][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'. [ 259.402693][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'. [ 259.443670][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'. [ 259.452652][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'. [ 260.889896][ T7339] fuse: Unknown parameter 'user_i00000000000000000000' [ 260.933465][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 261.007073][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 261.226183][ T7342] device syzkaller0 entered promiscuous mode [ 263.932584][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 263.994111][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 264.014039][ T7400] device syzkaller0 entered promiscuous mode [ 265.239003][ T7415] device syzkaller0 entered promiscuous mode [ 267.916156][ T7440] tipc: Started in network mode [ 267.921098][ T7440] tipc: Node identity d2d649f92794, cluster identity 4711 [ 267.928459][ T7440] tipc: Enabled bearer , priority 0 [ 267.937454][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 267.946463][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 268.116965][ T7422] tipc: Disabling bearer [ 268.195024][ T7463] device syzkaller0 entered promiscuous mode [ 268.833178][ T7488] device syzkaller0 entered promiscuous mode [ 268.847944][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 268.859180][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 269.759979][ T7492] device syzkaller0 entered promiscuous mode [ 269.783461][ T7498] tipc: Enabled bearer , priority 0 [ 269.836854][ T7505] device syzkaller0 entered promiscuous mode [ 269.890772][ T7493] tipc: Disabling bearer [ 270.467683][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 271.914224][ T5112] wlan1: Trigger new scan to find an IBSS to join [ 271.967599][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 272.378121][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 272.389122][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 272.403898][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 273.630541][ T7550] device syzkaller0 entered promiscuous mode [ 274.304142][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.866255][ T32] wlan1: Trigger new scan to find an IBSS to join [ 275.688844][ T7557] device syzkaller0 entered promiscuous mode [ 276.091142][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 276.111107][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 277.503742][ T4430] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.903922][ T5112] wlan1: Trigger new scan to find an IBSS to join [ 278.874737][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.931846][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.697106][ T7633] device syzkaller0 entered promiscuous mode [ 280.145865][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 280.166960][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 280.245305][ T7629] device syzkaller1 entered promiscuous mode [ 284.367103][ T7685] device syzkaller0 entered promiscuous mode [ 284.545104][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'. [ 284.581770][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'. [ 285.968843][ T7713] lo speed is unknown, defaulting to 1000 [ 286.433422][ T7725] device syzkaller0 entered promiscuous mode [ 286.771830][ T7730] device syzkaller0 entered promiscuous mode [ 290.260565][ T7781] device syzkaller0 entered promiscuous mode [ 291.462458][ T7804] device syzkaller0 entered promiscuous mode [ 291.496951][ T7809] device syzkaller0 entered promiscuous mode [ 293.407497][ T7806] tipc: Enabled bearer , priority 0 [ 293.423412][ T7816] tipc: Resetting bearer [ 293.493942][ T7805] tipc: Resetting bearer [ 293.550410][ T7805] tipc: Disabling bearer [ 294.097785][ T7848] device syzkaller0 entered promiscuous mode [ 295.231220][ T7869] netlink: 'syz.4.1094': attribute type 13 has an invalid length. [ 295.298067][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.344780][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.369734][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.651027][ T7875] device syzkaller0 entered promiscuous mode [ 295.683134][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1094'. [ 295.692435][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1094'. [ 295.801171][ T7890] device syzkaller0 entered promiscuous mode [ 295.886744][ T7894] tipc: Enabled bearer , priority 0 [ 296.439662][ T7890] tipc: Resetting bearer [ 296.683879][ T7889] tipc: Resetting bearer [ 297.091074][ T7889] tipc: Disabling bearer [ 297.129947][ T4321] tipc: Node number set to 882576131 [ 297.789148][ T7973] autofs4:pid:7973:autofs_fill_super: called with bogus options [ 298.185887][ T7980] device syzkaller0 entered promiscuous mode [ 298.481071][ T7991] device syzkaller0 entered promiscuous mode [ 298.528510][ T7994] device syzkaller0 entered promiscuous mode [ 300.201882][ T8002] veth0_macvtap: Caught tx_queue_len zero misconfig [ 301.467544][ T8024] device syzkaller0 entered promiscuous mode [ 301.577600][ T8030] device syzkaller0 entered promiscuous mode [ 302.463869][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.166431][ T8071] device syzkaller0 entered promiscuous mode [ 304.383671][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.317025][ T5265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.605987][ T8133] device syzkaller0 entered promiscuous mode [ 307.651979][ T8145] device syzkaller0 entered promiscuous mode [ 308.867354][ T7929] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.792444][ T8167] device syzkaller0 entered promiscuous mode [ 309.866440][ T8167] tipc: Started in network mode [ 310.088334][ T8167] tipc: Node identity 0603a8738f82, cluster identity 4711 [ 310.495445][ T8167] tipc: Enabled bearer , priority 0 [ 310.698695][ T8166] tipc: Resetting bearer [ 311.364377][ T8166] tipc: Disabling bearer [ 311.424331][ T5265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.623845][ T8199] device syzkaller0 entered promiscuous mode [ 315.025162][ T8250] afs: Bad value for 'source' [ 315.042028][ T8250] lo speed is unknown, defaulting to 1000 [ 315.048328][ T8250] lo speed is unknown, defaulting to 1000 [ 315.062777][ T8250] lo speed is unknown, defaulting to 1000 [ 315.087698][ T8250] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.101853][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1174'. [ 315.138482][ T8250] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 315.311771][ T8254] tipc: Enabled bearer , priority 0 [ 315.321653][ T8253] tipc: Disabling bearer [ 315.331810][ T8250] lo speed is unknown, defaulting to 1000 [ 315.338681][ T8250] lo speed is unknown, defaulting to 1000 [ 315.356375][ T8250] lo speed is unknown, defaulting to 1000 [ 315.362817][ T8250] lo speed is unknown, defaulting to 1000 [ 315.370189][ T8250] lo speed is unknown, defaulting to 1000 [ 315.611279][ T8262] device syzkaller0 entered promiscuous mode [ 317.187725][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.194869][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.645103][ T8281] device syzkaller0 entered promiscuous mode [ 317.652500][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'. [ 317.665702][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'. [ 317.687886][ T8289] device gretap0 entered promiscuous mode [ 317.705385][ T8289] device gretap0 left promiscuous mode [ 317.920964][ T8297] tipc: Enabled bearer , priority 0 [ 317.949713][ T8296] tipc: Disabling bearer [ 318.391682][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 318.609650][ T8322] device syzkaller0 entered promiscuous mode [ 318.658148][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 318.693636][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 318.726824][ T8331] device gretap0 entered promiscuous mode [ 318.749146][ T8331] device gretap0 left promiscuous mode [ 320.749619][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 320.762510][ T8347] device syzkaller0 entered promiscuous mode [ 321.537977][ T8388] device syzkaller0 entered promiscuous mode [ 323.462146][ T8414] tipc: Enabled bearer , priority 0 [ 323.473702][ T8393] tipc: Disabling bearer [ 325.062394][ T8452] device syzkaller0 entered promiscuous mode [ 327.281746][ T8484] tipc: Enabling of bearer rejected, failed to enable media [ 328.701691][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.777131][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.811173][ T8521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.898077][ T8529] tipc: Enabled bearer , priority 0 [ 328.939774][ T8528] tipc: Disabling bearer [ 328.977075][ T8532] device syzkaller0 entered promiscuous mode [ 329.459515][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 329.844443][ T8556] loop2: detected capacity change from 0 to 4096 [ 329.891804][ T8556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.037233][ T8556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 330.112783][ T8570] device syzkaller0 entered promiscuous mode [ 330.456520][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 330.876438][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1281'. [ 330.920548][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1281'. [ 331.337738][ T8605] device syzkaller0 entered promiscuous mode [ 331.427880][ T8608] loop1: detected capacity change from 0 to 1024 [ 331.500101][ T8608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 331.674698][ T8617] 0: reclassify loop, rule prio 0, protocol 03 [ 331.732327][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 332.485547][ T8650] device syzkaller0 entered promiscuous mode [ 332.645248][ T8654] device syzkaller0 entered promiscuous mode [ 333.433266][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 333.524246][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 334.464938][ T5209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.114239][ T8743] device syzkaller0 entered promiscuous mode [ 335.274259][ T8748] 0: reclassify loop, rule prio 0, protocol 03 [ 335.538596][ T8761] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1333'. [ 335.706905][ T8765] device syzkaller0 entered promiscuous mode [ 336.345476][ T8795] device syzkaller0 entered promiscuous mode [ 336.383705][ T70] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.877510][ T8808] 0: reclassify loop, rule prio 0, protocol 03 [ 338.237334][ T8835] device syzkaller0 entered promiscuous mode [ 338.305559][ T5209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.603990][ T8845] tipc: Enabling of bearer rejected, failed to enable media [ 339.325061][ T8875] afs: Bad value for 'source' [ 339.397138][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 340.336324][ T5209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.884537][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1377'. [ 341.294967][ T8913] afs: Bad value for 'source' [ 341.310975][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1379'. [ 342.346301][ T8914] svc: failed to register lockdv1 RPC service (errno 111). [ 342.384038][ T8914] lockd_up: makesock failed, error=-111 [ 343.423884][ T5112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 343.501614][ T8963] afs: Bad value for 'source' [ 343.520563][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1395'. [ 345.017059][ T9001] afs: Bad value for 'source' [ 346.871346][ T9025] afs: Bad value for 'source' [ 346.887532][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1408'. [ 347.642219][ T9026] loop2: detected capacity change from 0 to 512 [ 347.826723][ T9030] 0: reclassify loop, rule prio 0, protocol 03 [ 347.977662][ T9026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 348.059739][ T9026] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.215103][ T9026] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 348.275472][ T9026] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1409: inode #9: comm syz.2.1409: iget: illegal inode # [ 348.315381][ T9051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.323262][ T9051] IPv6: NLM_F_CREATE should be set when creating new route [ 348.340659][ T9026] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1409: error while reading EA inode 9 err=-117 [ 348.369169][ T9026] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1409: inode #9: comm syz.2.1409: iget: illegal inode # [ 348.410553][ T9026] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1409: error while reading EA inode 9 err=-117 [ 348.736702][ T9076] loop3: detected capacity change from 0 to 1024 [ 348.796137][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 348.832807][ T9076] EXT4-fs: Ignoring removed bh option [ 349.079640][ T9076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 349.165970][ T26] audit: type=1800 audit(1785190918.194:2): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1418" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 349.387117][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 349.424523][ T9088] loop2: detected capacity change from 0 to 1024 [ 349.467816][ T9088] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 349.513424][ T9088] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 349.546619][ T9088] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 349.577769][ T9088] EXT4-fs (loop2): invalid journal inode [ 349.584293][ T9092] loop3: detected capacity change from 0 to 1024 [ 349.598377][ T9088] EXT4-fs (loop2): can't get journal size [ 349.643173][ T9088] EXT4-fs error (device loop2): __ext4_fill_super:5465: inode #2: comm syz.2.1419: iget: bad extra_isize 65535 (inode size 1024) [ 349.730178][ T9097] afs: Bad value for 'source' [ 349.742547][ T9088] EXT4-fs (loop2): get root inode failed [ 349.789783][ T9088] EXT4-fs (loop2): mount failed [ 350.455019][ T9092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 350.463792][ T9092] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.546931][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 350.676318][ T9104] 0: reclassify loop, rule prio 0, protocol 03 [ 350.986689][ T9120] tipc: Enabling of bearer rejected, failed to enable media [ 351.080032][ T9122] loop3: detected capacity change from 0 to 128 [ 351.155363][ T9122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 351.177033][ T9126] loop0: detected capacity change from 0 to 512 [ 351.262965][ T9126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.278817][ T9122] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.479214][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 351.879504][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 352.728463][ T9179] 0: reclassify loop, rule prio 0, protocol 03 [ 352.895073][ T9187] svc: failed to register lockdv1 RPC service (errno 111). [ 353.095421][ T9197] loop1: detected capacity change from 0 to 128 [ 353.170926][ T9197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.219997][ T9197] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.581889][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 354.011921][ T9223] FAULT_INJECTION: forcing a failure. [ 354.011921][ T9223] name failslab, interval 1, probability 0, space 0, times 1 [ 354.105194][ T9223] CPU: 1 PID: 9223 Comm: syz.1.1458 Not tainted syzkaller #0 [ 354.112650][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 354.122774][ T9223] Call Trace: [ 354.126092][ T9223] [ 354.129062][ T9223] dump_stack_lvl+0x188/0x24e [ 354.133817][ T9223] ? show_regs_print_info+0x12/0x12 [ 354.139067][ T9223] ? load_image+0x410/0x410 [ 354.143623][ T9223] ? __lock_acquire+0x7c40/0x7c40 [ 354.148707][ T9223] ? _raw_spin_unlock_irq+0x1f/0x40 [ 354.153960][ T9223] should_fail_ex+0x390/0x4c0 [ 354.158695][ T9223] should_failslab+0x5/0x20 [ 354.163240][ T9223] slab_pre_alloc_hook+0x59/0x300 [ 354.168308][ T9223] ? acct_exit_ns+0xe0/0xe0 [ 354.172862][ T9223] kmem_cache_alloc+0x56/0x2f0 [ 354.177718][ T9223] ? taskstats_exit+0x150/0x9e0 [ 354.182644][ T9223] taskstats_exit+0x150/0x9e0 [ 354.187412][ T9223] ? sync_mm_rss+0x211/0x350 [ 354.192068][ T9223] do_exit+0x94b/0x2570 [ 354.196297][ T9223] ? put_task_struct+0x80/0x80 [ 354.201119][ T9223] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 354.207154][ T9223] ? lock_chain_count+0x20/0x20 [ 354.212073][ T9223] ? _raw_spin_unlock_irq+0x1f/0x40 [ 354.217328][ T9223] ? lockdep_hardirqs_on+0x94/0x140 [ 354.222577][ T9223] do_group_exit+0x229/0x2e0 [ 354.227229][ T9223] __x64_sys_exit_group+0x3b/0x40 [ 354.232349][ T9223] do_syscall_64+0x4c/0xa0 [ 354.236824][ T9223] ? clear_bhb_loop+0x60/0xb0 [ 354.241586][ T9223] ? clear_bhb_loop+0x60/0xb0 [ 354.246320][ T9223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.252277][ T9223] RIP: 0033:0x7f6b7539de99 [ 354.256749][ T9223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.276409][ T9223] RSP: 002b:00007ffd627b2fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 354.284884][ T9223] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6b7539de99 [ 354.292908][ T9223] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.300927][ T9223] RBP: 00007ffd627b304c R08: 0000000000000000 R09: 00000000000927c0 [ 354.308951][ T9223] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000133 [ 354.316983][ T9223] R13: 00000000000927c0 R14: 00000000000565d5 R15: 00007ffd627b30a0 [ 354.325015][ T9223] [ 354.573067][ T9253] 0: reclassify loop, rule prio 0, protocol 03 [ 355.371171][ T9270] sock: sock_timestamping_bind_phc: sock not bind to device [ 355.389926][ T9271] loop0: detected capacity change from 0 to 512 [ 355.441565][ T9271] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1467: bad orphan inode 15 [ 355.492781][ T9271] ext4_test_bit(bit=14, block=5) = 0 [ 355.529119][ T9271] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 355.655515][ T9271] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.1467: reserved inode found cleared - inode=1 [ 355.676925][ T9282] loop1: detected capacity change from 0 to 128 [ 355.722793][ T9282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 355.745919][ T9287] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 355.773030][ T9282] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.930044][ T9289] loop2: detected capacity change from 0 to 512 [ 356.014891][ T9289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 356.057450][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 356.066838][ T9289] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.110374][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 356.194099][ T9289] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 356.253023][ T9298] loop4: detected capacity change from 0 to 1024 [ 356.290094][ T9289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1472: inode #9: comm syz.2.1472: iget: illegal inode # [ 356.351425][ T9301] loop1: detected capacity change from 0 to 256 [ 356.361682][ T9289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1472: error while reading EA inode 9 err=-117 [ 356.445882][ T9289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1472: inode #9: comm syz.2.1472: iget: illegal inode # [ 356.574624][ T9289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1472: error while reading EA inode 9 err=-117 [ 356.953393][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 358.140652][ T9362] loop0: detected capacity change from 0 to 128 [ 358.233986][ T9362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 358.242054][ T9362] System zones: 1-3, 19-19, 35-36 [ 358.316821][ T9368] loop3: detected capacity change from 0 to 128 [ 358.334868][ T9362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 358.394913][ T9362] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.467251][ T9350] loop4: detected capacity change from 0 to 8192 [ 358.862234][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 359.716317][ T26] audit: type=1326 audit(1785190928.744:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 359.826040][ T26] audit: type=1326 audit(1785190928.744:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 359.896760][ T9409] loop4: detected capacity change from 0 to 1024 [ 359.943415][ T26] audit: type=1326 audit(1785190928.744:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 360.052387][ T9409] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.1504: lblock 2 mapped to illegal pblock 2 (length 1) [ 360.077484][ T26] audit: type=1326 audit(1785190928.744:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 360.182683][ T9409] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 360.223623][ T9409] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.1504: lblock 0 mapped to illegal pblock 48 (length 1) [ 360.280034][ T9409] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 360.310938][ T9409] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1504: Failed to acquire dquot type 0 [ 360.403149][ T9409] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 360.452019][ T9409] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.1504: mark_inode_dirty error [ 360.501818][ T9409] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 360.547486][ T9409] EXT4-fs (loop4): 1 orphan inode deleted [ 360.573793][ T9409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 360.590565][ T4433] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 360.733321][ T4433] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 360.799633][ T4433] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 0 [ 360.909091][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 360.948452][ T47] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.009620][ T47] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 361.037991][ T47] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 361.066126][ T4274] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 361.145682][ T4274] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 361.164006][ T9441] xt_bpf: check failed: parse error [ 361.180459][ T4274] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 361.313427][ T9445] device syzkaller0 entered promiscuous mode [ 361.472617][ T9453] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1512'. [ 361.815958][ T9461] device syzkaller0 entered promiscuous mode [ 361.992669][ T9463] device syzkaller0 entered promiscuous mode [ 362.010312][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'. [ 362.024964][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 362.045433][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'. [ 362.085385][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 362.585564][ T9482] capability: warning: `syz.4.1528' uses 32-bit capabilities (legacy support in use) [ 362.690522][ T9484] Driver unsupported XDP return value 0 on prog (id 118) dev N/A, expect packet loss! [ 362.889139][ T4373] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 363.057232][ T4373] usb 2-1: device descriptor read/64, error -71 [ 363.349345][ T4373] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 363.503982][ T4373] usb 2-1: device descriptor read/64, error -71 [ 363.635454][ T4373] usb usb2-port1: attempt power cycle [ 364.056092][ T4373] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 364.098302][ T4373] usb 2-1: device descriptor read/8, error -71 [ 364.373684][ T4373] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 364.420446][ T4373] usb 2-1: device descriptor read/8, error -71 [ 364.557472][ T4373] usb usb2-port1: unable to enumerate USB device [ 365.135399][ T9516] loop4: detected capacity change from 0 to 512 [ 365.162157][ T9516] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1534: invalid indirect mapped block 4294967295 (level 1) [ 365.181505][ T9516] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1534: invalid indirect mapped block 4294967295 (level 1) [ 365.205091][ T9516] EXT4-fs (loop4): 2 truncates cleaned up [ 365.210923][ T9516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 365.256069][ T9523] loop0: detected capacity change from 0 to 4096 [ 365.317682][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 365.338091][ T9523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 365.448250][ T9526] autofs4:pid:9526:autofs_fill_super: called with bogus options [ 365.839339][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 366.322019][ T9552] capability: warning: `syz.1.1548' uses deprecated v2 capabilities in a way that may be insecure [ 366.338800][ T9554] loop0: detected capacity change from 0 to 512 [ 366.346877][ T9545] device syzkaller0 entered promiscuous mode [ 366.415587][ T9554] EXT4-fs: Ignoring removed oldalloc option [ 366.466237][ T2928] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.501608][ T9554] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.1547: invalid block [ 366.586751][ T9554] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1547: invalid indirect mapped block 1024 (level 0) [ 366.698829][ T9554] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1547: bg 0: block 35: padding at end of block bitmap is not set [ 366.753253][ T9554] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 366.789491][ T9554] EXT4-fs (loop0): 1 truncate cleaned up [ 366.815697][ T9554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 367.043009][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 367.684026][ T9582] loop1: detected capacity change from 0 to 512 [ 368.192336][ T9582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 368.205657][ T9582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.160422][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.757540][ T7924] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.771088][ T9582] EXT4-fs: error -4 creating inode table initialization thread [ 370.779561][ T9582] EXT4-fs (loop1): mount failed [ 371.488647][ T9599] loop0: detected capacity change from 0 to 256 [ 372.225978][ T7924] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.345641][ T9607] usb usb7: usbfs: process 9607 (syz.0.1563) did not claim interface 0 before use [ 373.328368][ T9617] program syz.2.1566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.521818][ T9622] loop1: detected capacity change from 0 to 256 [ 374.210252][ T9637] loop1: detected capacity change from 0 to 4096 [ 374.219036][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 374.267561][ T9637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 375.067069][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 375.073562][ T4323] usb 4-1: device descriptor read/64, error -71 [ 375.175371][ T9659] program syz.0.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.349360][ T4323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 375.397380][ T9665] loop2: detected capacity change from 0 to 256 [ 375.433789][ T5209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.513647][ T4323] usb 4-1: device descriptor read/64, error -71 [ 375.644983][ T4323] usb usb4-port1: attempt power cycle [ 375.982335][ T9688] tipc: Enabled bearer , priority 0 [ 375.992138][ T9688] tipc: Resetting bearer [ 376.009923][ T9687] tipc: Disabling bearer [ 376.060410][ T4323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 376.114617][ T4323] usb 4-1: device descriptor read/8, error -71 [ 376.301418][ T9699] loop1: detected capacity change from 0 to 512 [ 376.368294][ T9703] tipc: Enabling of bearer rejected, failed to enable media [ 376.393601][ T4323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 376.413988][ T9699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 376.434532][ T4323] usb 4-1: device descriptor read/8, error -71 [ 376.444191][ T9699] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.505663][ T9699] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 376.557459][ T4323] usb usb4-port1: unable to enumerate USB device [ 376.569250][ T9699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1598: inode #9: comm syz.1.1598: iget: illegal inode # [ 376.621511][ T9699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1598: error while reading EA inode 9 err=-117 [ 376.658905][ T9699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1598: inode #9: comm syz.1.1598: iget: illegal inode # [ 376.688662][ T9710] loop0: detected capacity change from 0 to 256 [ 376.696043][ T9699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1598: error while reading EA inode 9 err=-117 [ 376.885192][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 377.063168][ T9718] loop1: detected capacity change from 0 to 1024 [ 377.095869][ T9718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 377.112631][ T9718] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.131281][ T9718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1601: bg 0: block 112: padding at end of block bitmap is not set [ 377.149427][ T9718] EXT4-fs (loop1): Remounting filesystem read-only [ 377.156169][ T9718] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 377.166593][ T9718] EXT4-fs (loop1): Remounting filesystem read-only [ 377.230838][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 377.482866][ T9730] tipc: Enabled bearer , priority 0 [ 377.507811][ T9730] tipc: Resetting bearer [ 377.527196][ T9734] loop0: detected capacity change from 0 to 512 [ 377.545437][ T9729] tipc: Disabling bearer [ 377.555683][ T9734] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 377.648674][ T9734] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 377.702966][ T9734] EXT4-fs (loop0): 1 truncate cleaned up [ 377.709309][ T9734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 377.797382][ T9741] loop4: detected capacity change from 0 to 256 [ 377.805020][ T9739] loop3: detected capacity change from 0 to 512 [ 377.858973][ T9739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.888606][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 377.935689][ T9739] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.967355][ T9745] loop1: detected capacity change from 0 to 1024 [ 378.058050][ T9745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 378.170324][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 378.461289][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 378.627740][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.634194][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.778343][ T9762] device syzkaller0 entered promiscuous mode [ 379.177212][ T9775] loop3: detected capacity change from 0 to 256 [ 379.485743][ T9779] loop3: detected capacity change from 0 to 512 [ 379.539347][ T9781] program syz.4.1629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.573985][ T9779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.601294][ T9779] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.738792][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 379.973206][ T9790] loop3: detected capacity change from 0 to 1024 [ 381.556666][ T9769] device syzkaller0 entered promiscuous mode [ 382.012328][ T9816] loop0: detected capacity change from 0 to 4096 [ 382.083944][ T9816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 382.159020][ T9819] loop4: detected capacity change from 0 to 256 [ 382.272891][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 383.037443][ T9840] loop0: detected capacity change from 0 to 1024 [ 383.057531][ T9835] device syzkaller0 entered promiscuous mode [ 383.089493][ T4439] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 383.205820][ T9837] device syzkaller0 entered promiscuous mode [ 383.486939][ T9851] loop3: detected capacity change from 0 to 4096 [ 383.497515][ T9853] loop0: detected capacity change from 0 to 256 [ 383.563312][ T9851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 383.711147][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 388.169643][ T9891] loop0: detected capacity change from 0 to 1024 [ 388.183355][ T9893] loop4: detected capacity change from 0 to 256 [ 388.281631][ T9896] loop1: detected capacity change from 0 to 512 [ 388.400715][ T9896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 388.438371][ T9896] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.470975][ T9897] loop3: detected capacity change from 0 to 4096 [ 388.533045][ T9897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.565028][ T9896] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.1663: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 388.744769][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 388.775539][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 388.837940][ T9911] loop0: detected capacity change from 0 to 128 [ 388.920449][ T9911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 388.933860][ T9911] System zones: 1-3, 19-19, 35-36 [ 388.945419][ T9911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 388.960605][ T9917] loop1: detected capacity change from 0 to 256 [ 388.996386][ T9911] ext4 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 389.203859][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 389.397001][ T9925] device syzkaller0 entered promiscuous mode [ 389.517090][ T9929] device syzkaller0 entered promiscuous mode [ 389.672657][ T9933] loop1: detected capacity change from 0 to 256 [ 389.761998][ T9935] program syz.0.1675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.813260][ T9937] loop4: detected capacity change from 0 to 1024 [ 390.115956][ T9941] loop1: detected capacity change from 0 to 4096 [ 390.138691][ T9945] loop4: detected capacity change from 0 to 256 [ 390.193261][ T9941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 390.350896][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 390.777632][ T9962] device syzkaller0 entered promiscuous mode [ 390.827681][ T9960] device syzkaller0 entered promiscuous mode [ 391.442149][ T9978] program syz.4.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.659226][ T9982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 391.699051][ T9982] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.808394][ T4294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.818502][ T4294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.830378][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.833360][ T4294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.835760][ T4294] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 391.836066][ T4294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.840119][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.840405][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.840692][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.841494][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.842023][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 391.842312][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.879017][ T9982] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1693: Freeing blocks not in datazone - block = 0, count = 16 [ 392.015806][ T9988] lo speed is unknown, defaulting to 1000 [ 392.077393][ T9987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 392.107088][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 392.168427][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 392.311086][T10000] device syzkaller0 entered promiscuous mode [ 392.484563][T10006] device syzkaller0 entered promiscuous mode [ 392.611195][ T26] audit: type=1800 audit(1785190961.634:7): pid=10004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1699" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 392.669243][ T9988] lo speed is unknown, defaulting to 1000 [ 393.211615][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 393.747998][T10037] program syz.0.1707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.770023][T10034] device syzkaller0 entered promiscuous mode [ 393.780780][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.788779][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.797839][ T9988] device bridge_slave_0 entered promiscuous mode [ 393.809148][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.816661][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.831078][ T9988] device bridge_slave_1 entered promiscuous mode [ 393.887686][T10039] set_capacity_and_notify: 6 callbacks suppressed [ 393.887714][T10039] loop3: detected capacity change from 0 to 4096 [ 393.903898][ T4294] Bluetooth: hci5: command 0x0409 tx timeout [ 393.947134][T10039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 394.135458][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 394.746445][T10060] loop0: detected capacity change from 0 to 1024 [ 395.257878][T10070] loop3: detected capacity change from 0 to 512 [ 395.307093][T10070] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 395.318935][T10070] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.340550][T10070] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1717: bg 0: block 425: padding at end of block bitmap is not set [ 395.391962][T10070] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 395.424630][T10070] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1717: attempt to clear invalid blocks 983260 len 1 [ 395.456037][T10070] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1717: Invalid inode table block 0 in block_group 0 [ 395.481754][T10070] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 395.513631][T10070] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 395.529902][T10070] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.1717: Invalid inode table block 0 in block_group 0 [ 395.543725][T10070] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 395.563933][T10070] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.1717: mark_inode_dirty error [ 395.575560][T10070] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 395.587574][T10070] EXT4-fs (loop3): 1 truncate cleaned up [ 395.593323][T10070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 395.691341][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 395.989447][ T4294] Bluetooth: hci5: command 0x041b tx timeout [ 397.770592][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.802175][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.852238][ T9988] team0: Port device team_slave_0 added [ 397.900219][ T9988] team0: Port device team_slave_1 added [ 397.981283][T10090] program syz.3.1722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.006964][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.025446][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.063685][ T4294] Bluetooth: hci5: command 0x040f tx timeout [ 398.093995][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.150647][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.211865][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.338195][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.423269][T10101] device syzkaller0 entered promiscuous mode [ 398.469486][T10106] loop1: detected capacity change from 0 to 128 [ 398.491143][ T9988] device hsr_slave_0 entered promiscuous mode [ 398.520885][ T9988] device hsr_slave_1 entered promiscuous mode [ 398.535972][T10106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 398.548960][ T9988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.564703][T10106] System zones: 1-3, 19-19, 35-36 [ 398.574588][ T9988] Cannot create hsr debugfs directory [ 398.588413][T10106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 398.598032][T10106] ext4 filesystem being mounted at /358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 398.774265][T10111] device syzkaller0 entered promiscuous mode [ 398.791666][T10113] loop4: detected capacity change from 0 to 512 [ 398.812253][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 398.858653][T10113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.897256][T10111] tipc: Enabled bearer , priority 0 [ 398.911560][T10113] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.937331][T10111] tipc: Resetting bearer [ 398.991253][T10110] tipc: Resetting bearer [ 399.073010][T10110] tipc: Disabling bearer [ 399.092116][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 399.103686][ T2928] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.334963][ T9988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.365662][ T9988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.399946][ T9988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.421958][T10124] 0: reclassify loop, rule prio 0, protocol 03 [ 399.437914][ T9988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.794268][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.802580][T10134] device syzkaller0 entered promiscuous mode [ 399.841256][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.859156][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.890063][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.976040][T10141] device syzkaller0 entered promiscuous mode [ 400.026573][T10142] device syzkaller0 entered promiscuous mode [ 400.037983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.055739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.067246][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.074505][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.143631][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 402.308288][ T2928] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.318763][ T4433] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.010018][T10144] device syzkaller0 entered promiscuous mode [ 404.017716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.029994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.040433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.049438][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.056611][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.068394][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 404.077635][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 404.087190][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 404.098993][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 404.221101][T10151] tipc: Enabling of bearer rejected, failed to enable media [ 404.230572][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.261495][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.270716][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.293170][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.306447][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.326378][T10164] device syzkaller0 entered promiscuous mode [ 404.392541][T10165] device syzkaller0 entered promiscuous mode [ 404.401053][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.413083][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.424934][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.434119][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.442776][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.530491][T10170] loop1: detected capacity change from 0 to 512 [ 404.693182][T10170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 404.778042][T10170] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.132284][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 407.442191][ T5209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.741512][ T9988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.754473][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.763767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.774333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.814628][T10178] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 408.822432][T10178] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 408.842780][T10178] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 409.181848][T10207] device syzkaller0 entered promiscuous mode [ 409.271378][T10213] device syzkaller0 entered promiscuous mode [ 410.863580][ T4294] Bluetooth: hci5: command 0x0c1a tx timeout [ 411.148568][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 411.159903][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 411.172646][T10208] device syzkaller0 entered promiscuous mode [ 412.945942][ T4294] Bluetooth: hci5: command 0x0406 tx timeout [ 413.228839][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 413.238410][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 413.371976][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.393844][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.427857][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.508044][T10235] device syzkaller0 entered promiscuous mode [ 413.571833][T10235] tipc: Enabled bearer , priority 0 [ 413.611852][T10235] tipc: Resetting bearer [ 413.668437][T10234] tipc: Resetting bearer [ 413.759530][T10234] tipc: Disabling bearer [ 413.961583][T10244] device syzkaller0 entered promiscuous mode [ 414.027246][T10253] loop1: detected capacity change from 0 to 256 [ 417.671182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.695395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.810793][T10295] device syzkaller0 entered promiscuous mode [ 417.863120][T10302] device syzkaller0 entered promiscuous mode [ 417.872144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.883937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.999064][T10307] loop0: detected capacity change from 0 to 128 [ 418.057653][T10307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 418.066090][T10307] System zones: 1-3, 19-19, 35-36 [ 418.077698][T10307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 418.093233][T10307] ext4 filesystem being mounted at /347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 418.238208][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 420.337225][ T9988] device veth0_vlan entered promiscuous mode [ 420.347218][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.355423][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.373267][T10312] device syzkaller0 entered promiscuous mode [ 420.453224][T10328] tipc: Enabling of bearer rejected, failed to enable media [ 420.590869][ T9988] device veth1_vlan entered promiscuous mode [ 420.774122][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.827511][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.869324][ T9988] device veth0_macvtap entered promiscuous mode [ 420.892712][T10347] loop3: detected capacity change from 0 to 256 [ 420.909403][ T9988] device veth1_macvtap entered promiscuous mode [ 420.966283][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.004241][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.042716][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.065249][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.085920][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.122554][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.148934][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.212513][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.283648][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.329119][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.348819][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.384307][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.428729][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.491706][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.545545][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.561064][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.650960][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.711292][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.757143][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.797812][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.836311][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.858224][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.891388][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1778'. [ 421.911397][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1778'. [ 421.969481][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1778'. [ 421.981271][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1778'. [ 422.013555][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 422.029061][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 422.048531][ T9988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.073932][ T9988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.097635][ T9988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.166477][ T9988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.332800][T10379] device syzkaller0 entered promiscuous mode [ 422.384562][T10385] device syzkaller0 entered promiscuous mode [ 424.413211][T10386] device syzkaller0 entered promiscuous mode [ 424.584176][ T7924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.592057][ T7924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.620442][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.748268][T10407] device syzkaller0 entered promiscuous mode [ 424.758371][ T7924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.792859][ T7924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.846164][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.068995][T10419] loop0: detected capacity change from 0 to 256 [ 425.096958][T10420] loop5: detected capacity change from 0 to 256 [ 425.134600][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 425.165811][T10422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1791'. [ 425.224073][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 425.261093][T10422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1791'. [ 425.585893][T10435] 0: reclassify loop, rule prio 0, protocol 03 [ 426.046333][T10452] device syzkaller0 entered promiscuous mode [ 426.106084][T10454] device syzkaller0 entered promiscuous mode [ 426.205665][T10454] tipc: Enabled bearer , priority 0 [ 426.238751][T10453] tipc: Resetting bearer [ 426.363044][T10453] tipc: Disabling bearer [ 426.536118][T10449] device syzkaller0 entered promiscuous mode [ 426.602143][T10471] program syz.4.1801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.764051][T10461] device syzkaller0 entered promiscuous mode [ 429.244424][T10491] device syzkaller0 entered promiscuous mode [ 429.302928][T10504] device syzkaller0 entered promiscuous mode [ 430.464630][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.123861][T10530] tipc: Enabling of bearer rejected, failed to enable media [ 432.553651][T10547] device syzkaller0 entered promiscuous mode [ 432.568659][T10549] device syzkaller0 entered promiscuous mode [ 434.306310][ T4331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.322605][ T7935] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.526644][T10562] device syzkaller0 entered promiscuous mode [ 435.535363][T10572] tipc: Enabled bearer , priority 0 [ 435.550778][T10569] device syzkaller0 entered promiscuous mode [ 436.225465][ T4433] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.794382][T10575] tipc: Resetting bearer [ 437.814186][T10555] tipc: Resetting bearer [ 437.840500][T10555] tipc: Disabling bearer [ 437.870649][ T3599] tipc: Node number set to 3720338429 [ 438.096020][T10626] device syzkaller0 entered promiscuous mode [ 438.162379][T10625] device syzkaller0 entered promiscuous mode [ 438.180783][T10625] tipc: Enabled bearer , priority 0 [ 438.268722][T10623] tipc: Resetting bearer [ 438.347184][T10638] program syz.3.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.375740][T10623] tipc: Disabling bearer [ 438.455286][T10633] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1830'. [ 438.496086][T10634] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1830'. [ 438.636733][T10636] device syzkaller0 entered promiscuous mode [ 438.842189][T10647] device syzkaller0 entered promiscuous mode [ 439.431968][ T70] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.066196][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072633][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.367545][T10655] device syzkaller0 entered promiscuous mode [ 441.397448][T10666] device syzkaller0 entered promiscuous mode [ 445.461127][T10700] tipc: Enabled bearer , priority 0 [ 445.469434][T10704] device syzkaller0 entered promiscuous mode [ 445.511700][T10708] tipc: Resetting bearer [ 445.598446][T10698] tipc: Resetting bearer [ 445.650904][T10714] loop0: detected capacity change from 0 to 1024 [ 445.656106][T10698] tipc: Disabling bearer [ 445.873241][T10717] device syzkaller0 entered promiscuous mode [ 445.883090][T10718] program syz.5.1845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.301882][T10727] device syzkaller0 entered promiscuous mode [ 446.319985][T10731] device syzkaller0 entered promiscuous mode [ 446.367640][T10733] device syzkaller0 entered promiscuous mode [ 446.728163][T10750] loop5: detected capacity change from 0 to 256 [ 450.620552][T10741] device syzkaller0 entered promiscuous mode [ 450.831308][T10773] loop5: detected capacity change from 0 to 1024 [ 453.248948][T10798] program syz.4.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.260299][T10794] device syzkaller0 entered promiscuous mode [ 453.332043][T10803] loop3: detected capacity change from 0 to 256 [ 453.464929][T10808] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1867'. [ 453.540272][T10808] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1867'. [ 453.836441][T10816] 0: reclassify loop, rule prio 0, protocol 03 [ 454.218904][T10830] loop1: detected capacity change from 0 to 1024 [ 454.328261][T10832] device syzkaller0 entered promiscuous mode [ 454.462627][T10834] device syzkaller0 entered promiscuous mode [ 455.116787][T10862] loop3: detected capacity change from 0 to 256 [ 455.208299][T10866] program syz.4.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.400378][T10857] tipc: Enabled bearer , priority 0 [ 459.408905][T10847] tipc: Resetting bearer [ 459.421439][T10852] device syzkaller0 entered promiscuous mode [ 459.427922][T10852] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 459.444227][T10878] device syzkaller0 entered promiscuous mode [ 459.452011][T10844] tipc: Resetting bearer [ 459.514764][T10844] tipc: Disabling bearer [ 459.542476][T10885] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1883'. [ 459.555863][T10886] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1883'. [ 460.002942][T10899] 0: reclassify loop, rule prio 0, protocol 03 [ 460.377531][T10917] program syz.1.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.448101][T10921] loop0: detected capacity change from 0 to 256 [ 460.622184][T10922] loop5: detected capacity change from 0 to 4096 [ 460.681258][T10922] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 460.876198][ T9988] EXT4-fs (loop5): unmounting filesystem. [ 461.000628][T10932] device syzkaller0 entered promiscuous mode [ 461.021856][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1897'. [ 461.044953][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1897'. [ 461.224007][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1897'. [ 461.253938][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1897'. [ 461.419818][T10944] device syzkaller0 entered promiscuous mode [ 461.448569][T10944] tipc: Enabled bearer , priority 0 [ 461.465859][T10943] device syzkaller0 entered promiscuous mode [ 461.500822][T10944] tipc: Resetting bearer [ 461.553989][T10941] tipc: Resetting bearer [ 461.631720][T10941] tipc: Disabling bearer [ 461.742048][T10951] 0: reclassify loop, rule prio 0, protocol 03 [ 461.932028][T10965] loop4: detected capacity change from 0 to 256 [ 462.016756][T10967] program syz.3.1907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.483610][ T2928] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.559513][T10978] loop3: detected capacity change from 0 to 4096 [ 462.660023][T10978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 462.702285][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1912'. [ 462.734026][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1912'. [ 462.812408][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1912'. [ 462.830518][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 462.837570][T10988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1912'. [ 462.920331][T10990] device syzkaller0 entered promiscuous mode [ 466.100329][T11039] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1920'. [ 466.112621][T11038] program syz.4.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.304139][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.306511][ T4331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.394718][T11048] device syzkaller0 entered promiscuous mode [ 466.411292][T11052] loop1: detected capacity change from 0 to 1024 [ 466.916964][T11064] device syzkaller0 entered promiscuous mode [ 467.215336][T11071] 0: reclassify loop, rule prio 0, protocol 03 [ 467.331810][T11077] device syzkaller0 entered promiscuous mode [ 467.340106][T11074] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 467.411226][T11074] device syzkaller0 entered promiscuous mode [ 467.508365][T11080] loop3: detected capacity change from 0 to 4096 [ 467.531568][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1936'. [ 467.549830][T11082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1936'. [ 467.562689][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1936'. [ 467.571979][T11082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1936'. [ 467.631382][T11080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 467.761886][T11088] device syzkaller0 entered promiscuous mode [ 467.773205][T11088] tipc: Started in network mode [ 467.790437][T11088] tipc: Node identity 3ef9ed28ca9c, cluster identity 4711 [ 467.811331][T11088] tipc: Enabled bearer , priority 0 [ 467.854559][T11087] tipc: Resetting bearer [ 467.943234][T11087] tipc: Disabling bearer [ 468.223626][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.246340][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 468.253289][T11102] device syzkaller0 entered promiscuous mode [ 468.504062][T11111] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1941'. [ 468.909869][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1948'. [ 468.924375][T11123] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1948'. [ 468.942052][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1948'. [ 468.960230][T11123] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1948'. [ 469.001041][T11124] device syzkaller0 entered promiscuous mode [ 469.173143][T11127] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 469.194897][T11127] device syzkaller0 entered promiscuous mode [ 469.714078][T11140] device syzkaller0 entered promiscuous mode [ 469.742297][T11140] tipc: Enabled bearer , priority 0 [ 469.771813][T11139] tipc: Resetting bearer [ 469.818874][T11139] tipc: Disabling bearer [ 470.235918][T11158] program syz.5.1959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.362594][T11160] loop1: detected capacity change from 0 to 4096 [ 470.394488][T11160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.469274][T11162] loop3: detected capacity change from 0 to 256 [ 470.539724][T11167] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 470.657274][T11167] device syzkaller0 entered promiscuous mode [ 471.047981][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 471.381499][T11188] device syzkaller0 entered promiscuous mode [ 471.427851][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.446488][T11188] tipc: Enabled bearer , priority 0 [ 471.473787][T11190] device syzkaller0 entered promiscuous mode [ 471.493213][T11186] tipc: Resetting bearer [ 471.574856][T11186] tipc: Disabling bearer [ 471.815385][T11197] program syz.4.1972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.935630][T11200] device syzkaller0 entered promiscuous mode [ 472.030782][T11203] loop3: detected capacity change from 0 to 256 [ 472.375383][T11212] device syzkaller0 entered promiscuous mode [ 472.395232][T11211] device syzkaller0 entered promiscuous mode [ 472.674015][T11220] __nla_validate_parse: 1 callbacks suppressed [ 472.674034][T11220] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1981'. [ 472.725491][T11222] device syzkaller0 entered promiscuous mode [ 472.767865][T11222] tipc: Enabled bearer , priority 0 [ 472.794849][T11221] tipc: Resetting bearer [ 472.843056][T11221] tipc: Disabling bearer [ 473.868823][T11233] program syz.0.1986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.895237][T11231] device syzkaller0 entered promiscuous mode [ 473.918171][T11235] loop3: detected capacity change from 0 to 256 [ 474.103664][T11239] device syzkaller0 entered promiscuous mode [ 474.483511][T11248] device syzkaller0 entered promiscuous mode [ 474.528792][T11249] device syzkaller0 entered promiscuous mode [ 474.537068][T11245] loop5: detected capacity change from 0 to 4096 [ 474.637298][T11245] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 474.706576][T11253] device syzkaller0 entered promiscuous mode [ 474.778829][T11255] tipc: Enabled bearer , priority 0 [ 475.036971][T11252] tipc: Resetting bearer [ 475.614565][T11252] tipc: Disabling bearer [ 475.742282][ T9988] EXT4-fs (loop5): unmounting filesystem. [ 475.847440][T11270] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1998'. [ 475.897371][T11272] loop0: detected capacity change from 0 to 256 [ 476.064313][T11277] device syzkaller0 entered promiscuous mode [ 476.278838][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2005'. [ 476.299283][T11281] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2005'. [ 476.333778][T11282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2005'. [ 476.373731][T11282] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2005'. [ 476.495070][T11287] device syzkaller0 entered promiscuous mode [ 476.526989][T11288] device syzkaller0 entered promiscuous mode [ 476.807667][T11298] device syzkaller0 entered promiscuous mode [ 479.108319][T11310] device syzkaller0 entered promiscuous mode [ 479.259804][T11310] tipc: Enabled bearer , priority 0 [ 479.394999][T11309] tipc: Resetting bearer [ 479.707211][T11309] tipc: Disabling bearer [ 479.743573][T11315] MPTCP: addr_signal error, rm_addr=2 [ 479.915498][T11321] device syzkaller0 entered promiscuous mode [ 480.041046][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2019'. [ 480.051879][T11325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2019'. [ 480.089054][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2019'. [ 480.112875][T11325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2019'. [ 480.132768][T11323] device syzkaller0 entered promiscuous mode [ 480.157493][T11333] device syzkaller0 entered promiscuous mode [ 481.272114][T11340] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2024'. [ 481.356740][T11344] device syzkaller0 entered promiscuous mode [ 481.453223][ T26] audit: type=1326 audit(1785191050.474:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.487176][ T26] audit: type=1326 audit(1785191050.474:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.516743][ T26] audit: type=1326 audit(1785191050.514:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.542136][ T26] audit: type=1326 audit(1785191050.514:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.603077][ T26] audit: type=1326 audit(1785191050.514:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.658386][ T26] audit: type=1326 audit(1785191050.514:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.725880][ T26] audit: type=1326 audit(1785191050.514:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.752939][ T26] audit: type=1326 audit(1785191050.544:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.780079][ T26] audit: type=1326 audit(1785191050.544:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.805471][ T26] audit: type=1326 audit(1785191050.544:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.2027" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe22dd9de99 code=0x7ffc0000 [ 481.963145][T11355] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 482.184755][T11359] device syzkaller0 entered promiscuous mode [ 482.208949][T11359] tipc: Enabled bearer , priority 0 [ 482.218037][T11358] tipc: Resetting bearer [ 482.310611][T11358] tipc: Disabling bearer [ 482.504923][T11361] device syzkaller0 entered promiscuous mode [ 482.612586][T11371] device syzkaller0 entered promiscuous mode [ 482.638243][T11374] device syzkaller0 entered promiscuous mode [ 485.383083][T11398] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2043'. [ 485.403741][T11406] tipc: Enabled bearer , priority 0 [ 485.430736][T11402] device syzkaller0 entered promiscuous mode [ 485.484058][T11410] tipc: Resetting bearer [ 485.490226][T11400] tipc: Resetting bearer [ 485.589909][T11400] tipc: Disabling bearer [ 485.662789][T11417] loop4: detected capacity change from 0 to 1024 [ 485.981852][T11425] device syzkaller0 entered promiscuous mode [ 486.012246][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2052'. [ 486.032762][T11428] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2052'. [ 486.141288][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2052'. [ 486.180234][T11428] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2052'. [ 486.402999][T11436] device syzkaller0 entered promiscuous mode [ 486.434286][T11438] device syzkaller0 entered promiscuous mode [ 486.695666][T11449] device syzkaller0 entered promiscuous mode [ 486.725190][T11447] device syzkaller0 entered promiscuous mode [ 486.737976][T11447] tipc: Enabled bearer , priority 0 [ 486.782096][T11447] tipc: Resetting bearer [ 486.803391][T11445] tipc: Resetting bearer [ 486.843085][T11453] loop1: detected capacity change from 0 to 1024 [ 486.850485][T11445] tipc: Disabling bearer [ 487.191818][T11461] device syzkaller0 entered promiscuous mode [ 487.224381][T11462] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2065'. [ 487.579967][T11472] program syz.1.2071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.769725][T11476] device syzkaller0 entered promiscuous mode [ 487.781080][T11475] device syzkaller0 entered promiscuous mode [ 488.159681][T11483] device syzkaller0 entered promiscuous mode [ 488.201438][T11483] tipc: Enabled bearer , priority 0 [ 488.230429][T11486] loop1: detected capacity change from 0 to 1024 [ 488.236959][T11483] tipc: Resetting bearer [ 488.289772][T11482] tipc: Resetting bearer [ 488.427670][T11482] tipc: Disabling bearer [ 488.596953][T11499] device syzkaller0 entered promiscuous mode [ 488.749785][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 488.780041][T11507] program syz.5.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.945334][T11495] device syzkaller0 entered promiscuous mode [ 490.076179][T11524] device syzkaller0 entered promiscuous mode [ 490.293133][T11532] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2089'. [ 490.478918][T11531] device syzkaller0 entered promiscuous mode [ 490.552303][T11541] program syz.0.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.591675][T11542] device syzkaller0 entered promiscuous mode [ 490.623150][T11542] tipc: Enabled bearer , priority 0 [ 490.698199][T11542] tipc: Resetting bearer [ 491.092443][T11551] loop4: detected capacity change from 0 to 512 [ 491.109011][T11551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 491.189462][T11551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 491.214033][T11551] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.424818][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 493.069142][T11540] tipc: Resetting bearer [ 493.092426][T11540] tipc: Disabling bearer [ 493.125407][ T3599] tipc: Node number set to 4100320552 [ 493.321778][T11572] device syzkaller0 entered promiscuous mode [ 494.475241][T11593] device syzkaller0 entered promiscuous mode [ 494.508587][T11595] program syz.1.2107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.906320][T11606] device syzkaller0 entered promiscuous mode [ 495.105601][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 495.119137][T11608] device syzkaller0 entered promiscuous mode [ 495.314756][T11618] tipc: Enabled bearer , priority 0 [ 495.345599][T11616] device syzkaller0 entered promiscuous mode [ 495.381787][T11614] tipc: Disabling bearer [ 496.396247][T11626] program syz.1.2120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.610792][T11634] loop5: detected capacity change from 0 to 1024 [ 496.655549][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 496.681156][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2125'. [ 496.713207][T11634] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 496.735302][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 496.822100][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2125'. [ 496.910891][T11649] device syzkaller0 entered promiscuous mode [ 497.039555][T11651] device syzkaller0 entered promiscuous mode [ 497.054254][ T9988] EXT4-fs (loop5): unmounting filesystem. [ 497.283251][T11654] device syzkaller0 entered promiscuous mode [ 498.334931][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.335519][ T4430] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.105541][T11687] device syzkaller0 entered promiscuous mode [ 499.289423][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'. [ 499.387874][T11692] device bond1 entered promiscuous mode [ 499.394718][T11692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.395662][T11694] device syzkaller0 entered promiscuous mode [ 500.554861][ T4433] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.606365][T11708] device syzkaller0 entered promiscuous mode [ 501.346424][T11734] device syzkaller0 entered promiscuous mode [ 501.506324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.512693][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.964739][T11750] device syzkaller0 entered promiscuous mode [ 503.183746][ T4284] Bluetooth: hci6: command 0x1003 tx timeout [ 503.191689][ T4294] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 503.434459][ T7924] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.474290][T11759] device syzkaller0 entered promiscuous mode [ 503.641582][T11763] 0: reclassify loop, rule prio 0, protocol 03 [ 503.649500][T11765] device syzkaller0 entered promiscuous mode [ 503.937285][T11770] device syzkaller0 entered promiscuous mode [ 503.994652][T11770] tipc: Enabled bearer , priority 0 [ 504.032359][T11770] tipc: Resetting bearer [ 504.069268][T11776] tipc: Enabled bearer , priority 0 [ 504.135639][T11775] tipc: Disabling bearer [ 504.345303][T11769] tipc: Resetting bearer [ 504.418856][T11769] tipc: Disabling bearer [ 504.456444][T11789] loop5: detected capacity change from 0 to 1024 [ 504.469828][T11787] device syzkaller0 entered promiscuous mode [ 504.518411][T11789] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 504.598495][T11789] EXT4-fs error (device loop5): ext4_get_journal_inode:5762: inode #32: comm syz.5.2179: iget: special inode unallocated [ 504.632023][T11789] EXT4-fs (loop5): no journal found [ 504.663977][T11789] EXT4-fs (loop5): can't get journal size [ 504.687239][T11789] EXT4-fs (loop5): filesystem is read-only [ 504.693130][T11789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 504.734927][T11789] EXT4-fs error (device loop5): ext4_lookup:1850: inode #2: comm syz.5.2179: bad inode number: 12 [ 506.042028][ T9988] EXT4-fs (loop5): unmounting filesystem. [ 506.273604][T11812] device syzkaller0 entered promiscuous mode [ 506.358088][T11813] 0: reclassify loop, rule prio 0, protocol 03 [ 506.499325][T11818] device syzkaller0 entered promiscuous mode [ 506.520837][T11815] device syzkaller0 entered promiscuous mode [ 506.898661][T11833] loop0: detected capacity change from 0 to 164 [ 506.937259][T11826] device syzkaller0 entered promiscuous mode [ 506.981451][T11833] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 508.373160][T11847] ieee802154 phy0 wpan0: encryption failed: -90 [ 511.417942][T11884] device syzkaller0 entered promiscuous mode [ 511.537611][T11887] device syzkaller0 entered promiscuous mode [ 512.747304][T11916] device syzkaller0 entered promiscuous mode [ 512.858273][T11914] device syzkaller0 entered promiscuous mode [ 513.001399][T11925] device syzkaller0 entered promiscuous mode [ 513.022958][T11923] 0: reclassify loop, rule prio 0, protocol 03 [ 515.559160][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074f47c00: rx timeout, send abort [ 515.575183][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888074f45c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 516.037964][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 516.074081][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074f47c00: abort rx timeout. Force session deactivation [ 516.220469][T11952] device syzkaller0 entered promiscuous mode [ 516.382593][T11959] loop0: detected capacity change from 0 to 256 [ 516.406965][T11961] tipc: Enabled bearer , priority 10 [ 516.493379][T11963] Bluetooth: MGMT ver 1.22 [ 516.530496][T11965] loop1: detected capacity change from 0 to 1024 [ 516.567064][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 516.628374][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2232'. [ 516.731078][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2232'. [ 516.768882][T11968] device syzkaller0 entered promiscuous mode [ 517.687786][T11987] tipc: Enabled bearer , priority 0 [ 517.859033][T11994] device syzkaller0 entered promiscuous mode [ 517.975208][T11979] tipc: Disabling bearer [ 518.419677][T12018] loop3: detected capacity change from 0 to 1024 [ 518.430287][T12014] device syzkaller0 entered promiscuous mode [ 518.459160][T12018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2247'. [ 519.793770][T12018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2247'. [ 520.056445][T12026] loop3: detected capacity change from 0 to 1024 [ 520.134779][T12030] device syzkaller0 entered promiscuous mode [ 520.200865][T12028] loop0: detected capacity change from 0 to 4096 [ 520.208585][T12026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 520.222366][ T26] kauditd_printk_skb: 329 callbacks suppressed [ 520.222382][ T26] audit: type=1800 audit(1785191089.254:347): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2249" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 520.300713][T12028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 520.329257][T12028] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 520.390495][T12028] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 520.422912][T12028] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 520.443595][T12028] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2250: Failed to acquire dquot type 1 [ 520.530062][T12036] loop4: detected capacity change from 0 to 4096 [ 520.602568][T12036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 520.651309][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 520.780978][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 520.823041][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 521.174079][T12057] loop0: detected capacity change from 0 to 1024 [ 521.203196][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2259'. [ 521.214870][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2259'. [ 521.225240][T12055] loop3: detected capacity change from 0 to 2048 [ 521.288097][T12009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.304699][T12055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 521.504661][T12055] loop3: detected capacity change from 2048 to 0 [ 521.549833][T12065] device syzkaller0 entered promiscuous mode [ 521.550220][ C1] I/O error, dev loop3, sector 20 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 521.565511][ C1] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 521.575172][ C1] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 521.581411][T12066] EXT4-fs error (device loop3): ext4_get_inode_loc:4658: inode #15: block 5: comm syz.3.2258: unable to read itable block [ 521.661929][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 521.704719][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 521.714375][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 521.724736][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 521.733166][T12066] EXT4-fs (loop3): I/O error while writing superblock [ 521.757752][ C1] I/O error, dev loop3, sector 20 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 521.767390][ C1] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 521.767453][T12066] EXT4-fs error (device loop3): ext4_get_inode_loc:4658: inode #15: block 5: comm syz.3.2258: unable to read itable block [ 521.777023][ C1] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 521.830855][T12069] device syzkaller0 entered promiscuous mode [ 521.877200][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 521.886532][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 521.896130][ C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 521.905641][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 521.914625][T12066] EXT4-fs (loop3): I/O error while writing superblock [ 521.921850][T12066] EXT4-fs error (device loop3) in ext4_setattr:5695: IO failure [ 521.953344][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 521.985791][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.004152][T12066] EXT4-fs (loop3): I/O error while writing superblock [ 522.127529][ T4285] EXT4-fs error (device loop3): ext4_get_inode_loc:4658: inode #2: block 4: comm syz-executor: unable to read itable block [ 522.145528][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 522.166239][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.174602][ T4285] EXT4-fs (loop3): I/O error while writing superblock [ 522.209984][ T4285] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: IO failure [ 522.249882][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 522.268058][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.280275][ T4285] EXT4-fs (loop3): I/O error while writing superblock [ 522.291211][ T4285] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 522.312975][T12082] loop0: detected capacity change from 0 to 1024 [ 522.345543][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2270'. [ 522.355904][ T4592] loop: Write error at byte offset 9223372036854775807, length 2048. [ 522.380261][ C0] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.388723][ T4285] EXT4-fs (loop3): I/O error while writing superblock [ 522.416896][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2270'. [ 522.524739][ T4592] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4643: inode #15: block 5: comm kworker/u4:13: unable to read itable block [ 522.584648][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 522.593235][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.601941][ T4592] EXT4-fs (loop3): I/O error while writing superblock [ 522.620443][ T4592] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4643: inode #2: block 4: comm kworker/u4:13: unable to read itable block [ 522.662971][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 522.679370][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.688010][ T4592] EXT4-fs (loop3): I/O error while writing superblock [ 522.725278][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 522.754752][ T7937] loop: Write error at byte offset 9223372036854775807, length 2048. [ 522.773718][T12090] tipc: Enabled bearer , priority 0 [ 522.791020][ C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 522.805956][ T7931] loop: Write error at byte offset 9223372036854906879, length 2048. [ 522.820393][T12090] tipc: Resetting bearer [ 522.843277][ C0] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 522.867074][T12094] mmap: syz.0.2275 (12094) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 522.898366][T12089] tipc: Disabling bearer [ 523.299879][T12103] loop5: detected capacity change from 0 to 4096 [ 523.378798][ T4592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.378969][T12103] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 523.414707][T12103] EXT4-fs (loop5): mount failed [ 523.705804][T12108] device syzkaller0 entered promiscuous mode [ 523.814292][ T4592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.965985][T12118] loop4: detected capacity change from 0 to 1024 [ 524.021076][ T4592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.092886][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2282'. [ 525.193657][ T27] INFO: task syz.2.1589:9680 blocked for more than 143 seconds. [ 525.215892][ T27] Not tainted syzkaller #0 [ 525.229443][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 525.318138][ T27] task:syz.2.1589 state:D stack:27920 pid:9680 ppid:4289 flags:0x00004004 [ 525.354395][ T27] Call Trace: [ 525.357766][ T27] [ 525.401462][ T27] __schedule+0x107f/0x4030 [ 525.411567][ T27] ? __sched_text_start+0x8/0x8 [ 525.418502][ T27] ? __mutex_trylock_common+0x86/0x260 [ 525.443468][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 525.489415][ T27] schedule+0xb9/0x180 [ 525.513553][ T27] schedule_preempt_disabled+0xf/0x20 [ 525.543481][ T27] __mutex_lock+0x548/0xae0 [ 525.548128][ T27] ? __mutex_lock+0x3ba/0xae0 [ 525.552868][ T27] ? nfsd_svc+0x61/0xab0 [ 525.573005][ T27] ? mutex_lock_nested+0x10/0x10 [ 525.578518][ T27] ? net_generic+0x1e/0x240 [ 525.583168][ T27] ? net_generic+0x1e/0x240 [ 525.591817][ T27] nfsd_svc+0x61/0xab0 [ 525.603482][ T27] ? qword_get+0x5a5/0x640 [ 525.608080][ T27] write_threads+0x2ea/0x350 [ 525.612732][ T27] ? write_unlock_fs+0x1f0/0x1f0 [ 525.643509][ T27] ? __might_fault+0xc2/0x120 [ 525.648522][ T27] ? _copy_from_user+0x10b/0x170 [ 525.674758][ T27] ? simple_transaction_get+0x119/0x140 [ 525.680457][ T27] nfsctl_transaction_write+0x105/0x150 [ 525.709121][ T27] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 525.750253][ T27] vfs_write+0x2dc/0x9a0 [ 525.756320][ T27] ? file_end_write+0x250/0x250 [ 525.761247][ T27] ? __fget_files+0x28/0x460 [ 525.784104][ T27] ? __fget_files+0x3fc/0x460 [ 525.788919][ T27] ? __fdget_pos+0x2ae/0x360 [ 525.803510][ T27] ? ksys_write+0x70/0x260 [ 525.808022][ T27] ksys_write+0x14d/0x260 [ 525.812410][ T27] ? __ia32_sys_read+0x80/0x80 [ 525.833459][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 525.838780][ T27] do_syscall_64+0x4c/0xa0 [ 525.843283][ T27] ? clear_bhb_loop+0x60/0xb0 [ 525.861333][ T27] ? clear_bhb_loop+0x60/0xb0 [ 525.867802][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.876885][ T27] RIP: 0033:0x7f86a479de99 [ 525.881358][ T27] RSP: 002b:00007f86a55d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 525.896657][ T27] RAX: ffffffffffffffda RBX: 00007f86a4a26090 RCX: 00007f86a479de99 [ 525.908097][ T27] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000007 [ 525.919678][ T27] RBP: 00007f86a4833eaf R08: 0000000000000000 R09: 0000000000000000 [ 525.928073][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.936331][ T27] R13: 00007f86a4a26128 R14: 00007f86a4a26090 R15: 00007ffcfdfa7038 [ 525.944924][ T27] [ 525.948061][ T27] [ 525.948061][ T27] Showing all locks held in the system: [ 525.956081][ T27] 1 lock held by rcu_tasks_kthre/12: [ 525.961414][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 525.972143][ T27] 1 lock held by rcu_tasks_trace/13: [ 525.983237][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 525.995267][ T27] 1 lock held by khungtaskd/27: [ 526.000166][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 526.010357][ T27] 2 locks held by kworker/0:2/127: [ 526.015834][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.026610][ T27] #1: ffffc90002de7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.038405][ T27] 1 lock held by syslogd/3622: [ 526.043213][ T27] #0: ffff8880b8f3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 526.053589][ T27] 2 locks held by getty/4026: [ 526.058804][ T27] #0: ffff888030869098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 526.070033][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 526.080548][ T27] 1 lock held by syz-executor/4273: [ 526.086065][ T27] #0: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 526.099942][ T27] 3 locks held by kworker/1:4/4323: [ 526.107414][ T27] #0: ffff88802f212938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.118650][ T27] #1: ffffc90004317d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.131014][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 526.140593][ T27] 5 locks held by kworker/u4:13/4592: [ 526.149594][ T27] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.160370][ T27] #1: ffffc90004c1fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.170505][ T27] #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 526.180086][ T27] #3: ffff8880561f72f8 (&devlink->lock_key#4){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x104/0x280 [ 526.191194][ T27] #4: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2a3/0x950 [ 526.201062][ T27] 3 locks held by kworker/u4:16/5112: [ 526.206587][ T27] 3 locks held by kworker/u4:21/7931: [ 526.211998][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.223213][ T27] #1: ffffc90004b6fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 526.238973][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 526.252547][ T27] 3 locks held by syz.2.1589/9677: [ 526.257726][ T27] #0: ffff88807b648ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 526.267773][ T27] #1: ffff8880760f4460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 526.276877][ T27] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 526.285804][ T27] 3 locks held by syz.2.1589/9680: [ 526.290957][ T27] #0: ffff88807b648d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 526.300404][ T27] #1: ffff8880760f4460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 526.309559][ T27] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 526.318217][ T27] 2 locks held by syz.0.2279/12107: [ 526.323507][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 526.332657][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 526.343673][ T27] 1 lock held by syz.4.2283/12118: [ 526.348825][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 526.358470][ T27] 1 lock held by syz.4.2283/12120: [ 526.364070][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 526.401740][ T27] [ 526.404419][ T27] ============================================= [ 526.404419][ T27] [ 526.412948][ T27] NMI backtrace for cpu 0 [ 526.417312][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 526.424538][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 526.434613][ T27] Call Trace: [ 526.437930][ T27] [ 526.440883][ T27] dump_stack_lvl+0x188/0x24e [ 526.445597][ T27] ? irq_work_queue+0xbf/0x140 [ 526.450493][ T27] ? show_regs_print_info+0x12/0x12 [ 526.455728][ T27] ? load_image+0x410/0x410 [ 526.460276][ T27] ? vprintk_emit+0x59f/0x6a0 [ 526.465048][ T27] ? printk_sprint+0x460/0x460 [ 526.469875][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 526.474911][ T27] ? lock_chain_count+0x20/0x20 [ 526.479812][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 526.486012][ T27] ? asm_sysvec_call_function_single+0x16/0x20 [ 526.492210][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 526.497444][ T27] ? asm_sysvec_call_function_single+0x16/0x20 [ 526.503643][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 526.509750][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 526.515928][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 526.521954][ T27] watchdog+0xf0e/0xf50 [ 526.526178][ T27] ? watchdog+0x1ed/0xf50 [ 526.530544][ T27] kthread+0x29d/0x330 [ 526.534641][ T27] ? hungtask_pm_notify+0x40/0x40 [ 526.539711][ T27] ? kthread_blkcg+0xd0/0xd0 [ 526.544340][ T27] ret_from_fork+0x1f/0x30 [ 526.548836][ T27] [ 526.552632][ T27] Sending NMI from CPU 0 to CPUs 1: [ 526.558063][ C1] NMI backtrace for cpu 1 [ 526.558074][ C1] CPU: 1 PID: 12126 Comm: syz.5.2285 Not tainted syzkaller #0 [ 526.558093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 526.558103][ C1] RIP: 0010:unwind_next_frame+0x6d3/0x1fd0 [ 526.558155][ C1] Code: b6 04 28 84 c0 0f 85 90 14 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 a5 14 00 00 49 0f bf 04 24 48 01 c2 48 89 14 24 <4d> 8d 75 01 41 0f b6 04 2f 84 c0 0f 85 7d 12 00 00 4c 89 f2 48 c1 [ 526.558171][ C1] RSP: 0018:ffffc900032b70a0 EFLAGS: 00000282 [ 526.558187][ C1] RAX: 0000000000000038 RBX: ffffc900032b7148 RCX: ffffffff8e38b898 [ 526.558201][ C1] RDX: ffffc900032b7868 RSI: ffffffff8e38b858 RDI: ffffffff8138fb37 [ 526.558215][ C1] RBP: dffffc0000000000 R08: 0000000000000010 R09: 0000000000000008 [ 526.558228][ C1] R10: dffffc0000000000 R11: fffff52000656e35 R12: ffffffff8eac832c [ 526.558242][ C1] R13: ffffffff8eac8330 R14: ffffffff8eac832d R15: 1ffffffff1d59066 [ 526.558256][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 526.558271][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.558284][ C1] CR2: 00007f8ec028cff8 CR3: 000000007c827000 CR4: 00000000003506e0 [ 526.558301][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 526.558312][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 526.558324][ C1] Call Trace: [ 526.558329][ C1] [ 526.558339][ C1] ? generic_shutdown_super+0x63/0x340 [ 526.558364][ C1] ? stack_trace_save+0xf0/0xf0 [ 526.558444][ C1] arch_stack_walk+0x10c/0x140 [ 526.558474][ C1] ? generic_shutdown_super+0x63/0x340 [ 526.558497][ C1] stack_trace_save+0xa6/0xf0 [ 526.558520][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 526.558548][ C1] kasan_save_stack+0x3a/0x60 [ 526.558578][ C1] ? kasan_save_stack+0x3a/0x60 [ 526.558602][ C1] ? __kasan_record_aux_stack+0xb2/0xc0 [ 526.558639][ C1] ? call_rcu+0x14f/0x950 [ 526.558665][ C1] ? __dentry_kill+0x4db/0x630 [ 526.558680][ C1] ? shrink_dentry_list+0x396/0x6a0 [ 526.558697][ C1] ? shrink_dcache_parent+0xae/0x3f0 [ 526.558713][ C1] ? do_one_tree+0x23/0xe0 [ 526.558729][ C1] ? shrink_dcache_for_umount+0x65/0x110 [ 526.558746][ C1] ? generic_shutdown_super+0x63/0x340 [ 526.558788][ C1] ? __phys_addr+0xb6/0x170 [ 526.558821][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 526.558838][ C1] ? __d_free_external+0x60/0x60 [ 526.558857][ C1] call_rcu+0x14f/0x950 [ 526.558886][ C1] ? __dentry_kill+0x4d3/0x630 [ 526.558905][ C1] ? rcu_force_quiescent_state+0x220/0x220 [ 526.558934][ C1] ? __rwlock_init+0x140/0x140 [ 526.558950][ C1] ? _raw_spin_unlock+0x24/0x40 [ 526.558972][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 526.558992][ C1] __dentry_kill+0x4db/0x630 [ 526.559011][ C1] shrink_dentry_list+0x396/0x6a0 [ 526.559032][ C1] shrink_dcache_parent+0xae/0x3f0 [ 526.559051][ C1] ? write_sequnlock+0x30/0x30 [ 526.559070][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 526.559102][ C1] ? __init_rwsem+0x160/0x160 [ 526.559127][ C1] do_one_tree+0x23/0xe0 [ 526.559144][ C1] shrink_dcache_for_umount+0x65/0x110 [ 526.559165][ C1] generic_shutdown_super+0x63/0x340 [ 526.559186][ C1] kill_litter_super+0x72/0xa0 [ 526.559207][ C1] binderfs_kill_super+0x40/0x90 [ 526.559284][ C1] deactivate_locked_super+0x93/0xf0 [ 526.559305][ C1] cleanup_mnt+0x471/0x4f0 [ 526.559330][ C1] task_work_run+0x1d0/0x260 [ 526.559355][ C1] ? task_work_cancel+0x220/0x220 [ 526.559380][ C1] ? do_exit+0x9d0/0x2570 [ 526.559428][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 526.559450][ C1] do_exit+0x9d5/0x2570 [ 526.559483][ C1] ? put_task_struct+0x80/0x80 [ 526.559511][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 526.559540][ C1] ? lock_chain_count+0x20/0x20 [ 526.559565][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 526.559587][ C1] do_group_exit+0x229/0x2e0 [ 526.559635][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 526.559655][ C1] get_signal+0x1259/0x1340 [ 526.559695][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 526.559761][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 526.559780][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 526.559809][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 526.559833][ C1] ? get_sigframe_size+0x10/0x10 [ 526.559854][ C1] ? do_sys_openat2+0x20a/0x4f0 [ 526.559879][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 526.559906][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 526.559932][ C1] ? rcu_is_watching+0x11/0xa0 [ 526.559960][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 526.559989][ C1] exit_to_user_mode_loop+0x70/0x110 [ 526.560017][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 526.560045][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 526.560063][ C1] do_syscall_64+0x58/0xa0 [ 526.560087][ C1] ? clear_bhb_loop+0x60/0xb0 [ 526.560111][ C1] ? clear_bhb_loop+0x60/0xb0 [ 526.560136][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.560160][ C1] RIP: 0033:0x7f8ebf39de99 [ 526.560174][ C1] Code: Unable to access opcode bytes at 0x7f8ebf39de6f. [ 526.560182][ C1] RSP: 002b:00007f8ec028d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 526.560200][ C1] RAX: 0000000000000003 RBX: 00007f8ebf625fa0 RCX: 00007f8ebf39de99 [ 526.560212][ C1] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 526.560224][ C1] RBP: 00007f8ebf433eaf R08: 0000000000000000 R09: 0000000000000000 [ 526.560235][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.560246][ C1] R13: 00007f8ebf626038 R14: 00007f8ebf625fa0 R15: 00007ffdd1a487a8 [ 526.560268][ C1] [ 526.610911][ T5112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 526.711388][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 526.711433][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 526.711495][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 526.711538][ T27] Call Trace: [ 526.711562][ T27] [ 526.711594][ T27] dump_stack_lvl+0x188/0x24e [ 526.711699][ T27] ? memcpy+0x3c/0x60 [ 526.711771][ T27] ? show_regs_print_info+0x12/0x12 [ 526.711855][ T27] ? load_image+0x410/0x410 [ 526.711967][ T27] panic+0x2d3/0x710 [ 526.712034][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 526.712140][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 526.712206][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 526.712330][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 526.712424][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 526.712528][ T27] watchdog+0xf4d/0xf50 [ 526.712634][ T27] ? watchdog+0x1ed/0xf50 [ 526.712733][ T27] kthread+0x29d/0x330 [ 526.712782][ T27] ? hungtask_pm_notify+0x40/0x40 [ 526.712853][ T27] ? kthread_blkcg+0xd0/0xd0 [ 526.712921][ T27] ret_from_fork+0x1f/0x30 [ 526.713046][ T27] [ 526.713928][ T27] Kernel Offset: disabled [ 527.224850][ T27] Rebooting in 86400 seconds..