[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. 2021/10/20 08:34:01 fuzzer started 2021/10/20 08:34:01 dialing manager at 10.128.0.169:36983 2021/10/20 08:34:04 syscalls: 3586 2021/10/20 08:34:04 code coverage: enabled 2021/10/20 08:34:04 comparison tracing: enabled 2021/10/20 08:34:04 extra coverage: enabled 2021/10/20 08:34:04 setuid sandbox: enabled 2021/10/20 08:34:04 namespace sandbox: enabled 2021/10/20 08:34:04 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/20 08:34:04 fault injection: enabled 2021/10/20 08:34:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/20 08:34:04 net packet injection: enabled 2021/10/20 08:34:04 net device setup: enabled 2021/10/20 08:34:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/20 08:34:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/20 08:34:04 USB emulation: enabled 2021/10/20 08:34:04 hci packet injection: enabled 2021/10/20 08:34:04 wifi device emulation: enabled 2021/10/20 08:34:04 802.15.4 emulation: enabled 2021/10/20 08:34:04 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 71.530216][ T6547] cgroup: Unknown subsys name 'net' [ 71.541607][ T6547] cgroup: Unknown subsys name 'rlimit' 2021/10/20 08:34:04 fetching corpus: 50, signal 49659/53239 (executing program) 2021/10/20 08:34:05 fetching corpus: 100, signal 81082/86064 (executing program) 2021/10/20 08:34:05 fetching corpus: 150, signal 98488/104891 (executing program) 2021/10/20 08:34:05 fetching corpus: 200, signal 113116/120742 (executing program) 2021/10/20 08:34:05 fetching corpus: 250, signal 124142/133009 (executing program) 2021/10/20 08:34:05 fetching corpus: 300, signal 141142/150963 (executing program) 2021/10/20 08:34:05 fetching corpus: 350, signal 152884/163723 (executing program) 2021/10/20 08:34:06 fetching corpus: 400, signal 164520/176302 (executing program) 2021/10/20 08:34:06 fetching corpus: 450, signal 172395/185177 (executing program) 2021/10/20 08:34:06 fetching corpus: 499, signal 179362/193148 (executing program) 2021/10/20 08:34:06 fetching corpus: 549, signal 186955/201646 (executing program) 2021/10/20 08:34:06 fetching corpus: 599, signal 195972/211384 (executing program) 2021/10/20 08:34:06 fetching corpus: 649, signal 203115/219334 (executing program) 2021/10/20 08:34:06 fetching corpus: 699, signal 207621/224744 (executing program) 2021/10/20 08:34:07 fetching corpus: 749, signal 215625/233320 (executing program) 2021/10/20 08:34:07 fetching corpus: 799, signal 220929/239371 (executing program) 2021/10/20 08:34:07 fetching corpus: 848, signal 228837/247758 (executing program) 2021/10/20 08:34:07 fetching corpus: 898, signal 234500/254052 (executing program) 2021/10/20 08:34:08 fetching corpus: 948, signal 238352/258582 (executing program) 2021/10/20 08:34:08 fetching corpus: 998, signal 243392/264228 (executing program) 2021/10/20 08:34:08 fetching corpus: 1046, signal 248140/269535 (executing program) 2021/10/20 08:34:08 fetching corpus: 1096, signal 251158/273221 (executing program) 2021/10/20 08:34:08 fetching corpus: 1146, signal 255058/277646 (executing program) 2021/10/20 08:34:08 fetching corpus: 1196, signal 258125/281352 (executing program) 2021/10/20 08:34:08 fetching corpus: 1244, signal 261206/285088 (executing program) 2021/10/20 08:34:09 fetching corpus: 1293, signal 265403/289735 (executing program) 2021/10/20 08:34:09 fetching corpus: 1343, signal 270683/295290 (executing program) 2021/10/20 08:34:09 fetching corpus: 1393, signal 274062/299126 (executing program) 2021/10/20 08:34:09 fetching corpus: 1443, signal 278255/303668 (executing program) 2021/10/20 08:34:09 fetching corpus: 1492, signal 282950/308618 (executing program) 2021/10/20 08:34:10 fetching corpus: 1542, signal 286407/312466 (executing program) 2021/10/20 08:34:10 fetching corpus: 1592, signal 289716/316141 (executing program) 2021/10/20 08:34:10 fetching corpus: 1642, signal 292419/319237 (executing program) 2021/10/20 08:34:10 fetching corpus: 1691, signal 296135/323199 (executing program) 2021/10/20 08:34:10 fetching corpus: 1740, signal 299347/326759 (executing program) 2021/10/20 08:34:10 fetching corpus: 1790, signal 301859/329611 (executing program) 2021/10/20 08:34:11 fetching corpus: 1840, signal 305519/333446 (executing program) 2021/10/20 08:34:11 fetching corpus: 1890, signal 309265/337365 (executing program) 2021/10/20 08:34:11 fetching corpus: 1939, signal 312422/340696 (executing program) 2021/10/20 08:34:11 fetching corpus: 1988, signal 316156/344489 (executing program) 2021/10/20 08:34:11 fetching corpus: 2038, signal 318728/347376 (executing program) 2021/10/20 08:34:11 fetching corpus: 2087, signal 321388/350230 (executing program) 2021/10/20 08:34:12 fetching corpus: 2135, signal 323730/352813 (executing program) 2021/10/20 08:34:12 fetching corpus: 2184, signal 326667/355858 (executing program) 2021/10/20 08:34:12 fetching corpus: 2234, signal 329342/358654 (executing program) 2021/10/20 08:34:12 fetching corpus: 2284, signal 331133/360765 (executing program) 2021/10/20 08:34:12 fetching corpus: 2332, signal 333086/362982 (executing program) 2021/10/20 08:34:12 fetching corpus: 2381, signal 335750/365759 (executing program) 2021/10/20 08:34:12 fetching corpus: 2430, signal 337749/367926 (executing program) 2021/10/20 08:34:13 fetching corpus: 2480, signal 340404/370629 (executing program) 2021/10/20 08:34:13 fetching corpus: 2530, signal 343441/373583 (executing program) 2021/10/20 08:34:13 fetching corpus: 2579, signal 347234/377099 (executing program) 2021/10/20 08:34:13 fetching corpus: 2629, signal 351379/380932 (executing program) 2021/10/20 08:34:13 fetching corpus: 2678, signal 353365/383000 (executing program) 2021/10/20 08:34:14 fetching corpus: 2727, signal 355184/384922 (executing program) 2021/10/20 08:34:14 fetching corpus: 2777, signal 357626/387314 (executing program) 2021/10/20 08:34:14 fetching corpus: 2827, signal 360175/389777 (executing program) 2021/10/20 08:34:14 fetching corpus: 2877, signal 362466/391988 (executing program) 2021/10/20 08:34:14 fetching corpus: 2926, signal 364061/393708 (executing program) 2021/10/20 08:34:14 fetching corpus: 2976, signal 365830/395538 (executing program) 2021/10/20 08:34:14 fetching corpus: 3026, signal 367827/397547 (executing program) 2021/10/20 08:34:15 fetching corpus: 3075, signal 370059/399698 (executing program) 2021/10/20 08:34:15 fetching corpus: 3123, signal 372226/401778 (executing program) 2021/10/20 08:34:15 fetching corpus: 3172, signal 374801/404111 (executing program) 2021/10/20 08:34:15 fetching corpus: 3222, signal 376405/405713 (executing program) 2021/10/20 08:34:15 fetching corpus: 3271, signal 379227/408226 (executing program) 2021/10/20 08:34:15 fetching corpus: 3320, signal 381195/410114 (executing program) 2021/10/20 08:34:16 fetching corpus: 3370, signal 383162/411989 (executing program) 2021/10/20 08:34:16 fetching corpus: 3417, signal 384562/413403 (executing program) 2021/10/20 08:34:16 fetching corpus: 3466, signal 386296/415055 (executing program) 2021/10/20 08:34:16 fetching corpus: 3516, signal 387689/416468 (executing program) 2021/10/20 08:34:16 fetching corpus: 3566, signal 389384/418036 (executing program) 2021/10/20 08:34:16 fetching corpus: 3614, signal 391247/419728 (executing program) 2021/10/20 08:34:16 fetching corpus: 3663, signal 393577/421683 (executing program) 2021/10/20 08:34:16 fetching corpus: 3713, signal 394794/422913 (executing program) 2021/10/20 08:34:17 fetching corpus: 3761, signal 396710/424567 (executing program) 2021/10/20 08:34:17 fetching corpus: 3811, signal 398537/426176 (executing program) 2021/10/20 08:34:17 fetching corpus: 3860, signal 400114/427592 (executing program) 2021/10/20 08:34:17 fetching corpus: 3910, signal 401415/428833 (executing program) 2021/10/20 08:34:17 fetching corpus: 3960, signal 403502/430564 (executing program) 2021/10/20 08:34:17 fetching corpus: 4008, signal 405794/432431 (executing program) 2021/10/20 08:34:18 fetching corpus: 4058, signal 406754/433368 (executing program) 2021/10/20 08:34:18 fetching corpus: 4108, signal 408466/434809 (executing program) 2021/10/20 08:34:18 fetching corpus: 4158, signal 409636/435905 (executing program) 2021/10/20 08:34:18 fetching corpus: 4208, signal 411422/437376 (executing program) 2021/10/20 08:34:18 fetching corpus: 4258, signal 413015/438721 (executing program) 2021/10/20 08:34:18 fetching corpus: 4308, signal 414147/439752 (executing program) 2021/10/20 08:34:19 fetching corpus: 4358, signal 415266/440786 (executing program) 2021/10/20 08:34:19 fetching corpus: 4407, signal 416314/441741 (executing program) 2021/10/20 08:34:19 fetching corpus: 4457, signal 417894/443000 (executing program) 2021/10/20 08:34:19 fetching corpus: 4507, signal 419828/444431 (executing program) 2021/10/20 08:34:19 fetching corpus: 4556, signal 421263/445641 (executing program) 2021/10/20 08:34:19 fetching corpus: 4604, signal 422650/446754 (executing program) 2021/10/20 08:34:19 fetching corpus: 4654, signal 424517/448147 (executing program) 2021/10/20 08:34:20 fetching corpus: 4704, signal 425545/449070 (executing program) 2021/10/20 08:34:20 fetching corpus: 4754, signal 426970/450175 (executing program) 2021/10/20 08:34:20 fetching corpus: 4802, signal 428597/451381 (executing program) 2021/10/20 08:34:20 fetching corpus: 4852, signal 429790/452311 (executing program) 2021/10/20 08:34:20 fetching corpus: 4902, signal 430705/453079 (executing program) 2021/10/20 08:34:20 fetching corpus: 4952, signal 432188/454228 (executing program) 2021/10/20 08:34:20 fetching corpus: 5002, signal 433723/455304 (executing program) 2021/10/20 08:34:21 fetching corpus: 5050, signal 435651/456622 (executing program) 2021/10/20 08:34:21 fetching corpus: 5099, signal 437075/457600 (executing program) 2021/10/20 08:34:21 fetching corpus: 5148, signal 438112/458365 (executing program) 2021/10/20 08:34:21 fetching corpus: 5198, signal 439232/459193 (executing program) 2021/10/20 08:34:21 fetching corpus: 5246, signal 440606/460148 (executing program) 2021/10/20 08:34:22 fetching corpus: 5296, signal 441728/460960 (executing program) 2021/10/20 08:34:22 fetching corpus: 5346, signal 442973/461843 (executing program) 2021/10/20 08:34:22 fetching corpus: 5395, signal 443881/462494 (executing program) 2021/10/20 08:34:22 fetching corpus: 5445, signal 447351/464565 (executing program) 2021/10/20 08:34:22 fetching corpus: 5495, signal 449003/465613 (executing program) 2021/10/20 08:34:23 fetching corpus: 5543, signal 450140/466402 (executing program) 2021/10/20 08:34:23 fetching corpus: 5593, signal 451093/467059 (executing program) 2021/10/20 08:34:23 fetching corpus: 5643, signal 452087/467726 (executing program) 2021/10/20 08:34:23 fetching corpus: 5693, signal 453724/468772 (executing program) 2021/10/20 08:34:23 fetching corpus: 5743, signal 454620/469371 (executing program) 2021/10/20 08:34:23 fetching corpus: 5793, signal 455845/470134 (executing program) 2021/10/20 08:34:23 fetching corpus: 5843, signal 457175/470923 (executing program) 2021/10/20 08:34:24 fetching corpus: 5892, signal 458807/471893 (executing program) 2021/10/20 08:34:24 fetching corpus: 5941, signal 460387/472786 (executing program) 2021/10/20 08:34:24 fetching corpus: 5990, signal 461748/473536 (executing program) 2021/10/20 08:34:24 fetching corpus: 6039, signal 462802/474128 (executing program) 2021/10/20 08:34:24 fetching corpus: 6089, signal 463686/474656 (executing program) 2021/10/20 08:34:25 fetching corpus: 6139, signal 465636/475648 (executing program) 2021/10/20 08:34:25 fetching corpus: 6189, signal 467017/476348 (executing program) 2021/10/20 08:34:25 fetching corpus: 6238, signal 468043/476930 (executing program) 2021/10/20 08:34:25 fetching corpus: 6288, signal 469224/477564 (executing program) 2021/10/20 08:34:25 fetching corpus: 6338, signal 470672/478270 (executing program) 2021/10/20 08:34:25 fetching corpus: 6386, signal 471589/478757 (executing program) 2021/10/20 08:34:25 fetching corpus: 6436, signal 472642/479290 (executing program) 2021/10/20 08:34:26 fetching corpus: 6486, signal 474348/480108 (executing program) 2021/10/20 08:34:26 fetching corpus: 6536, signal 475223/480576 (executing program) 2021/10/20 08:34:26 fetching corpus: 6582, signal 476393/481165 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481205 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481239 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481287 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481334 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481367 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481411 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481458 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481496 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481542 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481578 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481605 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481653 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481714 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481761 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481798 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481837 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481875 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481904 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481941 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/481981 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482020 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482055 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482090 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482130 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482178 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482221 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482272 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482315 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482352 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482401 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482442 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482474 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482510 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482564 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482607 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482658 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482695 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482728 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482761 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482800 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482849 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482883 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482913 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482952 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/482993 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/483028 (executing program) 2021/10/20 08:34:26 fetching corpus: 6583, signal 476410/483064 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483124 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483162 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483197 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483246 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483283 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483327 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483355 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483388 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483425 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483450 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483480 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483515 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483559 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483597 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483634 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483670 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483703 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483736 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476432/483773 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/483811 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/483844 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/483884 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/483916 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/483949 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/483995 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484038 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484073 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484115 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484153 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484205 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484244 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484290 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484325 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484358 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484397 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484432 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484469 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484510 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484559 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484591 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484626 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484673 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484704 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484742 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484782 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484821 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484869 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484906 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484958 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/484988 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485021 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485056 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485091 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485124 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485156 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485200 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485233 (executing program) 2021/10/20 08:34:26 fetching corpus: 6584, signal 476438/485265 (executing program) 2021/10/20 08:34:27 fetching corpus: 6584, signal 476438/485305 (executing program) 2021/10/20 08:34:27 fetching corpus: 6584, signal 476438/485338 (executing program) 2021/10/20 08:34:27 fetching corpus: 6584, signal 476438/485377 (executing program) 2021/10/20 08:34:27 fetching corpus: 6584, signal 476438/485404 (executing program) 2021/10/20 08:34:27 fetching corpus: 6584, signal 476438/485404 (executing program) 2021/10/20 08:34:28 starting 6 fuzzer processes 08:34:28 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) 08:34:29 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:29 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000368fdd10341902120887000000010902240001000000000904750002ab21c10009050d1e00f200000009058d020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x1, "9b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:34:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) 08:34:29 executing program 4: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:34:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) [ 97.466476][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 97.503601][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 97.797654][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.805038][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.826043][ T6560] device bridge_slave_0 entered promiscuous mode [ 97.961978][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.969411][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.977631][ T6560] device bridge_slave_1 entered promiscuous mode [ 98.010568][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.017792][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.026167][ T6562] device bridge_slave_0 entered promiscuous mode [ 98.091425][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.101062][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.109267][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.117837][ T6562] device bridge_slave_1 entered promiscuous mode [ 98.157542][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.239569][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.303252][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.340557][ T6560] team0: Port device team_slave_0 added [ 98.350721][ T6560] team0: Port device team_slave_1 added [ 98.366759][ T6564] chnl_net:caif_netlink_parms(): no params data found [ 98.427893][ T6562] team0: Port device team_slave_0 added [ 98.489748][ T6562] team0: Port device team_slave_1 added [ 98.506256][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.513703][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.539744][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.555558][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.562661][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.588645][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.722743][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.729747][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.755725][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.771267][ T6560] device hsr_slave_0 entered promiscuous mode [ 98.778459][ T6560] device hsr_slave_1 entered promiscuous mode [ 98.807056][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 98.817347][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.824766][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.850822][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.893647][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.900745][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.909133][ T6564] device bridge_slave_0 entered promiscuous mode [ 98.966155][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.973644][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.981369][ T6564] device bridge_slave_1 entered promiscuous mode [ 99.033274][ T2934] Bluetooth: hci0: command 0x0409 tx timeout [ 99.043554][ T6562] device hsr_slave_0 entered promiscuous mode [ 99.053083][ T6562] device hsr_slave_1 entered promiscuous mode [ 99.060773][ T6562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.068937][ T6562] Cannot create hsr debugfs directory [ 99.114569][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 99.176173][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.272372][ T2934] Bluetooth: hci1: command 0x0409 tx timeout [ 99.280506][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.359507][ T6564] team0: Port device team_slave_0 added [ 99.408231][ T6564] team0: Port device team_slave_1 added [ 99.453239][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.460324][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.468805][ T6566] device bridge_slave_0 entered promiscuous mode [ 99.488058][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.495510][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.521483][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.535887][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.543833][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.569886][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.588513][ T1006] Bluetooth: hci2: command 0x0409 tx timeout [ 99.616312][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.623486][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.631686][ T6566] device bridge_slave_1 entered promiscuous mode [ 99.707577][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.714906][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.723373][ T6575] device bridge_slave_0 entered promiscuous mode [ 99.770989][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.778136][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.786307][ T6575] device bridge_slave_1 entered promiscuous mode [ 99.814173][ T6564] device hsr_slave_0 entered promiscuous mode [ 99.831950][ T2934] Bluetooth: hci3: command 0x0409 tx timeout [ 99.833760][ T6564] device hsr_slave_1 entered promiscuous mode [ 99.852902][ T6564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.860592][ T6564] Cannot create hsr debugfs directory [ 99.876009][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.897695][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.974401][ T6566] team0: Port device team_slave_0 added [ 99.999561][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.042259][ T6566] team0: Port device team_slave_1 added [ 100.049631][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.148602][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.222128][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 100.248251][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.255639][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.281584][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.297589][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.315486][ T6937] chnl_net:caif_netlink_parms(): no params data found [ 100.338451][ T6575] team0: Port device team_slave_0 added [ 100.345056][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.352223][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.378246][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.413773][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.446097][ T6562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.459636][ T6575] team0: Port device team_slave_1 added [ 100.506630][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.515775][ T6562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.568728][ T6566] device hsr_slave_0 entered promiscuous mode [ 100.575953][ T6566] device hsr_slave_1 entered promiscuous mode [ 100.587787][ T6566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.595461][ T6566] Cannot create hsr debugfs directory [ 100.612665][ T6562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.663294][ T6562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.696847][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.704034][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.730237][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.748029][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.755637][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.781853][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.899962][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.907209][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.915036][ T6937] device bridge_slave_0 entered promiscuous mode [ 100.940786][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.948026][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.956380][ T6937] device bridge_slave_1 entered promiscuous mode [ 100.965622][ T6564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.979246][ T6575] device hsr_slave_0 entered promiscuous mode [ 100.987427][ T6575] device hsr_slave_1 entered promiscuous mode [ 100.994900][ T6575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.002772][ T6575] Cannot create hsr debugfs directory [ 101.067047][ T6564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.080821][ T6564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.103540][ T20] Bluetooth: hci5: command 0x0409 tx timeout [ 101.117468][ T8167] Bluetooth: hci0: command 0x041b tx timeout [ 101.142832][ T6564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.159543][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.174016][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.313422][ T6937] team0: Port device team_slave_0 added [ 101.326281][ T6937] team0: Port device team_slave_1 added [ 101.352594][ T137] Bluetooth: hci1: command 0x041b tx timeout [ 101.427893][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.447989][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.455944][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.463243][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.489223][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.559605][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.566728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.575688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.591996][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.603287][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.610261][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.636511][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.648815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.657050][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.670571][ T6566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.673313][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 101.703028][ T6566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.731052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.739706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.748385][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.755757][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.765958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.775048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.784316][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.791377][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.800031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.808795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.817341][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.824688][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.832691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.843246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.851304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.871654][ T6566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.884797][ T6566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.909399][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 101.931302][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.939972][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.948507][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.955650][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.964499][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.982653][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.991393][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.009145][ T6575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.026506][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.052510][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.061739][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.070091][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.078963][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.087450][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.096020][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.110559][ T6575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.122986][ T6575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.134599][ T6937] device hsr_slave_0 entered promiscuous mode [ 102.147608][ T6937] device hsr_slave_1 entered promiscuous mode [ 102.154287][ T6937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.161916][ T6937] Cannot create hsr debugfs directory [ 102.203621][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.211385][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.220216][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.228686][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.237844][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.246486][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.255309][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.264090][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.272651][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.288608][ T6575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.302244][ T6562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.310680][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 102.343981][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.352141][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.360015][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.367885][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.375845][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.384443][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.406984][ T6560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.459425][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.469024][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.477982][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.485146][ T8167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.492817][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.501282][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.509831][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.517110][ T8167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.572615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.581087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.588849][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.596467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.604066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.611653][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.620271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.629115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.638564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.648884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.660269][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.677410][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.729777][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.738936][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.747577][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.757598][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.785905][ T6564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.797337][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.826344][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.835105][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.924050][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.932979][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.941859][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.949405][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.962538][ T6566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.973853][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.982910][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.001684][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.023865][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.054936][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.062789][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.100451][ T6562] device veth0_vlan entered promiscuous mode [ 103.108642][ T6937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.124410][ T6937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.137438][ T6937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.147258][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.160129][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.168293][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.177034][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.186184][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.191884][ T8437] Bluetooth: hci0: command 0x040f tx timeout [ 103.194279][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.199615][ T8437] Bluetooth: hci5: command 0x041b tx timeout [ 103.207433][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.221607][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.230017][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.238907][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.251695][ T6937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.292533][ T6560] device veth0_vlan entered promiscuous mode [ 103.301775][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.309655][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.317532][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.325527][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.333449][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.342623][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.351117][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.358385][ T8167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.366100][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.374921][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.383463][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.390659][ T8167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.398397][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.407164][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.415684][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.422854][ T8167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.430395][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.432403][ T8454] Bluetooth: hci1: command 0x040f tx timeout [ 103.439208][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.453024][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.460085][ T8167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.468021][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.517066][ T6575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.527751][ T6575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.541159][ T6562] device veth1_vlan entered promiscuous mode [ 103.553562][ T6564] device veth0_vlan entered promiscuous mode [ 103.563129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.571184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.579546][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.587728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.596312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.605385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.614097][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.623547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.632246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.640451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.648943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.657436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.666230][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.674744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.683245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.692141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.717558][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.725673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.734029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.741737][ T8437] Bluetooth: hci2: command 0x040f tx timeout [ 103.748532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.756479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.764602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.772535][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.780057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.818640][ T6564] device veth1_vlan entered promiscuous mode [ 103.826832][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.836182][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.844837][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.853724][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.864954][ T6560] device veth1_vlan entered promiscuous mode [ 103.924941][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.932969][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.941541][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.950052][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.958645][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.967107][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.975589][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.987677][ T137] Bluetooth: hci3: command 0x040f tx timeout [ 103.992546][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.034413][ T6560] device veth0_macvtap entered promiscuous mode [ 104.046905][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.055473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.064239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.081792][ T6564] device veth0_macvtap entered promiscuous mode [ 104.089918][ T6562] device veth0_macvtap entered promiscuous mode [ 104.106331][ T6560] device veth1_macvtap entered promiscuous mode [ 104.117398][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.125434][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.133588][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.142364][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.170233][ T6566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.179539][ T6564] device veth1_macvtap entered promiscuous mode [ 104.194960][ T6562] device veth1_macvtap entered promiscuous mode [ 104.248111][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.282404][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.297565][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.306819][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.315031][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.323539][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.331693][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.339204][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.346804][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.355659][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.364473][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.372476][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.380188][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.388955][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.391584][ T8454] Bluetooth: hci4: command 0x040f tx timeout [ 104.418685][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.429627][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.440746][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.457639][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.466597][ T6575] device veth0_vlan entered promiscuous mode [ 104.492606][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.501557][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.510426][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.519352][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.527931][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.536724][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.545921][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.554745][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.563369][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.570497][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.578281][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.587121][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.595831][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.602958][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.610532][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.619399][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.628709][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.639287][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.649559][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 104.660044][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.670945][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.684981][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 104.695458][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.706569][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.717669][ T6575] device veth1_vlan entered promiscuous mode [ 104.740070][ T6560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.749260][ T6560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758407][ T6560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.767248][ T6560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.778955][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 104.789880][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.799844][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 104.810344][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.821227][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.836214][ T6562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.845211][ T6562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.853991][ T6562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.862885][ T6562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.878516][ T6564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.887694][ T6564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.896523][ T6564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.905575][ T6564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.916124][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.925022][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.933239][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.941391][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.949460][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.958604][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.967438][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.976461][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.985219][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.994066][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.002504][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.010797][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.019582][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.028631][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.040583][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.048631][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.072089][ T6566] device veth0_vlan entered promiscuous mode [ 105.082365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.091194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.152992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.160991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.170292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.178995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.187786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.202194][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.210767][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.226674][ T6575] device veth0_macvtap entered promiscuous mode [ 105.237475][ T6566] device veth1_vlan entered promiscuous mode [ 105.273166][ T8548] Bluetooth: hci5: command 0x040f tx timeout [ 105.279311][ T8548] Bluetooth: hci0: command 0x0419 tx timeout [ 105.292639][ T6575] device veth1_macvtap entered promiscuous mode [ 105.317867][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 105.328738][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.338691][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 105.349181][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.359067][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 105.369624][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.380996][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.450853][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.459649][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.468264][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.477036][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.485886][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.494418][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.507376][ T8548] Bluetooth: hci1: command 0x0419 tx timeout [ 105.513400][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.577792][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.589343][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.599308][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.609841][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.619763][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 105.630283][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.641504][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.652082][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.660696][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.669363][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.678132][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.704825][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.707167][ T6566] device veth0_macvtap entered promiscuous mode [ 105.712893][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.776772][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.785263][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.799405][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.822136][ T916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.830160][ T916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.871833][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.880059][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.907039][ T6566] device veth1_macvtap entered promiscuous mode [ 105.908513][ T8605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.921731][ T8605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.935666][ T6575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.944491][ T6575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.953291][ T6575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.962155][ T6575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.999155][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.009952][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.013267][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.019864][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.027804][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.038150][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.038172][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.038188][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.038208][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 106.086989][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.099043][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.111506][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.119731][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.127971][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.136108][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.144043][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.151610][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.159599][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.167676][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.175734][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.183985][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.192009][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.200744][ T2252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.214767][ T8437] Bluetooth: hci2: command 0x0419 tx timeout [ 106.221416][ T8437] Bluetooth: hci3: command 0x0419 tx timeout [ 106.274694][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.285188][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.295113][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.305601][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.315573][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.326057][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.335940][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 106.346434][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.357664][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.368822][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.378245][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.415093][ T6566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.424026][ T6566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433509][ T6566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.442267][ T6566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.473372][ T8454] Bluetooth: hci4: command 0x0419 tx timeout [ 106.531162][ T8618] loop0: detected capacity change from 0 to 264192 [ 106.546507][ C0] hrtimer: interrupt took 33777 ns [ 106.596629][ T8605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.604813][ T8605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.616624][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.680227][ T8618] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:34:39 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) [ 106.844636][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.851309][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.853054][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.872243][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.900611][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.909888][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.933156][ T8597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.941492][ T8597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.016219][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.052381][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.056518][ T8663] loop0: detected capacity change from 0 to 264192 [ 107.060962][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.075746][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.084215][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.113718][ T6937] device veth0_vlan entered promiscuous mode [ 107.141080][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 107.167257][ T6937] device veth1_vlan entered promiscuous mode [ 107.167648][ T8663] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 107.224092][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.232394][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.240338][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.248393][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.256716][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 08:34:40 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 107.271624][ T7] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 107.280094][ T7] usb 3-1: config 0 has no interface number 0 [ 107.286326][ T7] usb 3-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 107.295442][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.353631][ T6937] device veth0_macvtap entered promiscuous mode [ 107.398422][ T6937] device veth1_macvtap entered promiscuous mode 08:34:40 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) [ 107.490966][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.502097][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.512002][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.522503][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.531887][ T7] usb 3-1: config 0 descriptor?? [ 107.532396][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.547931][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.557918][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.568424][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.578346][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.589289][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.601052][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.611373][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.620966][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.630120][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 08:34:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) [ 107.638223][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.647991][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.704897][ T25] Bluetooth: hci5: command 0x0419 tx timeout [ 107.715048][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 08:34:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) [ 107.913075][ T8694] loop0: detected capacity change from 0 to 264192 08:34:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) [ 107.956178][ T8694] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 108.024361][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.035921][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.046004][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.057362][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.067271][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.077795][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.087699][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.098243][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.108230][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.118747][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.129897][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.140448][ T26] audit: type=1804 audit(1634718881.179:2): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir451346418/syzkaller.I3uX1K/0/bus" dev="sda1" ino=13912 res=1 errno=0 [ 108.148049][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.166104][ T26] audit: type=1804 audit(1634718881.179:3): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir451346418/syzkaller.I3uX1K/0/bus" dev="sda1" ino=13912 res=1 errno=0 [ 108.174353][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.197614][ T26] audit: type=1804 audit(1634718881.179:4): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir451346418/syzkaller.I3uX1K/0/bus" dev="sda1" ino=13912 res=1 errno=0 08:34:41 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) 08:34:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) [ 108.440859][ T7] f81534 3-1:0.117: f81534_get_register: reg: 1003 failed: -71 [ 108.448733][ T7] f81534 3-1:0.117: f81534_find_config_idx: read failed: -71 [ 108.456287][ T7] f81534 3-1:0.117: f81534_calc_num_ports: find idx failed: -71 [ 108.464176][ T7] f81534: probe of 3-1:0.117 failed with error -71 [ 108.476554][ T6937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.485400][ T6937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.494254][ T6937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.503072][ T6937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.648436][ T8709] loop0: detected capacity change from 0 to 264192 [ 108.711723][ T7] usb 3-1: USB disconnect, device number 2 [ 108.744784][ T8709] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 108.820776][ T8597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.828862][ T8597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.841881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.992643][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.001047][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.016702][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.261947][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.502001][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 109.653602][ T7] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 109.661873][ T7] usb 3-1: config 0 has no interface number 0 [ 109.668025][ T7] usb 3-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=87.08 [ 109.677181][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:34:42 executing program 2: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:42 executing program 4: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:34:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) 08:34:42 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:42 executing program 0: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:34:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) [ 109.907748][ T7] usb 3-1: config 0 descriptor?? [ 109.953239][ T7] usb 3-1: can't set config #0, error -71 [ 110.009066][ T7] usb 3-1: USB disconnect, device number 3 08:34:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 08:34:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='GPL\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/252) 08:34:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 08:34:44 executing program 3: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 111.341028][ T26] audit: type=1804 audit(1634718884.360:5): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir451346418/syzkaller.I3uX1K/1/bus" dev="sda1" ino=13929 res=1 errno=0 [ 111.599186][ T26] audit: type=1804 audit(1634718884.520:6): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir540343670/syzkaller.VewQc8/4/bus" dev="sda1" ino=13930 res=1 errno=0 08:34:44 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) 08:34:45 executing program 0: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) [ 112.207841][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:34:45 executing program 2: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:45 executing program 4: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:34:45 executing program 3: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 112.675371][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:34:45 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:45 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) [ 113.127684][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:34:46 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) [ 113.815484][ T26] audit: type=1804 audit(1634718886.860:7): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir540343670/syzkaller.VewQc8/5/bus" dev="sda1" ino=13912 res=1 errno=0 [ 113.994171][ T8834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.123224][ T26] audit: type=1804 audit(1634718887.080:8): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir451346418/syzkaller.I3uX1K/2/bus" dev="sda1" ino=13897 res=1 errno=0 08:34:47 executing program 0: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:34:47 executing program 4: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) gettid() perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:34:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) [ 114.921521][ T8837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:34:48 executing program 2: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:48 executing program 3: mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x730, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x9}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x20}, {0x2, 0x2}, {0x0, 0x50}, {0x2}, {0x1}]}]}, 0x44}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 08:34:48 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) [ 115.845378][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.260756][ T26] audit: type=1804 audit(1634718889.310:9): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir540343670/syzkaller.VewQc8/6/bus" dev="sda1" ino=13946 res=1 errno=0 [ 116.285861][ T26] audit: type=1804 audit(1634718889.310:10): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir451346418/syzkaller.I3uX1K/3/bus" dev="sda1" ino=13924 res=1 errno=0 08:34:49 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) 08:34:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) 08:34:49 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) [ 116.907938][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:34:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 08:34:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000b00)=@device_b, &(0x7f0000000b40)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @device_b}, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x2d, 0x1a}, @void}, 0x3e) [ 117.508542][ T8866] loop4: detected capacity change from 0 to 4096 [ 117.824213][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:34:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 08:34:51 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 08:34:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 118.097205][ T8866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:34:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 08:34:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) 08:34:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 08:34:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) 08:34:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 08:34:51 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) [ 118.610955][ T8900] loop5: detected capacity change from 0 to 4096 08:34:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 08:34:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 118.807733][ T8912] loop4: detected capacity change from 0 to 4096 08:34:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 118.925940][ T8900] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:34:52 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 08:34:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) [ 119.358981][ T8912] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:34:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) 08:34:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:52 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) [ 119.602876][ T8941] loop5: detected capacity change from 0 to 4096 08:34:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:53 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) 08:34:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 120.125223][ T8941] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.188126][ T8960] loop4: detected capacity change from 0 to 4096 08:34:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 08:34:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) 08:34:53 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x38}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x0, 0xffffffff, 0xffffa888, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xb}}}, 0x24}}, 0x0) 08:34:53 executing program 3: syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x79af, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 120.614783][ T8960] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:34:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(r0, 0x8, &(0x7f0000000040)={0x5, 0x81}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) 08:34:53 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) 08:34:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x309, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 120.861266][ T8985] loop5: detected capacity change from 0 to 4096 [ 121.023055][ T9016] loop4: detected capacity change from 0 to 4096 08:34:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) 08:34:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) [ 121.296370][ T8985] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:34:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) 08:34:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) [ 121.498343][ T9016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:34:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80), 0x400000000000065, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4004091) accept4(r1, 0x0, &(0x7f0000000040), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4004091) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="18001400e9000000090000009e9fcf5acc5902682741e34196af25568f899d31d57f2d3fe3a87f000000000000008d2712a5ded0bb6ca6f75382b4cd5dc040b9802ad0"], 0x4000) open_by_handle_at(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3a1400) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'wg1\x00'}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x3, 0x1f, 0x8, 0x20, 0x0, 0xfff, 0x60a0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x1}, 0x302, 0x6, 0x401, 0x5, 0x2e0f, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x40159bf8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@empty, @dev={0xfe, 0x80, '\x00', 0xf}, @loopback, 0x80000001, 0x4, 0x3, 0x0, 0xa69, 0x400000}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0100, 0x0) 08:34:54 executing program 2: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001000000080001"], 0x44}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 08:34:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006d780)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050d40)={0x0, [{}, {}, {}, {0x0, 0x0}], 0x0, "67a468663fd339"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000051d40)={{0x0, 0x3, 0x100000000, 0x5, 0x0, 0x9, 0x3ff, 0x4, 0x5, 0xc8, 0x24, 0x81, 0x770, 0x1ff, 0x5633}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d40)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r5}], 0x4, "b0fc620d514082"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000040), 0x43) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 132.620772][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.627451][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.056896][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.063428][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.734053][ T8257] Bluetooth: hci2: command 0x0406 tx timeout [ 221.740121][ T8257] Bluetooth: hci4: command 0x0406 tx timeout [ 221.744108][ T8438] Bluetooth: hci0: command 0x0406 tx timeout [ 221.748271][ T8257] Bluetooth: hci1: command 0x0406 tx timeout [ 221.758254][ T8257] Bluetooth: hci3: command 0x0406 tx timeout [ 221.764402][ T8257] Bluetooth: hci5: command 0x0406 tx timeout [ 255.500349][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.506679][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.966505][ T27] INFO: task kworker/u4:0:8 blocked for more than 143 seconds. [ 275.974203][ T27] Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 275.981543][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.990281][ T27] task:kworker/u4:0 state:D stack:26408 pid: 8 ppid: 2 flags:0x00004000 [ 275.999614][ T27] Workqueue: netns cleanup_net [ 276.004526][ T27] Call Trace: [ 276.007865][ T27] [ 276.010813][ T27] __schedule+0xa9a/0x4940 [ 276.015325][ T27] ? io_schedule_timeout+0x140/0x140 [ 276.020741][ T27] schedule+0xd2/0x260 [ 276.024849][ T27] schedule_preempt_disabled+0xf/0x20 [ 276.030365][ T27] __mutex_lock+0xa32/0x12f0 [ 276.035066][ T27] ? wg_netns_pre_exit+0x15/0x190 [ 276.040325][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 276.045919][ T27] ? mark_held_locks+0x9f/0xe0 [ 276.051391][ T27] ? wg_stop+0x180/0x180 [ 276.055672][ T27] wg_netns_pre_exit+0x15/0x190 [ 276.060904][ T27] ? wg_stop+0x180/0x180 [ 276.065181][ T27] cleanup_net+0x451/0xb00 [ 276.069706][ T27] ? unregister_pernet_device+0x70/0x70 [ 276.075290][ T27] process_one_work+0x9b2/0x1690 [ 276.080447][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 276.085851][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 276.090895][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 276.095958][ T27] worker_thread+0x658/0x11f0 [ 276.100761][ T27] ? process_one_work+0x1690/0x1690 [ 276.106058][ T27] kthread+0x405/0x4f0 [ 276.110326][ T27] ? set_kthread_struct+0x130/0x130 [ 276.115556][ T27] ret_from_fork+0x1f/0x30 [ 276.120128][ T27] [ 276.124573][ T27] INFO: task syz-executor.1:9004 can't die for more than 143 seconds. [ 276.132861][ T27] task:syz-executor.1 state:D stack:26120 pid: 9004 ppid: 6562 flags:0x00004004 [ 276.142206][ T27] Call Trace: [ 276.145515][ T27] [ 276.148524][ T27] __schedule+0xa9a/0x4940 [ 276.153368][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 276.158996][ T27] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 276.164841][ T27] ? io_schedule_timeout+0x140/0x140 [ 276.170230][ T27] ? lock_chain_count+0x20/0x20 [ 276.175117][ T27] ? debug_object_destroy+0x210/0x210 [ 276.180709][ T27] schedule+0xd2/0x260 [ 276.184808][ T27] schedule_timeout+0x14a/0x2a0 [ 276.189791][ T27] ? usleep_range+0x170/0x170 [ 276.194492][ T27] ? dev_deactivate_many+0x701/0xc60 [ 276.200360][ T27] ? destroy_timer_on_stack+0x20/0x20 [ 276.205908][ T27] ? __local_bh_enable_ip+0xa0/0x120 [ 276.211356][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 276.216676][ T27] dev_deactivate_many+0x710/0xc60 [ 276.221826][ T27] dev_deactivate+0xe9/0x1b0 [ 276.226492][ T27] ? dev_deactivate_many+0xc60/0xc60 [ 276.231801][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 276.238274][ T27] ? __hrtimer_init+0x136/0x280 [ 276.243142][ T27] qdisc_graft+0xdac/0x1260 [ 276.247726][ T27] ? qdisc_create.constprop.0+0x63b/0x10f0 [ 276.253549][ T27] ? tc_dump_tclass+0x480/0x480 [ 276.258503][ T27] ? tc_get_qdisc+0xb50/0xb50 [ 276.263243][ T27] ? __nla_parse+0x3d/0x50 [ 276.267851][ T27] tc_modify_qdisc+0xb92/0x1980 [ 276.272723][ T27] ? qdisc_create.constprop.0+0x10f0/0x10f0 [ 276.278715][ T27] ? qdisc_create.constprop.0+0x10f0/0x10f0 [ 276.284624][ T27] rtnetlink_rcv_msg+0x413/0xb80 [ 276.289722][ T27] ? rtnl_newlink+0xa0/0xa0 [ 276.294251][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 276.299719][ T27] netlink_rcv_skb+0x153/0x420 [ 276.304597][ T27] ? rtnl_newlink+0xa0/0xa0 [ 276.309191][ T27] ? netlink_ack+0xa60/0xa60 [ 276.313795][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 276.319162][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 276.324461][ T27] netlink_unicast+0x533/0x7d0 [ 276.329330][ T27] ? netlink_attachskb+0x880/0x880 [ 276.334484][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 276.340923][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 276.347265][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 276.352430][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 276.358248][ T27] ? __check_object_size+0x16e/0x3f0 [ 276.363640][ T27] netlink_sendmsg+0x86d/0xda0 [ 276.368487][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 276.373445][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 276.379878][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 276.384874][ T27] sock_sendmsg+0xcf/0x120 [ 276.389457][ T27] ____sys_sendmsg+0x6e8/0x810 [ 276.394248][ T27] ? kernel_sendmsg+0x50/0x50 [ 276.399042][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 276.403707][ T27] ? lock_chain_count+0x20/0x20 [ 276.408656][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 276.414690][ T27] ? futex_wait+0x533/0x670 [ 276.419384][ T27] ___sys_sendmsg+0xf3/0x170 [ 276.424002][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 276.429382][ T27] ? __fget_files+0x21b/0x3e0 [ 276.434146][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 276.439079][ T27] ? __fget_files+0x23d/0x3e0 [ 276.443776][ T27] ? __fget_light+0xea/0x280 [ 276.448465][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 276.454740][ T27] __sys_sendmsg+0xe5/0x1b0 [ 276.459353][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 276.464416][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 276.470402][ T27] do_syscall_64+0x35/0xb0 [ 276.474836][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.480830][ T27] RIP: 0033:0x7fba4f1e6a39 [ 276.485264][ T27] RSP: 002b:00007fba4c73b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.493786][ T27] RAX: ffffffffffffffda RBX: 00007fba4f2ea020 RCX: 00007fba4f1e6a39 [ 276.501842][ T27] RDX: 0000000000000000 RSI: 0000000020000800 RDI: 0000000000000004 [ 276.509917][ T27] RBP: 00007fba4f240c5f R08: 0000000000000000 R09: 0000000000000000 [ 276.518003][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.526015][ T27] R13: 00007ffdb3706bff R14: 00007fba4c73b300 R15: 0000000000022000 [ 276.534102][ T27] [ 276.546883][ T27] INFO: task syz-executor.2:9040 can't die for more than 143 seconds. [ 276.555064][ T27] task:syz-executor.2 state:D stack:26728 pid: 9040 ppid: 6564 flags:0x00004004 [ 276.564947][ T27] Call Trace: [ 276.568629][ T27] [ 276.571584][ T27] __schedule+0xa9a/0x4940 [ 276.576045][ T27] ? io_schedule_timeout+0x140/0x140 [ 276.581417][ T27] schedule+0xd2/0x260 [ 276.585509][ T27] schedule_preempt_disabled+0xf/0x20 [ 276.590948][ T27] __mutex_lock+0xa32/0x12f0 [ 276.595555][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 276.600762][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 276.606399][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 276.611563][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 276.616614][ T27] ? rtnl_newlink+0xa0/0xa0 [ 276.621138][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 276.626578][ T27] netlink_rcv_skb+0x153/0x420 [ 276.631361][ T27] ? rtnl_newlink+0xa0/0xa0 [ 276.636000][ T27] ? netlink_ack+0xa60/0xa60 [ 276.640684][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 276.645994][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 276.651367][ T27] netlink_unicast+0x533/0x7d0 [ 276.656147][ T27] ? netlink_attachskb+0x880/0x880 [ 276.661328][ T27] ? netlink_sendmsg+0x821/0xda0 [ 276.666387][ T27] netlink_sendmsg+0x86d/0xda0 [ 276.671198][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 276.676257][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 276.681217][ T27] sock_sendmsg+0xcf/0x120 [ 276.685665][ T27] ____sys_sendmsg+0x331/0x810 [ 276.690527][ T27] ? kernel_sendmsg+0x50/0x50 [ 276.695220][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 276.699909][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 276.706023][ T27] ___sys_sendmsg+0xf3/0x170 [ 276.710692][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 276.716066][ T27] ? __fget_files+0x21b/0x3e0 [ 276.720833][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 276.725708][ T27] ? mark_lock+0xef/0x17b0 [ 276.730269][ T27] ? __fget_files+0x23d/0x3e0 [ 276.734975][ T27] ? __fget_light+0xea/0x280 [ 276.739661][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 276.745934][ T27] __sys_sendmmsg+0x195/0x470 [ 276.750692][ T27] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 276.755808][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 276.761886][ T27] ? find_held_lock+0x2d/0x110 [ 276.766758][ T27] ? find_held_lock+0x2d/0x110 [ 276.771561][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 276.777130][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 276.782027][ T27] __x64_sys_sendmmsg+0x99/0x100 [ 276.787192][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 276.793117][ T27] do_syscall_64+0x35/0xb0 [ 276.797616][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.803534][ T27] RIP: 0033:0x7ff2918e0a39 [ 276.808103][ T27] RSP: 002b:00007ff28ee56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 276.816609][ T27] RAX: ffffffffffffffda RBX: 00007ff2919e3f60 RCX: 00007ff2918e0a39 [ 276.824602][ T27] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000007 [ 276.832711][ T27] RBP: 00007ff29193ac5f R08: 0000000000000000 R09: 0000000000000000 [ 276.840820][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.848886][ T27] R13: 00007ffd6e53e4bf R14: 00007ff28ee56300 R15: 0000000000022000 [ 276.856973][ T27] [ 276.860002][ T27] INFO: task syz-executor.2:9040 blocked for more than 144 seconds. [ 276.868043][ T27] Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 276.875158][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.883902][ T27] task:syz-executor.2 state:D stack:26728 pid: 9040 ppid: 6564 flags:0x00004004 [ 276.893218][ T27] Call Trace: [ 276.896580][ T27] [ 276.899530][ T27] __schedule+0xa9a/0x4940 [ 276.904000][ T27] ? io_schedule_timeout+0x140/0x140 [ 276.909380][ T27] schedule+0xd2/0x260 [ 276.913476][ T27] schedule_preempt_disabled+0xf/0x20 [ 276.918961][ T27] __mutex_lock+0xa32/0x12f0 [ 276.923596][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 276.928795][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 276.934378][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 276.939605][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 276.944573][ T27] ? rtnl_newlink+0xa0/0xa0 [ 276.949158][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 276.954467][ T27] netlink_rcv_skb+0x153/0x420 [ 276.959346][ T27] ? rtnl_newlink+0xa0/0xa0 [ 276.963873][ T27] ? netlink_ack+0xa60/0xa60 [ 276.968557][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 276.973864][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 276.979254][ T27] netlink_unicast+0x533/0x7d0 [ 276.984053][ T27] ? netlink_attachskb+0x880/0x880 [ 276.989251][ T27] ? netlink_sendmsg+0x821/0xda0 [ 276.994210][ T27] netlink_sendmsg+0x86d/0xda0 [ 276.999073][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 277.004040][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 277.009067][ T27] sock_sendmsg+0xcf/0x120 [ 277.013507][ T27] ____sys_sendmsg+0x331/0x810 [ 277.018365][ T27] ? kernel_sendmsg+0x50/0x50 [ 277.023060][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 277.027771][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 277.033781][ T27] ___sys_sendmsg+0xf3/0x170 [ 277.038462][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 277.043836][ T27] ? __fget_files+0x21b/0x3e0 [ 277.048607][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 277.053489][ T27] ? mark_lock+0xef/0x17b0 [ 277.058016][ T27] ? __fget_files+0x23d/0x3e0 [ 277.062731][ T27] ? __fget_light+0xea/0x280 [ 277.067423][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 277.073694][ T27] __sys_sendmmsg+0x195/0x470 [ 277.078487][ T27] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 277.083553][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 277.089644][ T27] ? find_held_lock+0x2d/0x110 [ 277.094430][ T27] ? find_held_lock+0x2d/0x110 [ 277.099289][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 277.104779][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 277.109722][ T27] __x64_sys_sendmmsg+0x99/0x100 [ 277.114679][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 277.120672][ T27] do_syscall_64+0x35/0xb0 [ 277.125171][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.131187][ T27] RIP: 0033:0x7ff2918e0a39 [ 277.135608][ T27] RSP: 002b:00007ff28ee56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.144082][ T27] RAX: ffffffffffffffda RBX: 00007ff2919e3f60 RCX: 00007ff2918e0a39 [ 277.152136][ T27] RDX: 0492492492492642 RSI: 0000000020000180 RDI: 0000000000000007 [ 277.160203][ T27] RBP: 00007ff29193ac5f R08: 0000000000000000 R09: 0000000000000000 [ 277.168267][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.176326][ T27] R13: 00007ffd6e53e4bf R14: 00007ff28ee56300 R15: 0000000000022000 [ 277.184340][ T27] [ 277.192623][ T27] INFO: task syz-executor.5:9041 can't die for more than 144 seconds. [ 277.200932][ T27] task:syz-executor.5 state:D stack:28216 pid: 9041 ppid: 6937 flags:0x00004004 [ 277.210263][ T27] Call Trace: [ 277.213557][ T27] [ 277.216621][ T27] __schedule+0xa9a/0x4940 [ 277.221168][ T27] ? io_schedule_timeout+0x140/0x140 [ 277.226568][ T27] schedule+0xd2/0x260 [ 277.230667][ T27] schedule_preempt_disabled+0xf/0x20 [ 277.236055][ T27] __mutex_lock+0xa32/0x12f0 [ 277.240741][ T27] ? ipv6_route_ioctl+0x3c7/0x570 [ 277.245895][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 277.251519][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 277.257778][ T27] ? ipv6_route_ioctl+0x13c/0x570 [ 277.262838][ T27] ipv6_route_ioctl+0x3c7/0x570 [ 277.267782][ T27] ? rt6_purge_dflt_routers+0xd30/0xd30 [ 277.273346][ T27] ? irqentry_enter+0x28/0x50 [ 277.278445][ T27] ? _copy_from_user+0x27/0x180 [ 277.283351][ T27] inet6_ioctl+0x242/0x280 [ 277.288158][ T27] ? inet6_release+0x70/0x70 [ 277.292772][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 277.299135][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 277.304363][ T27] sock_do_ioctl+0xcc/0x230 [ 277.308969][ T27] ? put_user_ifreq+0x140/0x140 [ 277.313846][ T27] ? vfs_fileattr_set+0xbe0/0xbe0 [ 277.319034][ T27] sock_ioctl+0x2f1/0x640 [ 277.323414][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.328096][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 277.333318][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 277.339570][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.344184][ T27] ? __x64_sys_ioctl+0x118/0x200 [ 277.349193][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.353803][ T27] __x64_sys_ioctl+0x193/0x200 [ 277.358660][ T27] do_syscall_64+0x35/0xb0 [ 277.363133][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.369137][ T27] RIP: 0033:0x7fbf6cc96a39 [ 277.373635][ T27] RSP: 002b:00007fbf6a20c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.382150][ T27] RAX: ffffffffffffffda RBX: 00007fbf6cd99f60 RCX: 00007fbf6cc96a39 [ 277.390207][ T27] RDX: 0000000020000140 RSI: 000000000000890b RDI: 0000000000000005 [ 277.398266][ T27] RBP: 00007fbf6ccf0c5f R08: 0000000000000000 R09: 0000000000000000 [ 277.406346][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.414432][ T27] R13: 00007ffdc88d6baf R14: 00007fbf6a20c300 R15: 0000000000022000 [ 277.422556][ T27] [ 277.425579][ T27] INFO: task syz-executor.5:9041 blocked for more than 144 seconds. [ 277.433651][ T27] Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 277.440841][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.449605][ T27] task:syz-executor.5 state:D stack:28216 pid: 9041 ppid: 6937 flags:0x00004004 [ 277.458901][ T27] Call Trace: [ 277.462236][ T27] [ 277.465178][ T27] __schedule+0xa9a/0x4940 [ 277.469720][ T27] ? io_schedule_timeout+0x140/0x140 [ 277.475041][ T27] schedule+0xd2/0x260 [ 277.479187][ T27] schedule_preempt_disabled+0xf/0x20 [ 277.484590][ T27] __mutex_lock+0xa32/0x12f0 [ 277.489280][ T27] ? ipv6_route_ioctl+0x3c7/0x570 [ 277.494339][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 277.499985][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 277.506239][ T27] ? ipv6_route_ioctl+0x13c/0x570 [ 277.511303][ T27] ipv6_route_ioctl+0x3c7/0x570 [ 277.516250][ T27] ? rt6_purge_dflt_routers+0xd30/0xd30 [ 277.521823][ T27] ? irqentry_enter+0x28/0x50 [ 277.526597][ T27] ? _copy_from_user+0x27/0x180 [ 277.531494][ T27] inet6_ioctl+0x242/0x280 [ 277.535931][ T27] ? inet6_release+0x70/0x70 [ 277.540613][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 277.546981][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 277.552226][ T27] sock_do_ioctl+0xcc/0x230 [ 277.556784][ T27] ? put_user_ifreq+0x140/0x140 [ 277.561655][ T27] ? vfs_fileattr_set+0xbe0/0xbe0 [ 277.566790][ T27] sock_ioctl+0x2f1/0x640 [ 277.571147][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.575756][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 277.581047][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 277.587301][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.591919][ T27] ? __x64_sys_ioctl+0x118/0x200 [ 277.596949][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.601593][ T27] __x64_sys_ioctl+0x193/0x200 [ 277.606490][ T27] do_syscall_64+0x35/0xb0 [ 277.610951][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.616926][ T27] RIP: 0033:0x7fbf6cc96a39 [ 277.621381][ T27] RSP: 002b:00007fbf6a20c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.629895][ T27] RAX: ffffffffffffffda RBX: 00007fbf6cd99f60 RCX: 00007fbf6cc96a39 [ 277.637961][ T27] RDX: 0000000020000140 RSI: 000000000000890b RDI: 0000000000000005 [ 277.645949][ T27] RBP: 00007fbf6ccf0c5f R08: 0000000000000000 R09: 0000000000000000 [ 277.654019][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.662111][ T27] R13: 00007ffdc88d6baf R14: 00007fbf6a20c300 R15: 0000000000022000 [ 277.670182][ T27] [ 277.673268][ T27] INFO: task syz-executor.5:9057 can't die for more than 145 seconds. [ 277.681695][ T27] task:syz-executor.5 state:D stack:28688 pid: 9057 ppid: 6937 flags:0x00004004 [ 277.691619][ T27] Call Trace: [ 277.694915][ T27] [ 277.698203][ T27] __schedule+0xa9a/0x4940 [ 277.702668][ T27] ? io_schedule_timeout+0x140/0x140 [ 277.708059][ T27] schedule+0xd2/0x260 [ 277.712145][ T27] schedule_preempt_disabled+0xf/0x20 [ 277.717618][ T27] __mutex_lock+0xa32/0x12f0 [ 277.722238][ T27] ? ipv6_route_ioctl+0x3c7/0x570 [ 277.727388][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 277.732982][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 277.739374][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 277.745641][ T27] ? security_capable+0x8f/0xc0 [ 277.750666][ T27] ipv6_route_ioctl+0x3c7/0x570 [ 277.755573][ T27] ? rt6_purge_dflt_routers+0xd30/0xd30 [ 277.761201][ T27] ? find_held_lock+0x2d/0x110 [ 277.766005][ T27] inet6_ioctl+0x242/0x280 [ 277.770515][ T27] ? inet6_release+0x70/0x70 [ 277.775121][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 277.781461][ T27] sock_do_ioctl+0xcc/0x230 [ 277.785985][ T27] ? put_user_ifreq+0x140/0x140 [ 277.790939][ T27] ? vfs_fileattr_set+0xbe0/0xbe0 [ 277.796002][ T27] sock_ioctl+0x2f1/0x640 [ 277.800422][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.805088][ T27] ? __fget_files+0x23d/0x3e0 [ 277.809872][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 277.816245][ T27] ? br_ioctl_call+0xa0/0xa0 [ 277.820863][ T27] __x64_sys_ioctl+0x193/0x200 [ 277.825654][ T27] do_syscall_64+0x35/0xb0 [ 277.830227][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.836291][ T27] RIP: 0033:0x7fbf6cc96a39 [ 277.840764][ T27] RSP: 002b:00007fbf6a1ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.849264][ T27] RAX: ffffffffffffffda RBX: 00007fbf6cd9a0e0 RCX: 00007fbf6cc96a39 [ 277.857412][ T27] RDX: 0000000020000140 RSI: 000000000000890b RDI: 0000000000000005 [ 277.865394][ T27] RBP: 00007fbf6ccf0c5f R08: 0000000000000000 R09: 0000000000000000 [ 277.873468][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.881539][ T27] R13: 00007ffdc88d6baf R14: 00007fbf6a1ca300 R15: 0000000000022000 [ 277.889613][ T27] [ 277.892645][ T27] INFO: task syz-executor.5:9057 blocked for more than 145 seconds. [ 277.900733][ T27] Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 277.907938][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.916705][ T27] task:syz-executor.5 state:D stack:28688 pid: 9057 ppid: 6937 flags:0x00004004 [ 277.925957][ T27] Call Trace: [ 277.929395][ T27] [ 277.932344][ T27] __schedule+0xa9a/0x4940 [ 277.936872][ T27] ? io_schedule_timeout+0x140/0x140 [ 277.942220][ T27] schedule+0xd2/0x260 [ 277.946357][ T27] schedule_preempt_disabled+0xf/0x20 [ 277.951774][ T27] __mutex_lock+0xa32/0x12f0 [ 277.956478][ T27] ? ipv6_route_ioctl+0x3c7/0x570 [ 277.961527][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 277.967176][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 277.973448][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 277.979788][ T27] ? security_capable+0x8f/0xc0 [ 277.984717][ T27] ipv6_route_ioctl+0x3c7/0x570 [ 277.989654][ T27] ? rt6_purge_dflt_routers+0xd30/0xd30 [ 277.995221][ T27] ? find_held_lock+0x2d/0x110 [ 278.000185][ T27] inet6_ioctl+0x242/0x280 [ 278.004615][ T27] ? inet6_release+0x70/0x70 [ 278.009418][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 278.015705][ T27] sock_do_ioctl+0xcc/0x230 [ 278.020297][ T27] ? put_user_ifreq+0x140/0x140 [ 278.025200][ T27] ? vfs_fileattr_set+0xbe0/0xbe0 [ 278.030455][ T27] sock_ioctl+0x2f1/0x640 [ 278.034802][ T27] ? br_ioctl_call+0xa0/0xa0 [ 278.039504][ T27] ? __fget_files+0x23d/0x3e0 [ 278.044214][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 278.050567][ T27] ? br_ioctl_call+0xa0/0xa0 [ 278.055285][ T27] __x64_sys_ioctl+0x193/0x200 [ 278.060139][ T27] do_syscall_64+0x35/0xb0 [ 278.064611][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 278.070625][ T27] RIP: 0033:0x7fbf6cc96a39 [ 278.075115][ T27] RSP: 002b:00007fbf6a1ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.083624][ T27] RAX: ffffffffffffffda RBX: 00007fbf6cd9a0e0 RCX: 00007fbf6cc96a39 [ 278.091706][ T27] RDX: 0000000020000140 RSI: 000000000000890b RDI: 0000000000000005 [ 278.099780][ T27] RBP: 00007fbf6ccf0c5f R08: 0000000000000000 R09: 0000000000000000 [ 278.107911][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.115999][ T27] R13: 00007ffdc88d6baf R14: 00007fbf6a1ca300 R15: 0000000000022000 [ 278.124073][ T27] [ 278.127188][ T27] [ 278.127188][ T27] Showing all locks held in the system: [ 278.134938][ T27] 4 locks held by kworker/u4:0/8: [ 278.140051][ T27] #0: ffff888011a73138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 278.150443][ T27] #1: ffffc90000cd7db0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 278.160502][ T27] #2: ffffffff8d2e9390 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 [ 278.169927][ T27] #3: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x15/0x190 [ 278.179362][ T27] 1 lock held by khungtaskd/27: [ 278.184222][ T27] #0: ffffffff8bb835a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 278.194338][ T27] 3 locks held by kworker/1:5/8257: [ 278.199629][ T27] #0: ffff88814a757538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 278.210735][ T27] #1: ffffc9000c967db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 278.221139][ T27] #2: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 278.230664][ T27] 3 locks held by kworker/1:9/8548: [ 278.235877][ T27] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 278.247797][ T27] #1: ffffc9000285fdb0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 278.258370][ T27] #2: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 278.268148][ T27] 1 lock held by syz-executor.1/9004: [ 278.273541][ T27] #0: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 278.283042][ T27] 1 lock held by syz-executor.2/9040: [ 278.288505][ T27] #0: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 278.298010][ T27] 1 lock held by syz-executor.5/9041: [ 278.303383][ T27] #0: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_route_ioctl+0x3c7/0x570 [ 278.312769][ T27] 1 lock held by syz-executor.5/9057: [ 278.318235][ T27] #0: ffffffff8d2fcb68 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_route_ioctl+0x3c7/0x570 [ 278.327666][ T27] [ 278.329996][ T27] ============================================= [ 278.329996][ T27] [ 278.338477][ T27] NMI backtrace for cpu 0 [ 278.342806][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 278.352169][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.362229][ T27] Call Trace: [ 278.365505][ T27] [ 278.368428][ T27] dump_stack_lvl+0xcd/0x134 [ 278.373112][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 278.378401][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 278.383648][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 278.389701][ T27] watchdog+0xcb7/0xed0 [ 278.393867][ T27] ? trace_sched_process_hang+0x280/0x280 [ 278.399588][ T27] kthread+0x405/0x4f0 [ 278.403662][ T27] ? set_kthread_struct+0x130/0x130 [ 278.408866][ T27] ret_from_fork+0x1f/0x30 [ 278.413298][ T27] [ 278.416369][ T27] Sending NMI from CPU 0 to CPUs 1: [ 278.421581][ C1] NMI backtrace for cpu 1 [ 278.421592][ C1] CPU: 1 PID: 1056 Comm: kworker/u4:5 Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 278.421614][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.421626][ C1] Workqueue: events_unbound toggle_allocation_gate [ 278.421739][ C1] RIP: 0010:mark_lock+0x12a/0x17b0 [ 278.421763][ C1] Code: 76 48 c1 e0 06 48 05 20 6e f4 8f 48 8d 78 50 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 11 00 0f 85 15 12 00 00 <48> 89 ee 48 23 70 50 41 ba 01 00 00 00 0f 84 79 01 00 00 48 b8 00 [ 278.421783][ C1] RSP: 0018:ffffc900049df750 EFLAGS: 00000046 [ 278.421797][ C1] RAX: ffffffff8ff47420 RBX: 1ffff9200093bef1 RCX: 1ffffffff1fe8e8e [ 278.421811][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8ff47470 [ 278.421824][ C1] RBP: 0000000000000040 R08: 0000000000000000 R09: ffffffff8ff46a07 [ 278.421836][ C1] R10: fffffbfff1fe8d40 R11: 0000000000000000 R12: 0000000000000006 [ 278.421848][ C1] R13: ffff88801bcc27e0 R14: 0000000000000008 R15: ffff88801bcc2800 [ 278.421862][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 278.421882][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.421896][ C1] CR2: 00007fc2fe0e3000 CR3: 000000000b88e000 CR4: 00000000003506e0 [ 278.421910][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.421921][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.421934][ C1] Call Trace: [ 278.421939][ C1] [ 278.421961][ C1] ? __lock_acquire+0x162f/0x54a0 [ 278.421984][ C1] ? lock_chain_count+0x20/0x20 [ 278.422009][ C1] ? mark_lock+0xef/0x17b0 [ 278.422028][ C1] ? mark_lock+0xef/0x17b0 [ 278.422051][ C1] __lock_acquire+0x88f/0x54a0 [ 278.422078][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 278.422105][ C1] lock_acquire+0x1ab/0x510 [ 278.422126][ C1] ? static_key_disable_cpuslocked+0x108/0x1b0 [ 278.422194][ C1] ? lock_release+0x720/0x720 [ 278.422220][ C1] __mutex_lock+0x12f/0x12f0 [ 278.422243][ C1] ? static_key_disable_cpuslocked+0x108/0x1b0 [ 278.422270][ C1] ? static_key_disable_cpuslocked+0x108/0x1b0 [ 278.422297][ C1] ? mutex_lock_io_nested+0x1150/0x1150 [ 278.422320][ C1] ? lock_release+0x720/0x720 [ 278.422341][ C1] ? toggle_allocation_gate+0x100/0x390 [ 278.422371][ C1] static_key_disable_cpuslocked+0x108/0x1b0 [ 278.422398][ C1] static_key_disable+0x16/0x20 [ 278.422422][ C1] toggle_allocation_gate+0x183/0x390 [ 278.422448][ C1] ? lock_release+0x720/0x720 [ 278.422468][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 278.422493][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 278.422523][ C1] process_one_work+0x9b2/0x1690 [ 278.422552][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 278.422579][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 278.422602][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 278.422630][ C1] worker_thread+0x658/0x11f0 [ 278.422659][ C1] ? process_one_work+0x1690/0x1690 [ 278.422685][ C1] kthread+0x405/0x4f0 [ 278.422712][ C1] ? set_kthread_struct+0x130/0x130 [ 278.422737][ C1] ret_from_fork+0x1f/0x30 [ 278.422766][ C1] [ 278.423576][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 278.732240][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 278.741597][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.751643][ T27] Call Trace: [ 278.754915][ T27] [ 278.757834][ T27] dump_stack_lvl+0xcd/0x134 [ 278.762422][ T27] panic+0x2b0/0x6dd [ 278.766343][ T27] ? __warn_printk+0xf3/0xf3 [ 278.770928][ T27] ? watchdog.cold+0x1b9/0x1de [ 278.775714][ T27] watchdog.cold+0x1ca/0x1de [ 278.780299][ T27] ? trace_sched_process_hang+0x280/0x280 [ 278.786017][ T27] kthread+0x405/0x4f0 [ 278.790087][ T27] ? set_kthread_struct+0x130/0x130 [ 278.795298][ T27] ret_from_fork+0x1f/0x30 [ 278.799719][ T27] [ 278.803131][ T27] Kernel Offset: disabled [ 278.807478][ T27] Rebooting in 86400 seconds..