last executing test programs: 5.077530946s ago: executing program 0 (id=2225): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x208000000000203, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x100, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0xa, {0x1, 0x0, 0x0, {0x4, 0x2000000000007, 0x0, 0x7, 0x40000000000003, 0x3, 0x0, 0xc, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x300000000000000) 4.197272378s ago: executing program 0 (id=2240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x20040091) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.832049987s ago: executing program 3 (id=2250): io_setup(0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/217, &(0x7f0000000280)=0xd9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.243067571s ago: executing program 0 (id=2259): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 2.903364949s ago: executing program 3 (id=2264): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 2.350901873s ago: executing program 0 (id=2265): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xd, &(0x7f0000000140)={[0x4]}, 0x8) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80104132, &(0x7f0000000140)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f00000007c0)={{r5, &(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x20140, &(0x7f0000000380)={@align, {0x9, 0x9, 0x8000, 0x3ff}}, 0x80a6, &(0x7f00000003c0), &(0x7f00000004c0)=0x4}, {[0x3, 0x7, 0xb]}, 0x7f, 0xb3, &(0x7f0000000700)=""/179}) bind$pptp(r7, &(0x7f0000000800)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x180800) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r3, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002f00090027bd700000f0ffff03"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 2.154852768s ago: executing program 2 (id=2268): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0xe4, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc2, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1656d6f44a6aafa8cc0dd5c5b114a5964ed6f325e92425ae020677885aa70ed3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="676df3bedf066a676b9a85a8247fdc1f6e93f260e300d765a02744bca139708f"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="58f031cfe4234ea6ebd8d7dbec08a478"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="62265ddf78c911fc20b5d655cfd183f1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2c0d5ceea9d34630b387c4007b7491f7331f54b27d995f8c419dbe322d461754"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e2722756274334e7fdc91ae6b70469f8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5d1dca884c4aa9605972849c5088d3fd"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0xffffffff80000001, 0x162862) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x189281, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000010, &(0x7f0000000140)={[{@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_win95}, {@fat=@uid}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 2.090790449s ago: executing program 2 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.921218023s ago: executing program 3 (id=2271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.771857517s ago: executing program 2 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r0, &(0x7f0000001800)='disconnect', 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0xd4, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x8041) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x40, 0x0, 0x82, 0xbe7c, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 1.771283197s ago: executing program 2 (id=2274): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x0) 1.735661538s ago: executing program 2 (id=2275): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[]) 1.621090061s ago: executing program 0 (id=2276): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.274740529s ago: executing program 4 (id=2277): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) 1.273882289s ago: executing program 1 (id=2288): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.219292321s ago: executing program 1 (id=2278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x12d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.204155421s ago: executing program 4 (id=2279): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000280)="23d6e979c72c8406a68f91c687bb45cb371cc294bdf2beb052a60f5d9202d099f66bdb7c", 0x24}, {&(0x7f0000000500)="e7a47c8d733b26ed89ff84811802df3f2ffa78dc46b6fd2441aeaf0a4b3b407bb97c8711fb1b20c633a48e3210a33d892a2e5a2b445eec01ce6785a143b745c3761ad8b50c01bbb64770de571a78c1d8809c616109bebead5f7846d15194aa7721aaa5a1ed4417573ae0fc025bb42f0664c0429c379bc089c430a17a3907d7dff9c0fcc7f2c21a884b8b680435c21a36e7c5f4bf1632a183d0dd95fdd5681d26d4b5e79a849dc6e7bf4f61ab4d4b4efad01526617599bed1fccae98ee221252cea3467ab99add15b061fcf15bdc5f039f0fb044d8afc556ae23f896b5ce3f3ec2a7cad939d1bb4fb", 0xe8}, {&(0x7f0000000600)="87426d2c3a5a925c6c2e4c7a356f544831ab00e254dcfc1207", 0x19}, {&(0x7f0000000440)="717357ac070000008ebd43eaab57addf2b7cdf826c322c1ec65c7b6bed8292300685427e2f7e1b4676f1c5720e0556d81a16d61cd2031fff3cfd884d0a7521c9aacfd8403739443fdabc9ffba71200f6e486173900"/95, 0x5f}, {&(0x7f00000006c0)="a273a4c4486bbb604660decefce151556d2bc8ae5a0ebe9f2195f44527a050e4191bb6ab5172d7dd9260532f808b3965b148a24aaf41300610e055575d5256ac498c3c94e1e0eb8fc315bd9cfe6bee4e355060309d69458e1cbb346d4db84fd8153a37efb911d4b647c30400001953e2aef32e2d34ca35863f69973ce9e9a2e30ef0167b0b7f25dba5fcb2fad18c94b72b3ccacc3dc0e841dc4b421df7f0a12148c24672cd4778efe52a01f5e201958d392e9ab2d622995b31cf5fb4a304fa328b9ca5486a6a1f895bfd520aaa8e9332a01da83686e99e5988c5b4d6fb2e4c0a4271fb5c47dec9d5056277e5c7df2fe98ba179d5e9e87a", 0xf7}, {&(0x7f00000007c0)="d50d4b16d5074d25fd5f56ca3504f6647e0fd0982f750fa453e4f342e498a7fd5e0210aa915ca0a96c4467d696cf9a3cb5bb78cb2e83f4bd5940d57fcd0321f04c54fde711daa8698e66c0c919e612119b0c9fcd31aec7c24e15157e424d9981d46bfb77b2bfa0c9fad751480fe77b60d38ca82db55234ca6a3e537a5471eee2848dc530bbce1bb5cb0e26f5c7fd7801831f877551a618d00b4c62d174e5f2d89d36cbaf21918c945af1a1f2a883c5791129dd47514c6e93104042e26ed9647ee9d2f1adeb24705a54c79d0a8a44f5dfa1bbbac2d40ff050", 0xd8}, {&(0x7f00000008c0)="656e6c135852bdede918fe8e84109461039731f6a47ab0218a47d34cb09d36b7da3a360452dcad541b2761958c84cdd1e5fa8118382a4680", 0x38}, {&(0x7f0000000ac0)="e9421718a578f5b725e723b1be68a8b5eb016ac5f3f899bdb3bdd4697831733b2b79eaa37eac16708b3a385dce9ec213090cf6ee1441b212d65ea16cbd29b860451fd8b41f364c413e345834b793c5d4216b869681d0de89ae7850d14d4dcc20eb697854e610e7307c70a6fa2df812cf6eeb75bbb02b57e6d141110419fe966c16bd007b4f57fbd7dece59e072de229b335565ed2d4e6137fbb0749ca2b9fd56e2edc4f75ae781c43efae75ee22c206787a683c9521699b59c687feaec448f99189e888992d391c9ae8c1c8aa45da5e20006cc985d5e411469c653244982a1433b58514d", 0xe4}, {&(0x7f0000000bc0)="737d38c172a0c2ac909593226a7e2fc920610547beafeaa9618f2f3e5af06b412c5178eccd4b7ad54e808e8a8282c50151b477f2ce40519a49d29438f0af915121826894cf", 0x45}], 0x9) 1.194929751s ago: executing program 1 (id=2280): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0xe4, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc2, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1656d6f44a6aafa8cc0dd5c5b114a5964ed6f325e92425ae020677885aa70ed3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="676df3bedf066a676b9a85a8247fdc1f6e93f260e300d765a02744bca139708f"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="58f031cfe4234ea6ebd8d7dbec08a478"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="62265ddf78c911fc20b5d655cfd183f1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2c0d5ceea9d34630b387c4007b7491f7331f54b27d995f8c419dbe322d461754"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e2722756274334e7fdc91ae6b70469f8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5d1dca884c4aa9605972849c5088d3fd"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0xffffffff80000001, 0x162862) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x189281, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000010, &(0x7f0000000140)={[{@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_win95}, {@fat=@uid}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}]}, 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 1.165246312s ago: executing program 1 (id=2281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.150556912s ago: executing program 4 (id=2282): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000540)={0x6084}, 0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000108bc811d9e4f5bc23900000000", @ANYRES32=0x0, @ANYBLOB="fffe03001001020008001b00000000001c001a80180002"], 0x44}}, 0x800) 1.038233145s ago: executing program 3 (id=2283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 702.043753ms ago: executing program 2 (id=2284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2004}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f000039f000/0x4000)=nil, 0x4000, 0x9, 0x11, r5, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002bbd7000fedbdf25280000000a0006005050505050500000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x84) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x1, {0x1, 0xff}, 0xfd}, 0x18) 669.224184ms ago: executing program 0 (id=2285): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r0, &(0x7f0000001800)='disconnect', 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r1) getsockname$packet(r1, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0xd4, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x8041) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x40, 0x0, 0x82, 0xbe7c, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 537.161397ms ago: executing program 3 (id=2287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 412.29291ms ago: executing program 3 (id=2289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) openat$uhid(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0) gettimeofday(0x0, &(0x7f0000000080)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x220, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x20000090) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000380)=""/207, 0xcf}) shutdown(r3, 0x2) 226.807015ms ago: executing program 1 (id=2290): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendfile(r2, r1, 0x0, 0x20000) 199.649485ms ago: executing program 4 (id=2291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700), 0x0) write(r0, &(0x7f0000000700), 0x0) write(r0, &(0x7f0000000700)='\x00'/20, 0x14) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700), 0x0) write(r0, &(0x7f0000000700)='\x00'/16, 0x10) write(r0, &(0x7f0000000700)='\x00'/25, 0x19) 96.671658ms ago: executing program 4 (id=2292): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendfile(r2, r1, 0x0, 0x20000) 44.537949ms ago: executing program 1 (id=2293): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x12d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 4 (id=2294): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0xe8, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc2, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1656d6f44a6aafa8cc0dd5c5b114a5964ed6f325e92425ae020677885aa70ed3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="676df3bedf066a676b9a85a8247fdc1f6e93f260e300d765a02744bca139708f"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="58f031cfe4234ea6ebd8d7dbec08a478"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="62265ddf78c911fc20b5d655cfd183f1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2c0d5ceea9d34630b387c4007b7491f7331f54b27d995f8c419dbe322d461754"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e2722756274334e7fdc91ae6b70469f8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5d1dca884c4aa9605972849c5088d3fd"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0xffffffff80000001, 0x162862) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x189281, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000010, &(0x7f0000000140)={[{@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_win95}, {@fat=@uid}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): syzkaller0 entered promiscuous mode [ 138.469939][ T5936] tipc: Enabled bearer , priority 0 [ 138.521588][ T5935] tipc: Enabled bearer , priority 0 [ 138.526679][ T5936] tipc: Resetting bearer [ 138.547371][ T5934] tipc: Resetting bearer [ 138.596686][ T5934] tipc: Disabling bearer [ 138.610153][ T5935] tipc: Resetting bearer [ 138.622261][ T5933] tipc: Resetting bearer [ 139.058733][ T5933] tipc: Disabling bearer [ 139.084784][ T5949] tipc: Enabled bearer , priority 0 [ 139.095426][ T5949] tipc: Resetting bearer [ 139.197058][ T5948] tipc: Disabling bearer [ 141.159513][ T5995] tipc: Enabled bearer , priority 0 [ 141.163401][ T5995] tipc: Resetting bearer [ 141.339948][ T5998] usb usb7: usbfs: process 5998 (syz.0.445) did not claim interface 0 before use [ 141.345393][ T5994] tipc: Disabling bearer [ 141.562800][ T6001] loop2: detected capacity change from 0 to 256 [ 141.733012][ T6011] tipc: Enabled bearer , priority 0 [ 141.734988][ T6011] device syzkaller0 entered promiscuous mode [ 142.357950][ T6015] tipc: Resetting bearer [ 142.372053][ T6010] tipc: Resetting bearer [ 142.446641][ T6010] tipc: Disabling bearer [ 143.609349][ T6040] tipc: Enabled bearer , priority 0 [ 143.613495][ T6040] tipc: Resetting bearer [ 144.277701][ T6039] tipc: Disabling bearer [ 144.568869][ T6057] usb usb7: usbfs: process 6057 (syz.3.462) did not claim interface 0 before use [ 144.810768][ T6063] device syzkaller0 entered promiscuous mode [ 144.813899][ T6063] tipc: Enabled bearer , priority 0 [ 144.819605][ T6063] tipc: Resetting bearer [ 144.821898][ T6060] tipc: Resetting bearer [ 145.298491][ T6060] tipc: Disabling bearer [ 145.508037][ T6070] tipc: Enabled bearer , priority 0 [ 145.509836][ T6070] device syzkaller0 entered promiscuous mode [ 145.520235][ T6070] tipc: Resetting bearer [ 145.542356][ T6069] tipc: Resetting bearer [ 145.573359][ T6076] binder: 6075:6076 tried to acquire reference to desc 0, got 1 instead [ 145.575894][ T6076] binder: 6075:6076 got new transaction with bad transaction stack, transaction 8 has target 6075:0 [ 145.592083][ T6069] tipc: Disabling bearer [ 145.601746][ T6076] binder: 6075:6076 transaction call to 6075:0 failed 9/29201/-71, size 0-0 line 3122 [ 145.605082][ T7] binder: release 6075:6076 transaction 8 out, still active [ 145.959326][ T4343] binder: send failed reply for transaction 8, target dead [ 146.628932][ T6111] device syzkaller0 entered promiscuous mode [ 146.632227][ T6111] tipc: Enabled bearer , priority 0 [ 146.637683][ T6111] tipc: Resetting bearer [ 146.640525][ T6108] tipc: Resetting bearer [ 147.678468][ T6108] tipc: Disabling bearer [ 147.698476][ T6113] usb usb7: usbfs: process 6113 (syz.2.480) did not claim interface 0 before use [ 148.168249][ T6119] tipc: Enabled bearer , priority 0 [ 148.189401][ T6128] loop0: detected capacity change from 0 to 256 [ 148.203505][ T6117] tipc: Disabling bearer [ 150.647169][ T6165] overlayfs: failed to resolve './bus': -2 [ 150.908667][ T6169] usb usb7: usbfs: process 6169 (syz.1.495) did not claim interface 0 before use [ 151.422822][ T6180] tipc: Enabled bearer , priority 0 [ 151.427834][ T6180] device syzkaller0 entered promiscuous mode [ 151.440631][ T6180] tipc: Resetting bearer [ 151.447183][ T6178] tipc: Resetting bearer [ 152.117179][ T6178] tipc: Disabling bearer [ 153.720663][ T6210] overlayfs: failed to resolve './bus': -2 [ 154.081086][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 154.081141][ T4345] Bluetooth: hci4: command 0x0406 tx timeout [ 154.083801][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 154.092629][ T4338] Bluetooth: hci2: command 0x0406 tx timeout [ 154.110619][ T6218] usb usb7: usbfs: process 6218 (syz.0.512) did not claim interface 0 before use [ 154.671869][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 154.699447][ T6240] loop1: detected capacity change from 0 to 512 [ 155.436550][ T6240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.581596][ T6240] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 2: comm syz.1.515: invalid block [ 155.584119][ T6240] EXT4-fs (loop1): Remounting filesystem read-only [ 155.585334][ T6240] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.515: couldn't read orphan inode 11 (err -117) [ 155.587954][ T6240] EXT4-fs (loop1): Remounting filesystem read-only [ 155.589093][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.640702][ T6251] tipc: Enabled bearer , priority 0 [ 155.643466][ T6251] device syzkaller0 entered promiscuous mode [ 155.663727][ T6251] tipc: Resetting bearer [ 155.666856][ T6255] overlayfs: failed to resolve './bus': -2 [ 155.679366][ T6250] tipc: Resetting bearer [ 155.843028][ T6250] tipc: Disabling bearer [ 156.053482][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 156.548153][ T6281] usb usb7: usbfs: process 6281 (syz.4.531) did not claim interface 0 before use [ 157.141655][ T6293] fuse: Unknown parameter 'grou00000000000000000000' [ 157.302643][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 157.325748][ T6307] loop4: detected capacity change from 0 to 512 [ 158.477839][ T6302] tipc: Enabled bearer , priority 0 [ 158.479719][ T6302] device syzkaller0 entered promiscuous mode [ 158.492621][ T6302] tipc: Resetting bearer [ 158.498310][ T6307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.220497][ T6301] tipc: Resetting bearer [ 159.224703][ T6307] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 2: comm syz.4.536: invalid block [ 159.227961][ T6307] EXT4-fs (loop4): Remounting filesystem read-only [ 159.229277][ T6307] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.536: couldn't read orphan inode 11 (err -117) [ 159.231805][ T6307] EXT4-fs (loop4): Remounting filesystem read-only [ 159.232993][ T6307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.306637][ T6301] tipc: Disabling bearer [ 159.450162][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 159.761473][ T6331] fuse: Unknown parameter 'grou00000000000000000000' [ 161.341556][ T6358] loop1: detected capacity change from 0 to 8192 [ 161.360492][ T6369] tipc: Enabled bearer , priority 0 [ 161.362359][ T6369] device syzkaller0 entered promiscuous mode [ 161.372243][ T6369] tipc: Resetting bearer [ 161.374561][ T6368] tipc: Resetting bearer [ 161.400295][ T6358] loop1: p1 p2 p3 p4[EZD] [ 161.401155][ T6358] loop1: partition table partially beyond EOD, truncated [ 161.402384][ T6358] loop1: p1 start 16384 is beyond EOD, truncated [ 161.403460][ T6358] loop1: p2 size 150994944 extends beyond EOD, truncated [ 161.408816][ T6358] loop1: p3 start 67108864 is beyond EOD, truncated [ 161.410367][ T6358] loop1: p4 size 33555584 extends beyond EOD, truncated [ 161.416831][ T6368] tipc: Disabling bearer [ 161.425378][ T6371] device syzkaller0 entered promiscuous mode [ 161.429063][ T6371] tipc: Enabled bearer , priority 0 [ 161.434162][ T6371] tipc: Resetting bearer [ 161.438035][ T6370] tipc: Resetting bearer [ 161.471452][ T6370] tipc: Disabling bearer [ 161.625083][ T6384] device syzkaller0 entered promiscuous mode [ 162.073747][ T6396] loop4: detected capacity change from 0 to 256 [ 162.145642][ T5654] udevd[5654]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 162.160526][ T5698] udevd[5698]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 173.695055][ T6409] tipc: Enabling of bearer rejected, failed to enable media [ 173.748812][ T6435] device syzkaller0 entered promiscuous mode [ 173.751669][ T6435] tipc: Enabled bearer , priority 0 [ 173.757497][ T6435] tipc: Resetting bearer [ 173.759650][ T6434] tipc: Resetting bearer [ 174.000794][ T6446] loop3: detected capacity change from 0 to 512 [ 174.962952][ T6446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.975081][ T6434] tipc: Disabling bearer [ 174.984486][ T6446] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 2: comm syz.3.575: invalid block [ 174.987286][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 175.005278][ T6446] EXT4-fs (loop3): Remounting filesystem read-only [ 175.006610][ T6446] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.575: couldn't read orphan inode 11 (err -117) [ 175.008936][ T6446] EXT4-fs (loop3): Remounting filesystem read-only [ 175.010143][ T6446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.112687][ T6456] loop2: detected capacity change from 0 to 256 [ 175.193780][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 175.595597][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 175.617574][ T6478] loop3: detected capacity change from 0 to 512 [ 176.172936][ T6478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.253009][ T6478] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 2: comm syz.3.586: invalid block [ 176.262720][ T6478] EXT4-fs (loop3): Remounting filesystem read-only [ 176.263987][ T6478] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.586: couldn't read orphan inode 11 (err -117) [ 176.275784][ T6478] EXT4-fs (loop3): Remounting filesystem read-only [ 176.277067][ T6478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.095644][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 177.101810][ T6491] loop2: detected capacity change from 0 to 128 [ 177.108765][ T6490] tipc: Enabled bearer , priority 0 [ 177.110907][ T6490] device syzkaller0 entered promiscuous mode [ 177.113535][ T6490] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 177.183378][ T6491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 177.184961][ T6491] System zones: 1-3, 19-19, 35-36 [ 177.209451][ T6491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.525446][ T6490] tipc: Resetting bearer [ 177.542136][ T6488] tipc: Resetting bearer [ 177.955446][ T6488] tipc: Disabling bearer [ 177.981390][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 178.006029][ T6507] device syzkaller0 entered promiscuous mode [ 178.022418][ T6507] tipc: Enabled bearer , priority 0 [ 178.030150][ T6515] loop2: detected capacity change from 0 to 256 [ 178.051277][ T6507] tipc: Resetting bearer [ 178.075569][ T6506] tipc: Resetting bearer [ 178.199959][ T6506] tipc: Disabling bearer [ 179.590985][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 179.614866][ T6546] loop4: detected capacity change from 0 to 512 [ 179.881650][ T6546] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.122783][ T6546] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 2: comm syz.4.603: invalid block [ 180.125623][ T6546] EXT4-fs (loop4): Remounting filesystem read-only [ 180.127084][ T6546] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.603: couldn't read orphan inode 11 (err -117) [ 180.129578][ T6546] EXT4-fs (loop4): Remounting filesystem read-only [ 180.130724][ T6546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.641384][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 180.670238][ T6563] tipc: Enabled bearer , priority 0 [ 180.673216][ T6558] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 180.757607][ T6562] tipc: Resetting bearer [ 180.884289][ T6572] loop4: detected capacity change from 0 to 512 [ 181.108094][ T6572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.125036][ T6572] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 2: comm syz.4.612: invalid block [ 181.130724][ T6572] EXT4-fs (loop4): Remounting filesystem read-only [ 181.131933][ T6572] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.612: couldn't read orphan inode 11 (err -117) [ 181.134064][ T6572] EXT4-fs (loop4): Remounting filesystem read-only [ 181.135223][ T6572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.186630][ T6557] tipc: Disabling bearer [ 181.218030][ T6574] tipc: Enabled bearer , priority 0 [ 181.225246][ T6570] tipc: Resetting bearer [ 181.230753][ T6569] tipc: Disabling bearer [ 181.235005][ T6578] device syzkaller0 entered promiscuous mode [ 181.240370][ T6578] tipc: Enabled bearer , priority 0 [ 181.245892][ T6578] tipc: Resetting bearer [ 181.258833][ T6577] tipc: Resetting bearer [ 181.306820][ T6577] tipc: Disabling bearer [ 181.371228][ T6583] loop3: detected capacity change from 0 to 8192 [ 181.380126][ T6584] usb usb7: usbfs: process 6584 (syz.2.614) did not claim interface 0 before use [ 181.426957][ T6583] loop3: p1 p2 p3 p4[EZD] [ 181.434952][ T6583] loop3: partition table partially beyond EOD, truncated [ 181.740708][ T6583] loop3: p1 start 16384 is beyond EOD, truncated [ 181.742281][ T6583] loop3: p2 size 150994944 extends beyond EOD, truncated [ 181.744388][ T6583] loop3: p3 start 67108864 is beyond EOD, truncated [ 181.746479][ T6583] loop3: p4 size 33555584 extends beyond EOD, truncated [ 181.746969][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 182.177519][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 182.178518][ T6441] udevd[6441]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 182.676656][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 182.681467][ T6607] loop0: detected capacity change from 0 to 512 [ 182.683351][ T6607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.689453][ T6607] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 2: comm syz.0.623: invalid block [ 182.691815][ T6607] EXT4-fs (loop0): Remounting filesystem read-only [ 182.692985][ T6607] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.623: couldn't read orphan inode 11 (err -117) [ 182.695459][ T6607] EXT4-fs (loop0): Remounting filesystem read-only [ 182.696631][ T6607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.114608][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 183.455602][ T6622] tipc: Enabled bearer , priority 0 [ 183.468502][ T6622] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 183.518885][ T6622] tipc: Resetting bearer [ 183.646637][ T6619] tipc: Disabling bearer [ 183.648872][ T6627] tipc: Enabled bearer , priority 0 [ 183.653269][ T6624] tipc: Resetting bearer [ 183.656631][ T6629] device syzkaller0 entered promiscuous mode [ 183.659462][ T6623] tipc: Disabling bearer [ 183.665074][ T6629] tipc: Enabled bearer , priority 0 [ 183.673232][ T6633] loop1: detected capacity change from 0 to 8192 [ 183.674614][ T6629] tipc: Resetting bearer [ 183.680331][ T6628] tipc: Resetting bearer [ 183.709781][ T6635] loop0: detected capacity change from 0 to 128 [ 183.721186][ T6635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 183.722705][ T6635] System zones: 1-3, 19-19, 35-36 [ 183.724075][ T6635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.727128][ T6628] tipc: Disabling bearer [ 183.730798][ T6633] loop1: p1 p2 p3 p4[EZD] [ 183.731564][ T6633] loop1: partition table partially beyond EOD, truncated [ 183.732789][ T6633] loop1: p1 start 16384 is beyond EOD, truncated [ 183.733780][ T6633] loop1: p2 size 150994944 extends beyond EOD, truncated [ 183.736571][ T6633] loop1: p3 start 67108864 is beyond EOD, truncated [ 183.737667][ T6633] loop1: p4 size 33555584 extends beyond EOD, truncated [ 184.998082][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 185.228178][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 185.231918][ T6441] udevd[6441]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.674066][ T6671] loop1: detected capacity change from 0 to 256 [ 185.684904][ T6668] tipc: Enabled bearer , priority 0 [ 185.690016][ T6668] tipc: Resetting bearer [ 185.692847][ T6672] tipc: Enabled bearer , priority 0 [ 185.694631][ T6672] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 185.727533][ T6672] tipc: Resetting bearer [ 185.729510][ T6667] tipc: Disabling bearer [ 185.747053][ T6673] usb usb7: usbfs: process 6673 (syz.3.640) did not claim interface 0 before use [ 185.816667][ T6670] tipc: Disabling bearer [ 185.834138][ T6676] loop4: detected capacity change from 0 to 8192 [ 185.888905][ T6676] loop4: p1 p2 p3 p4[EZD] [ 185.889823][ T6676] loop4: partition table partially beyond EOD, truncated [ 185.891144][ T6676] loop4: p1 start 16384 is beyond EOD, truncated [ 185.892119][ T6676] loop4: p2 size 150994944 extends beyond EOD, truncated [ 185.895908][ T6676] loop4: p3 start 67108864 is beyond EOD, truncated [ 185.904468][ T6676] loop4: p4 size 33555584 extends beyond EOD, truncated [ 186.009834][ T6441] udevd[6441]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 186.017567][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 186.103588][ T6685] fuse: Bad value for 'fd' [ 186.382075][ T6687] device syzkaller0 entered promiscuous mode [ 186.388496][ T6687] tipc: Enabled bearer , priority 0 [ 186.394486][ T6687] tipc: Resetting bearer [ 186.399706][ T6686] tipc: Resetting bearer [ 186.447267][ T6686] tipc: Disabling bearer [ 186.628285][ T6691] loop0: detected capacity change from 0 to 8192 [ 186.657130][ T6691] loop0: p1 p2 p3 p4[EZD] [ 186.658202][ T6691] loop0: partition table partially beyond EOD, truncated [ 186.659604][ T6691] loop0: p1 start 16384 is beyond EOD, truncated [ 186.660905][ T6691] loop0: p2 size 150994944 extends beyond EOD, truncated [ 186.663471][ T6691] loop0: p3 start 67108864 is beyond EOD, truncated [ 186.667022][ T6691] loop0: p4 size 33555584 extends beyond EOD, truncated [ 186.688966][ T6697] loop3: detected capacity change from 0 to 8192 [ 187.049864][ T6697] loop3: p1 p2 p3 p4[EZD] [ 187.054013][ T6697] loop3: partition table partially beyond EOD, truncated [ 187.069084][ T6697] loop3: p1 start 16384 is beyond EOD, truncated [ 187.082202][ T6697] loop3: p2 size 150994944 extends beyond EOD, truncated [ 187.106650][ T6697] loop3: p3 start 67108864 is beyond EOD, truncated [ 187.109204][ T6697] loop3: p4 size 33555584 extends beyond EOD, truncated [ 187.163281][ T6706] tipc: Enabled bearer , priority 0 [ 187.170234][ T6706] tipc: Resetting bearer [ 187.311849][ T6705] tipc: Disabling bearer [ 187.436758][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.438727][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.535653][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 187.541572][ T6465] udevd[6465]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 187.549839][ T6441] udevd[6441]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 187.557716][ T6464] udevd[6464]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 187.564751][ T6710] device syzkaller0 entered promiscuous mode [ 187.581232][ T6710] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 187.589343][ T6714] binder: 6712:6714 got transaction to invalid handle, 1 [ 187.590806][ T6714] binder: 6714:6712 cannot find target node [ 187.601951][ T6714] binder: 6712:6714 transaction call to 0:0 failed 13/29201/-22, size 72-0 line 3062 [ 187.619574][ T6713] loop1: detected capacity change from 0 to 8192 [ 187.626617][ T6714] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.638853][ T6713] loop1: p1 p2 p3 p4[EZD] [ 187.639886][ T6713] loop1: partition table partially beyond EOD, truncated [ 187.641298][ T6713] loop1: p1 start 16384 is beyond EOD, truncated [ 187.643519][ T6713] loop1: p2 size 150994944 extends beyond EOD, truncated [ 187.648280][ T6713] loop1: p3 start 67108864 is beyond EOD, truncated [ 187.650360][ T6713] loop1: p4 size 33555584 extends beyond EOD, truncated [ 188.134647][ T6717] tipc: Enabled bearer , priority 0 [ 188.137859][ T6717] tipc: Resetting bearer [ 188.162659][ T6728] binder: 6727:6728 ioctl 4018620d 0 returned -22 [ 188.167928][ T6715] tipc: Disabling bearer [ 188.169813][ T6441] udevd[6441]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 188.170683][ T6728] binder: tried to use weak ref as strong ref [ 188.172830][ T6728] binder: 6727:6728 Acquire 1 refcount change on invalid ref 0 ret -22 [ 188.182604][ T6728] binder: 6727:6728 got transaction to invalid handle, 1 [ 188.183127][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 188.190037][ T6728] binder: 6728:6727 cannot find target node [ 188.191130][ T6728] binder: 6727:6728 transaction call to 0:0 failed 16/29201/-22, size 72-0 line 3062 [ 188.246879][ T6728] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.296956][ T6731] usb usb7: usbfs: process 6731 (syz.1.662) did not claim interface 0 before use [ 188.451485][ T6741] fuse: Bad value for 'fd' [ 189.087555][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 189.495854][ T6750] binder: 6749:6750 tried to acquire reference to desc 0, got 1 instead [ 189.507689][ T6750] binder: 6749:6750 got new transaction with bad transaction stack, transaction 21 has target 6749:0 [ 189.511770][ T6750] binder: 6749:6750 transaction call to 6749:0 failed 22/29201/-71, size 0-0 line 3122 [ 189.515193][ T6750] binder: 6749:6750 ioctl c0306201 0 returned -14 [ 189.520289][ T7] binder: release 6749:6750 transaction 21 out, still active [ 189.521739][ T7] binder: undelivered TRANSACTION_COMPLETE [ 189.522749][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.533889][ T6752] loop4: detected capacity change from 0 to 8192 [ 189.580246][ T6752] loop4: p1 p2 p3 p4[EZD] [ 189.581087][ T6752] loop4: partition table partially beyond EOD, truncated [ 189.585243][ T6752] loop4: p1 start 16384 is beyond EOD, truncated [ 189.587842][ T6752] loop4: p2 size 150994944 extends beyond EOD, truncated [ 189.593333][ T6752] loop4: p3 start 67108864 is beyond EOD, truncated [ 189.596218][ T6752] loop4: p4 size 33555584 extends beyond EOD, truncated [ 189.624133][ T6754] loop3: detected capacity change from 0 to 8192 [ 189.668420][ T6754] loop3: p1 p2 p3 p4[EZD] [ 189.669277][ T6754] loop3: partition table partially beyond EOD, truncated [ 189.670980][ T6754] loop3: p1 start 16384 is beyond EOD, truncated [ 189.672337][ T6754] loop3: p2 size 150994944 extends beyond EOD, truncated [ 189.676590][ T6754] loop3: p3 start 67108864 is beyond EOD, truncated [ 189.678991][ T6754] loop3: p4 size 33555584 extends beyond EOD, truncated [ 190.118450][ T6765] device syzkaller0 entered promiscuous mode [ 190.128636][ T6765] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 190.214586][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 190.800471][ T6763] tipc: Enabled bearer , priority 0 [ 190.875617][ T6779] tipc: Resetting bearer [ 190.878159][ T6441] udevd[6441]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 190.908975][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 190.909229][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 191.103093][ T6784] fuse: Bad value for 'fd' [ 191.295035][ T6762] tipc: Disabling bearer [ 191.323774][ T6788] binder: 6787:6788 tried to acquire reference to desc 0, got 1 instead [ 191.325988][ T6788] binder: 6787:6788 got new transaction with bad transaction stack, transaction 27 has target 6787:0 [ 191.342453][ T6788] binder: 6787:6788 ioctl c0306201 0 returned -14 [ 191.437859][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 191.449479][ T6794] loop1: detected capacity change from 0 to 8192 [ 191.501784][ T6794] loop1: p1 p2 p3 p4[EZD] [ 191.502787][ T6794] loop1: partition table partially beyond EOD, truncated [ 191.504198][ T6794] loop1: p1 start 16384 is beyond EOD, truncated [ 191.505317][ T6794] loop1: p2 size 150994944 extends beyond EOD, truncated [ 191.510357][ T6794] loop1: p3 start 67108864 is beyond EOD, truncated [ 191.512134][ T6794] loop1: p4 size 33555584 extends beyond EOD, truncated [ 191.572356][ T6801] binder: BINDER_SET_CONTEXT_MGR already set [ 191.578277][ T6801] binder: 6797:6801 ioctl 4018620d 20004a80 returned -16 [ 191.608874][ T6799] usb usb7: usbfs: process 6799 (syz.2.686) did not claim interface 0 before use [ 192.167054][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.194823][ T6815] loop4: detected capacity change from 0 to 256 [ 192.204013][ T6819] tipc: Enabled bearer , priority 0 [ 192.207688][ T6819] tipc: Resetting bearer [ 192.629763][ T6818] tipc: Disabling bearer [ 192.643335][ T6824] device syzkaller0 entered promiscuous mode [ 192.651369][ T6824] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 192.662134][ T6828] loop2: detected capacity change from 0 to 8192 [ 192.697078][ T6828] loop2: p1 p2 p3 p4[EZD] [ 192.699090][ T6828] loop2: partition table partially beyond EOD, truncated [ 192.700583][ T6828] loop2: p1 start 16384 is beyond EOD, truncated [ 192.706154][ T6828] loop2: p2 size 150994944 extends beyond EOD, truncated [ 192.713608][ T6828] loop2: p3 start 67108864 is beyond EOD, truncated [ 192.714895][ T6828] loop2: p4 size 33555584 extends beyond EOD, truncated [ 193.210349][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 193.230207][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 193.762994][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.799144][ T6860] loop4: detected capacity change from 0 to 256 [ 193.866926][ T6867] tipc: Enabled bearer , priority 0 [ 193.870537][ T6867] tipc: Resetting bearer [ 193.937920][ T6871] fuse: Bad value for 'fd' [ 194.266581][ T6866] tipc: Disabling bearer [ 194.991114][ T6883] device syzkaller0 entered promiscuous mode [ 194.994311][ T6883] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 195.432004][ T6897] loop1: detected capacity change from 0 to 8192 [ 195.481652][ T6897] loop1: p1 p2 p3 p4[EZD] [ 195.482919][ T6897] loop1: partition table partially beyond EOD, truncated [ 195.487625][ T6897] loop1: p1 start 16384 is beyond EOD, truncated [ 195.488938][ T6897] loop1: p2 size 150994944 extends beyond EOD, truncated [ 195.495438][ T6897] loop1: p3 start 67108864 is beyond EOD, truncated [ 195.499018][ T6897] loop1: p4 size 33555584 extends beyond EOD, truncated [ 195.618722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.633105][ T6902] loop0: detected capacity change from 0 to 256 [ 195.700908][ T6913] device syzkaller0 entered promiscuous mode [ 195.704907][ T6913] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 196.644808][ T6923] tipc: Enabled bearer , priority 0 [ 196.651281][ T6923] tipc: Resetting bearer [ 196.654892][ T6922] tipc: Disabling bearer [ 197.021507][ T6944] loop1: detected capacity change from 0 to 8192 [ 197.058122][ T6950] usb usb7: usbfs: process 6950 (syz.4.734) did not claim interface 0 before use [ 197.064498][ T6944] loop1: p1 p2 p3 p4[EZD] [ 197.069103][ T6944] loop1: partition table partially beyond EOD, truncated [ 197.074449][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.074538][ T6944] loop1: p1 start 16384 is beyond EOD, truncated [ 197.093567][ T6955] loop3: detected capacity change from 0 to 256 [ 197.098027][ T6944] loop1: p2 size 150994944 extends beyond EOD, truncated [ 197.109464][ T6944] loop1: p3 start 67108864 is beyond EOD, truncated [ 197.118152][ T6944] loop1: p4 size 33555584 extends beyond EOD, truncated [ 198.267973][ T6973] binder: 6972:6973 ioctl 4018620d 0 returned -22 [ 198.274400][ T6973] binder: tried to use weak ref as strong ref [ 198.275683][ T6973] binder: 6972:6973 Acquire 1 refcount change on invalid ref 0 ret -22 [ 198.282108][ T6973] binder: 6972:6973 got transaction to invalid handle, 1 [ 198.283057][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 198.283370][ T6973] binder_debug: 6 callbacks suppressed [ 198.283384][ T6973] binder: 6973:6972 cannot find target node [ 198.288691][ T6973] binder: 6972:6973 transaction call to 0:0 failed 33/29201/-22, size 72-0 line 3062 [ 198.291017][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 198.336358][ T6973] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.844149][ T6996] loop0: detected capacity change from 0 to 256 [ 198.971706][ T7002] loop4: detected capacity change from 0 to 256 [ 199.058619][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 199.073799][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.417183][ T7041] loop3: detected capacity change from 0 to 256 [ 200.558832][ T7049] usb usb7: usbfs: process 7049 (syz.2.764) did not claim interface 0 before use [ 200.610853][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.659830][ T7048] tipc: Enabling of bearer rejected, failed to enable media [ 201.672611][ T7080] loop3: detected capacity change from 0 to 8192 [ 201.728023][ T7080] loop3: p1 p2 p3 p4[EZD] [ 201.728779][ T7080] loop3: partition table partially beyond EOD, truncated [ 201.730622][ T7080] loop3: p1 start 16384 is beyond EOD, truncated [ 201.731814][ T7080] loop3: p2 size 150994944 extends beyond EOD, truncated [ 201.736945][ T7080] loop3: p3 start 67108864 is beyond EOD, truncated [ 201.738141][ T7080] loop3: p4 size 33555584 extends beyond EOD, truncated [ 201.811713][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 201.826888][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 201.943627][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.315146][ T7100] binder: 7098:7100 got transaction to invalid handle, 1 [ 202.319855][ T7100] binder: 7100:7098 cannot find target node [ 202.323230][ T7100] binder: 7098:7100 transaction call to 0:0 failed 37/29201/-22, size 72-0 line 3062 [ 202.337263][ T7097] usb usb7: usbfs: process 7097 (syz.0.787) did not claim interface 0 before use [ 202.347774][ T7100] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.772737][ T7114] tipc: Enabling of bearer rejected, failed to enable media [ 203.747013][ T7143] loop3: detected capacity change from 0 to 128 [ 203.761479][ T7143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 203.763178][ T7143] System zones: 1-3, 19-19, 35-36 [ 203.770876][ T7143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.904307][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 203.971348][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.445960][ T7174] tipc: Enabling of bearer rejected, failed to enable media [ 205.473000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.517387][ T7208] tipc: Enabled bearer , priority 0 [ 205.520345][ T7208] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 206.007675][ T7220] syz.0.814 uses obsolete (PF_INET,SOCK_PACKET) [ 206.038772][ T7207] tipc: Disabling bearer [ 206.049984][ T7212] loop3: detected capacity change from 0 to 256 [ 206.463122][ T7233] device syzkaller0 entered promiscuous mode [ 206.517956][ T7231] usb usb7: usbfs: process 7231 (syz.4.818) did not claim interface 0 before use [ 206.941616][ T7225] tipc: Enabling of bearer rejected, failed to enable media [ 206.979052][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.517145][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 207.520467][ T7269] loop4: detected capacity change from 0 to 128 [ 207.532371][ T7270] tipc: Enabled bearer , priority 0 [ 207.535497][ T7270] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 207.541241][ T7269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 207.542811][ T7269] System zones: 1-3, 19-19, 35-36 [ 207.550350][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.725958][ T7268] tipc: Disabling bearer [ 208.017277][ T7291] usb usb7: usbfs: process 7291 (syz.2.832) did not claim interface 0 before use [ 208.395183][ T7307] overlayfs: missing 'workdir' [ 208.423748][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.514075][ T7313] loop2: detected capacity change from 0 to 256 [ 208.567186][ T7317] tipc: Enabled bearer , priority 0 [ 208.569045][ T7317] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 209.082764][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 209.409299][ T7316] tipc: Disabling bearer [ 209.428848][ T7324] device syzkaller0 entered promiscuous mode [ 209.504925][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 209.567453][ T7338] tipc: Enabled bearer , priority 0 [ 209.569330][ T7338] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 210.224192][ T7357] usb usb7: usbfs: process 7357 (syz.1.846) did not claim interface 0 before use [ 210.609283][ T7362] overlayfs: missing 'workdir' [ 210.623173][ T7336] tipc: Disabling bearer [ 210.632825][ T7] tipc: Node number set to 4251789740 [ 210.673178][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.855846][ T7381] loop2: detected capacity change from 0 to 128 [ 210.902113][ T7381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 210.903805][ T7381] System zones: 1-3, 19-19, 35-36 [ 210.914184][ T7381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.110975][ T7400] overlayfs: missing 'workdir' [ 212.132863][ T7406] tipc: Enabled bearer , priority 0 [ 212.137063][ T7406] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 212.327179][ T7405] tipc: Disabling bearer [ 212.337549][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 212.372733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.408419][ T7414] loop2: detected capacity change from 0 to 256 [ 212.961575][ T7422] loop3: detected capacity change from 0 to 8192 [ 213.481766][ T7422] loop3: p1 p2 p3 p4[EZD] [ 213.494406][ T7422] loop3: partition table partially beyond EOD, truncated [ 213.500174][ T7422] loop3: p1 start 16384 is beyond EOD, truncated [ 213.504326][ T7422] loop3: p2 size 150994944 extends beyond EOD, truncated [ 213.516329][ T7422] loop3: p3 start 67108864 is beyond EOD, truncated [ 213.520962][ T7422] loop3: p4 size 33555584 extends beyond EOD, truncated [ 214.240769][ T7448] overlayfs: missing 'lowerdir' [ 214.259955][ T7450] tipc: Enabled bearer , priority 0 [ 214.263451][ T7450] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 214.630930][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 214.632678][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 214.643253][ T7460] loop0: detected capacity change from 0 to 128 [ 214.653180][ T7460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 214.654833][ T7460] System zones: 1-3, 19-19, 35-36 [ 214.659636][ T7460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 215.129134][ T7449] tipc: Disabling bearer [ 215.133547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.170801][ T7469] device syzkaller0 entered promiscuous mode [ 215.180945][ T7469] tipc: Enabled bearer , priority 0 [ 215.189081][ T7468] tipc: Resetting bearer [ 215.297808][ T7468] tipc: Disabling bearer [ 215.310121][ T7472] tipc: Enabled bearer , priority 0 [ 215.319609][ T7472] device syzkaller0 entered promiscuous mode [ 215.329752][ T7472] tipc: Resetting bearer [ 215.343332][ T7471] tipc: Resetting bearer [ 215.387895][ T7471] tipc: Disabling bearer [ 215.572873][ T7482] loop1: detected capacity change from 0 to 8192 [ 215.587581][ T7485] usb usb7: usbfs: process 7485 (syz.4.883) did not claim interface 0 before use [ 215.710690][ T7482] loop1: p1 p2 p3 p4[EZD] [ 215.711525][ T7482] loop1: partition table partially beyond EOD, truncated [ 215.713626][ T7482] loop1: p1 start 16384 is beyond EOD, truncated [ 215.714752][ T7482] loop1: p2 size 150994944 extends beyond EOD, truncated [ 215.720697][ T7482] loop1: p3 start 67108864 is beyond EOD, truncated [ 215.721990][ T7482] loop1: p4 size 33555584 extends beyond EOD, truncated [ 215.850038][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 215.850100][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 216.213941][ T7492] device syzkaller0 entered promiscuous mode [ 216.267587][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 216.309971][ T7499] tipc: Enabling of bearer rejected, failed to enable media [ 216.683948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.812444][ T7520] tipc: Enabling of bearer rejected, failed to enable media [ 216.861332][ T7527] loop3: detected capacity change from 0 to 128 [ 217.245331][ T7527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 217.249423][ T7527] System zones: 1-3, 19-19, 35-36 [ 217.264770][ T7527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.318937][ T7543] loop2: detected capacity change from 0 to 8192 [ 217.407868][ T7543] loop2: p1 p2 p3 p4[EZD] [ 217.408798][ T7543] loop2: partition table partially beyond EOD, truncated [ 217.410061][ T7543] loop2: p1 start 16384 is beyond EOD, truncated [ 217.411078][ T7543] loop2: p2 size 150994944 extends beyond EOD, truncated [ 217.414766][ T7543] loop2: p3 start 67108864 is beyond EOD, truncated [ 217.416777][ T7543] loop2: p4 size 33555584 extends beyond EOD, truncated [ 217.749624][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 217.933614][ T7562] usb usb7: usbfs: process 7562 (syz.3.902) did not claim interface 0 before use [ 218.207062][ T7560] device syzkaller0 entered promiscuous mode [ 218.287824][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 218.289510][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 219.641647][ T7587] loop2: detected capacity change from 0 to 128 [ 219.671862][ T7587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 219.675529][ T7587] System zones: 1-3, 19-19, 35-36 [ 219.684200][ T7587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.749654][ T7594] loop3: detected capacity change from 0 to 8192 [ 219.794308][ T7594] loop3: p1 p2 p3 p4[EZD] [ 219.797961][ T7594] loop3: partition table partially beyond EOD, truncated [ 219.799744][ T7594] loop3: p1 start 16384 is beyond EOD, truncated [ 219.801012][ T7594] loop3: p2 size 150994944 extends beyond EOD, truncated [ 219.805487][ T7594] loop3: p3 start 67108864 is beyond EOD, truncated [ 219.807729][ T7594] loop3: p4 size 33555584 extends beyond EOD, truncated [ 220.327074][ T4338] Bluetooth: hci3: command 0x0406 tx timeout [ 220.431620][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 221.211732][ T7607] ======================================================= [ 221.211732][ T7607] WARNING: The mand mount option has been deprecated and [ 221.211732][ T7607] and is ignored by this kernel. Remove the mand [ 221.211732][ T7607] option from the mount to silence this warning. [ 221.211732][ T7607] ======================================================= [ 221.249216][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 221.253029][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 221.291918][ T7623] device syzkaller0 entered promiscuous mode [ 221.754250][ T7631] device syzkaller0 entered promiscuous mode [ 221.760499][ T7631] tipc: Enabled bearer , priority 0 [ 221.768476][ T7631] tipc: Resetting bearer [ 221.774261][ T7630] tipc: Resetting bearer [ 222.138010][ T7630] tipc: Disabling bearer [ 223.309657][ T7666] loop1: detected capacity change from 0 to 16 [ 223.332243][ T7665] device syzkaller0 entered promiscuous mode [ 223.338272][ T7665] tipc: Enabled bearer , priority 0 [ 223.338708][ T7666] erofs: (device loop1): mounted with root inode @ nid 36. [ 223.345877][ T7665] tipc: Resetting bearer [ 223.722904][ T7666] syz.1.937: attempt to access beyond end of device [ 223.722904][ T7666] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 223.730242][ T7662] tipc: Resetting bearer [ 223.786940][ T7662] tipc: Disabling bearer [ 223.899664][ T7684] loop4: detected capacity change from 0 to 128 [ 224.720776][ T7702] tipc: Enabled bearer , priority 0 [ 224.725157][ T7702] tipc: Resetting bearer [ 225.147672][ T7701] tipc: Disabling bearer [ 225.594445][ T7730] loop4: detected capacity change from 0 to 16 [ 225.601127][ T7730] erofs: (device loop4): mounted with root inode @ nid 36. [ 225.606571][ T7730] syz.4.960: attempt to access beyond end of device [ 225.606571][ T7730] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 225.880251][ T7747] usb usb7: usbfs: process 7747 (syz.4.963) did not claim interface 0 before use [ 227.044500][ T7769] loop2: detected capacity change from 0 to 16 [ 227.050169][ T7769] erofs: (device loop2): mounted with root inode @ nid 36. [ 227.853478][ T7785] loop4: detected capacity change from 0 to 256 [ 227.995345][ T7798] tipc: Enabling of bearer rejected, failed to enable media [ 228.048998][ T7796] loop3: detected capacity change from 0 to 8192 [ 228.077343][ T7796] loop3: p1 p2 p3 p4[EZD] [ 228.078414][ T7796] loop3: partition table partially beyond EOD, truncated [ 228.079894][ T7796] loop3: p1 start 16384 is beyond EOD, truncated [ 228.081201][ T7796] loop3: p2 size 150994944 extends beyond EOD, truncated [ 228.084841][ T7796] loop3: p3 start 67108864 is beyond EOD, truncated [ 228.090259][ T7796] loop3: p4 size 33555584 extends beyond EOD, truncated [ 228.316002][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 228.337326][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 228.414815][ T7831] loop1: detected capacity change from 0 to 256 [ 229.541478][ T7851] loop0: detected capacity change from 0 to 8192 [ 229.620621][ T7851] loop0: p1 p2 p3 p4[EZD] [ 229.621694][ T7851] loop0: partition table partially beyond EOD, truncated [ 229.623482][ T7851] loop0: p1 start 16384 is beyond EOD, truncated [ 229.624755][ T7851] loop0: p2 size 150994944 extends beyond EOD, truncated [ 229.627174][ T7851] loop0: p3 start 67108864 is beyond EOD, truncated [ 229.628509][ T7851] loop0: p4 size 33555584 extends beyond EOD, truncated [ 230.010871][ T7857] tipc: Enabling of bearer rejected, failed to enable media [ 230.133509][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 230.170637][ T6448] udevd[6448]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 230.221593][ T7883] loop2: detected capacity change from 0 to 256 [ 230.298393][ T7892] loop1: detected capacity change from 0 to 16 [ 230.303404][ T7892] erofs: (device loop1): mounted with root inode @ nid 36. [ 231.347241][ T7920] usb usb7: usbfs: process 7920 (syz.4.1010) did not claim interface 0 before use [ 231.593037][ T7931] tipc: Enabling of bearer rejected, failed to enable media [ 231.658509][ T7935] loop3: detected capacity change from 0 to 256 [ 231.699540][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'. [ 231.710313][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 231.717589][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 233.439356][ T7994] tipc: Enabling of bearer rejected, failed to enable media [ 233.442926][ T7996] device syzkaller0 entered promiscuous mode [ 233.446650][ T7996] tipc: Enabled bearer , priority 0 [ 233.451605][ T7996] tipc: Resetting bearer [ 233.460946][ T7995] tipc: Resetting bearer [ 233.548945][ T7995] tipc: Disabling bearer [ 233.670032][ T8019] loop4: detected capacity change from 0 to 256 [ 234.435569][ T8049] device syzkaller0 entered promiscuous mode [ 234.452018][ T8049] tipc: Enabled bearer , priority 0 [ 234.457461][ T8049] tipc: Resetting bearer [ 234.499052][ T8047] tipc: Resetting bearer [ 234.536657][ T8047] tipc: Disabling bearer [ 234.545537][ T8054] device syzkaller0 entered promiscuous mode [ 234.846622][ T8052] tipc: Enabled bearer , priority 0 [ 234.848047][ T8058] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 234.962757][ T8064] loop2: detected capacity change from 0 to 256 [ 235.019785][ T8050] tipc: Disabling bearer [ 235.322818][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.325698][ T8086] device bridge_slave_0 left promiscuous mode [ 235.329272][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.378099][ T8086] device bridge_slave_1 left promiscuous mode [ 235.379542][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.418729][ T8086] bond0: (slave bond_slave_0): Releasing backup interface [ 235.461945][ T8086] bond0: (slave bond_slave_1): Releasing backup interface [ 235.518383][ T8086] team0: Failed to send options change via netlink (err -105) [ 235.519844][ T8086] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 235.521771][ T8086] team0: Port device team_slave_0 removed [ 235.530236][ T8086] team0: Failed to send options change via netlink (err -105) [ 235.531669][ T8086] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 235.533583][ T8086] team0: Port device team_slave_1 removed [ 235.534904][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.536676][ T8086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.538745][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.540006][ T8086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.550551][ T8091] team0: Failed to send options change via netlink (err -105) [ 235.552445][ T8091] team0: Mode changed to "loadbalance" [ 235.554024][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 235.583231][ T8099] device syzkaller0 entered promiscuous mode [ 235.587148][ T8099] tipc: Enabled bearer , priority 0 [ 235.593215][ T8099] tipc: Resetting bearer [ 235.605399][ T8098] tipc: Resetting bearer [ 235.627189][ T8098] tipc: Disabling bearer [ 235.632242][ T8101] tipc: Enabled bearer , priority 0 [ 235.634112][ T8101] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 235.778116][ T8100] tipc: Disabling bearer [ 235.787738][ T8105] loop1: detected capacity change from 0 to 256 [ 235.787894][ T8107] device syzkaller0 entered promiscuous mode [ 236.356483][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'. [ 236.388601][ T8132] device syzkaller0 entered promiscuous mode [ 236.391716][ T8132] tipc: Enabled bearer , priority 0 [ 236.397014][ T8132] tipc: Resetting bearer [ 236.399345][ T8131] tipc: Resetting bearer [ 236.436909][ T8131] tipc: Disabling bearer [ 236.575888][ T8142] tipc: Enabled bearer , priority 0 [ 236.579527][ T8142] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 236.720760][ T8146] loop4: detected capacity change from 0 to 256 [ 236.743226][ T8141] tipc: Disabling bearer [ 236.758191][ T8148] device syzkaller0 entered promiscuous mode [ 237.020793][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.023402][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.024794][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.027654][ T8161] device bridge_slave_0 left promiscuous mode [ 237.028933][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.057434][ T8161] device bridge_slave_1 left promiscuous mode [ 237.059420][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.108481][ T8161] bond0: (slave bond_slave_0): Releasing backup interface [ 237.149812][ T8161] bond0: (slave bond_slave_1): Releasing backup interface [ 237.206701][ T8161] team0: Port device team_slave_0 removed [ 237.214377][ T8161] team0: Port device team_slave_1 removed [ 237.216438][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.217940][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.219902][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.221636][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.301094][ T8162] team0: Mode changed to "loadbalance" [ 237.322912][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 237.360367][ T8172] device syzkaller0 entered promiscuous mode [ 237.363802][ T8172] tipc: Enabled bearer , priority 0 [ 237.369563][ T8172] tipc: Resetting bearer [ 237.372364][ T8171] tipc: Resetting bearer [ 237.409065][ T8171] tipc: Disabling bearer [ 237.413160][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.415472][ T8176] bond0: (slave dummy0): Releasing backup interface [ 237.451409][ T8176] device bridge_slave_0 left promiscuous mode [ 237.452590][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.507772][ T8176] device bridge_slave_1 left promiscuous mode [ 237.509011][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.568976][ T8176] bond0: (slave bond_slave_0): Releasing backup interface [ 237.630486][ T8176] bond0: (slave bond_slave_1): Releasing backup interface [ 237.681844][ T8176] team0: Failed to send options change via netlink (err -105) [ 237.683442][ T8176] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 237.685300][ T8176] team0: Port device team_slave_0 removed [ 237.704070][ T8176] team0: Failed to send options change via netlink (err -105) [ 237.707491][ T8176] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 237.709499][ T8176] team0: Port device team_slave_1 removed [ 237.711473][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.712984][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.715219][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.718110][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.728618][ T8181] team0: Failed to send options change via netlink (err -105) [ 237.730003][ T8181] team0: Mode changed to "loadbalance" [ 237.742022][ T8188] device syzkaller0 entered promiscuous mode [ 238.392846][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1106'. [ 238.774898][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.785695][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.788005][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.831210][ T8244] team0: Unable to change to the same mode the team is in [ 238.859770][ T8251] device syzkaller0 entered promiscuous mode [ 238.862810][ T8251] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 238.959651][ T8253] device syzkaller0 entered promiscuous mode [ 239.187536][ T8253] tipc: Enabled bearer , priority 0 [ 239.190428][ T8257] tipc: Resetting bearer [ 239.194304][ T8252] tipc: Resetting bearer [ 239.243251][ T8252] tipc: Disabling bearer [ 239.954425][ T8292] device syzkaller0 entered promiscuous mode [ 239.958249][ T8292] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.161364][ T8294] device syzkaller0 entered promiscuous mode [ 240.165509][ T8294] tipc: Enabled bearer , priority 0 [ 240.173801][ T8294] tipc: Resetting bearer [ 240.176609][ T8293] tipc: Resetting bearer [ 240.238839][ T8293] tipc: Disabling bearer [ 240.270610][ T8300] device syzkaller0 entered promiscuous mode [ 240.502288][ T8309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.505586][ T8309] bond0: (slave dummy0): Releasing backup interface [ 240.557395][ T8309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.558837][ T8309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.561003][ T8309] device bridge_slave_0 left promiscuous mode [ 240.562322][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.597548][ T8309] device bridge_slave_1 left promiscuous mode [ 240.598924][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.637577][ T8309] bond0: (slave bond_slave_0): Releasing backup interface [ 240.679967][ T8309] bond0: (slave bond_slave_1): Releasing backup interface [ 240.733393][ T8309] team0: Failed to send options change via netlink (err -105) [ 240.735089][ T8309] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 240.737255][ T8309] team0: Port device team_slave_0 removed [ 240.743605][ T8309] team0: Failed to send options change via netlink (err -105) [ 240.745086][ T8309] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 240.747277][ T8309] team0: Port device team_slave_1 removed [ 240.749198][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.750728][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.752724][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.754328][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.761745][ T8310] team0: Failed to send options change via netlink (err -105) [ 240.763146][ T8310] team0: Mode changed to "loadbalance" [ 240.845893][ T8317] loop1: detected capacity change from 0 to 256 [ 241.145319][ T8331] device syzkaller0 entered promiscuous mode [ 241.151485][ T8331] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 241.638184][ T8346] usb usb7: usbfs: process 8346 (syz.0.1158) did not claim interface 0 before use [ 241.952998][ T8351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.979347][ T8351] team0: Unable to change to the same mode the team is in [ 242.091846][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.094615][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.096795][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.119488][ T8356] team0: Unable to change to the same mode the team is in [ 242.463066][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.482356][ T8359] bond0: (slave dummy0): Releasing backup interface [ 242.533861][ T8359] device bridge_slave_0 left promiscuous mode [ 242.535439][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.587250][ T8359] device bridge_slave_1 left promiscuous mode [ 242.588637][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.892576][ T8359] bond0: (slave bond_slave_0): Releasing backup interface [ 242.921728][ T8359] bond0: (slave bond_slave_1): Releasing backup interface [ 242.986253][ T8359] team0: Failed to send options change via netlink (err -105) [ 242.987704][ T8359] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 242.989747][ T8359] team0: Port device team_slave_0 removed [ 242.995879][ T8359] team0: Failed to send options change via netlink (err -105) [ 242.997854][ T8359] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 243.000160][ T8359] team0: Port device team_slave_1 removed [ 243.001486][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.002833][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.005258][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.006890][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.013407][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.018939][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.020491][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.030646][ T8364] team0: Failed to send options change via netlink (err -105) [ 243.031984][ T8364] team0: Mode changed to "loadbalance" [ 243.048786][ T8375] device syzkaller0 entered promiscuous mode [ 243.051759][ T8375] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 243.133797][ T8382] device syzkaller0 entered promiscuous mode [ 243.175595][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1164'. [ 243.390081][ T8405] device syzkaller0 entered promiscuous mode [ 243.393069][ T8405] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 244.104210][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.106821][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.108145][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.135707][ T8417] team0: Unable to change to the same mode the team is in [ 244.201800][ T8421] loop4: detected capacity change from 0 to 256 [ 244.297706][ T8429] device syzkaller0 entered promiscuous mode [ 244.330180][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.332686][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.334029][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.396137][ T8435] team0: Unable to change to the same mode the team is in [ 244.403152][ T8437] device syzkaller0 entered promiscuous mode [ 244.406642][ T8437] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 244.647827][ T8449] usb usb7: usbfs: process 8449 (syz.2.1184) did not claim interface 0 before use [ 245.325260][ T8466] loop2: detected capacity change from 0 to 256 [ 245.611860][ T8479] device syzkaller0 entered promiscuous mode [ 245.968280][ T8496] usb usb7: usbfs: process 8496 (syz.1.1201) did not claim interface 0 before use [ 246.150939][ T8495] loop3: detected capacity change from 0 to 256 [ 246.204585][ T8500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.231549][ T8500] team0: Unable to change to the same mode the team is in [ 246.457018][ T8514] device syzkaller0 entered promiscuous mode [ 246.460137][ T8514] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 246.628764][ T8526] loop3: detected capacity change from 0 to 256 [ 246.710437][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.714581][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.715986][ T8532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.795797][ T8532] team0: Unable to change to the same mode the team is in [ 246.960127][ T8562] loop4: detected capacity change from 0 to 256 [ 247.088456][ T8563] usb usb7: usbfs: process 8563 (syz.2.1227) did not claim interface 0 before use [ 247.572158][ T8576] device syzkaller0 entered promiscuous mode [ 247.768550][ T8584] device syzkaller0 entered promiscuous mode [ 247.805398][ T8584] tipc: Enabled bearer , priority 0 [ 247.818197][ T8584] tipc: Resetting bearer [ 247.847483][ T8583] tipc: Resetting bearer [ 247.936757][ T8583] tipc: Disabling bearer [ 248.151773][ T8616] usb usb7: usbfs: process 8616 (syz.1.1250) did not claim interface 0 before use [ 248.432454][ T8621] device syzkaller0 entered promiscuous mode [ 248.706842][ T8630] 9pnet_fd: Insufficient options for proto=fd [ 248.802014][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.803242][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.875933][ T8641] device syzkaller0 entered promiscuous mode [ 248.885805][ T8641] tipc: Enabled bearer , priority 0 [ 248.897363][ T8641] tipc: Resetting bearer [ 248.906410][ T8640] tipc: Resetting bearer [ 248.988890][ T8640] tipc: Disabling bearer [ 249.014467][ T8652] device syzkaller0 entered promiscuous mode [ 249.708282][ T8668] usb usb7: usbfs: process 8668 (syz.4.1271) did not claim interface 0 before use [ 249.910537][ T8671] 9pnet_fd: Insufficient options for proto=fd [ 250.443932][ T8699] loop2: detected capacity change from 0 to 256 [ 250.515631][ T8703] 9pnet_fd: Insufficient options for proto=fd [ 250.908584][ T8727] usb usb7: usbfs: process 8727 (syz.4.1292) did not claim interface 0 before use [ 251.217822][ T8736] loop2: detected capacity change from 0 to 256 [ 251.898581][ T8771] fuse: Bad value for 'fd' [ 252.695841][ T8791] 9pnet_fd: Insufficient options for proto=fd [ 252.882175][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.938710][ T8797] team0: Unable to change to the same mode the team is in [ 253.211211][ T8819] 9pnet_fd: Insufficient options for proto=fd [ 253.398233][ T8833] device syzkaller0 entered promiscuous mode [ 253.401138][ T8833] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 253.521722][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1336'. [ 253.650392][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.652969][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.656671][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.673306][ T8840] team0: Unable to change to the same mode the team is in [ 254.120813][ T8853] 9pnet_fd: Insufficient options for proto=fd [ 254.156839][ T8852] device syzkaller0 entered promiscuous mode [ 254.449018][ T8869] device syzkaller0 entered promiscuous mode [ 254.455371][ T8869] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 254.915663][ T8883] loop2: detected capacity change from 0 to 32768 [ 254.940179][ T8889] loop1: detected capacity change from 0 to 256 [ 254.947606][ T8883] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 255.019261][ T8883] (syz.2.1354,8883,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 255.062924][ T4339] ocfs2: Unmounting device (7,2) on (node local) [ 255.244193][ T8908] device syzkaller0 entered promiscuous mode [ 255.247570][ T8908] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 255.613753][ T8921] loop2: detected capacity change from 0 to 256 [ 256.034018][ T8952] device syzkaller0 entered promiscuous mode [ 256.055161][ T8952] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 256.208498][ T8966] loop3: detected capacity change from 0 to 256 [ 256.513185][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1393'. [ 256.687783][ T8996] loop1: detected capacity change from 0 to 256 [ 256.689609][ T8998] device syzkaller0 entered promiscuous mode [ 256.694558][ T8998] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 256.891080][ T9002] device syzkaller0 entered promiscuous mode [ 257.092690][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1406'. [ 257.223286][ T9033] loop2: detected capacity change from 0 to 256 [ 257.339961][ T9044] device syzkaller0 entered promiscuous mode [ 257.349784][ T9045] loop3: detected capacity change from 0 to 2048 [ 257.352573][ T9044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 257.383733][ T9045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.590526][ T9053] device syzkaller0 entered promiscuous mode [ 257.604980][ T9051] loop4: detected capacity change from 0 to 32768 [ 257.622942][ T9051] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 257.632487][ T9051] (syz.4.1418,9051,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 257.664281][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 257.712267][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 257.795663][ T9066] loop2: detected capacity change from 0 to 256 [ 257.933209][ T9072] usb usb7: usbfs: process 9072 (syz.1.1423) did not claim interface 0 before use [ 258.255432][ T9085] loop2: detected capacity change from 0 to 2048 [ 258.271796][ T9085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.353291][ T9093] device syzkaller0 entered promiscuous mode [ 258.357876][ T9093] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 258.427223][ T9088] loop4: detected capacity change from 0 to 32768 [ 258.800134][ T9088] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 258.832263][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 258.902756][ T9103] loop1: detected capacity change from 0 to 256 [ 259.149780][ T9126] loop0: detected capacity change from 0 to 22 [ 259.151776][ T9126] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 259.153805][ T9126] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 259.309035][ T9136] loop0: detected capacity change from 0 to 256 [ 259.323912][ T9138] device syzkaller0 entered promiscuous mode [ 259.346503][ T9138] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 259.457654][ T9146] 9pnet_fd: Insufficient options for proto=fd [ 259.500337][ T9132] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 259.558412][ T4339] ocfs2: Unmounting device (7,2) on (node local) [ 259.648079][ T9156] fuse: Bad value for 'fd' [ 259.718106][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1459'. [ 260.369056][ T9181] 9pnet_fd: Insufficient options for proto=fd [ 260.410588][ T9185] device syzkaller0 entered promiscuous mode [ 260.415585][ T9185] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 260.485432][ T9191] fuse: Bad value for 'fd' [ 260.610678][ T9183] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 260.631007][ T4337] ocfs2: Unmounting device (7,0) on (node local) [ 260.842794][ T9224] 9pnet_fd: Insufficient options for proto=fd [ 261.014830][ T9217] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 261.061301][ T9217] (syz.3.1478,9217,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 261.089056][ T9217] (syz.3.1478,9217,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 261.181845][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 261.503778][ T9257] device syzkaller0 entered promiscuous mode [ 261.770198][ T9276] set_capacity_and_notify: 5 callbacks suppressed [ 261.770208][ T9276] loop3: detected capacity change from 0 to 256 [ 263.802628][ T9308] loop1: detected capacity change from 0 to 22 [ 263.804292][ T9308] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 263.810021][ T9305] loop4: detected capacity change from 0 to 256 [ 263.810548][ T9308] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 264.908981][ T9361] loop1: detected capacity change from 0 to 256 [ 265.115546][ T9370] tipc: Enabling of bearer rejected, failed to enable media [ 265.124375][ T9370] device syzkaller0 entered promiscuous mode [ 265.135428][ T9370] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 265.609784][ T9397] loop4: detected capacity change from 0 to 256 [ 265.728581][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'. [ 265.834936][ T9415] tipc: Enabling of bearer rejected, failed to enable media [ 265.838405][ T9415] device syzkaller0 entered promiscuous mode [ 265.841022][ T9415] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 266.139561][ T9421] loop4: detected capacity change from 0 to 256 [ 266.243980][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 266.455507][ T9449] loop1: detected capacity change from 0 to 512 [ 266.508403][ T9449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 266.581599][ T9458] tipc: Enabling of bearer rejected, failed to enable media [ 266.584592][ T9458] device syzkaller0 entered promiscuous mode [ 266.584627][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 266.597021][ T9458] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 266.684305][ T9462] loop3: detected capacity change from 0 to 256 [ 266.961319][ T9483] 9pnet_fd: Insufficient options for proto=fd [ 267.112067][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1575'. [ 267.188909][ T9490] loop2: detected capacity change from 0 to 22 [ 267.197345][ T9490] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 267.203187][ T9490] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 267.257991][ T9492] team0: Unable to change to the same mode the team is in [ 267.394387][ T9496] loop2: detected capacity change from 0 to 256 [ 267.590735][ T9510] team0: Unable to change to the same mode the team is in [ 267.667340][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1587'. [ 267.721710][ T9516] device syzkaller0 entered promiscuous mode [ 267.729431][ T9520] loop4: detected capacity change from 0 to 22 [ 267.736020][ T9520] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 267.740769][ T9520] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 267.773775][ T9526] loop4: detected capacity change from 0 to 512 [ 267.795687][ T9526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.831651][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 267.858064][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'. [ 267.864366][ T9522] loop2: detected capacity change from 0 to 256 [ 267.968523][ T9546] team0: Unable to change to the same mode the team is in [ 268.029208][ T9556] loop0: detected capacity change from 0 to 22 [ 268.032771][ T9556] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 268.035526][ T9556] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 268.042842][ T9544] 9pnet_fd: Insufficient options for proto=fd [ 269.118871][ T9597] device syzkaller0 entered promiscuous mode [ 269.568579][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1624'. [ 269.584777][ T9617] team0: Unable to change to the same mode the team is in [ 271.384302][ T9631] loop2: detected capacity change from 0 to 256 [ 271.628693][ T9648] tipc: Enabling of bearer rejected, failed to enable media [ 271.633282][ T9648] device syzkaller0 entered promiscuous mode [ 271.640224][ T9648] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.223114][ T9664] loop2: detected capacity change from 0 to 256 [ 272.251524][ T9672] 9pnet_fd: Insufficient options for proto=fd [ 273.109882][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 273.112782][ T9698] device syzkaller0 entered promiscuous mode [ 273.114348][ T9698] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 275.800085][ T9751] tipc: Enabling of bearer rejected, failed to enable media [ 275.807226][ T9751] device syzkaller0 entered promiscuous mode [ 275.812170][ T9751] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 277.591351][ T9799] 9pnet_fd: Insufficient options for proto=fd [ 277.622644][ T9802] device syzkaller0 entered promiscuous mode [ 277.634698][ T9802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 278.226276][ T4822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 278.646288][ T4822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.648183][ T4822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.655718][ T4822] usb 1-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 278.658998][ T4822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.663073][ T4822] usb 1-1: config 0 descriptor?? [ 278.912131][ T4822] usbhid 1-1:0.0: can't add hid device: -71 [ 278.913360][ T4822] usbhid: probe of 1-1:0.0 failed with error -71 [ 278.924220][ T4822] usb 1-1: USB disconnect, device number 2 [ 279.075502][ T9857] device syzkaller0 entered promiscuous mode [ 279.079362][ T9857] tipc: Enabling of bearer rejected, failed to enable media [ 280.924598][ T9902] device syzkaller0 entered promiscuous mode [ 280.929534][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 281.017710][ T9914] 9pnet_fd: Insufficient options for proto=fd [ 281.085738][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'. [ 282.054052][ T9948] 9pnet_fd: Insufficient options for proto=fd [ 282.924807][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'. [ 283.700484][ T9986] 9pnet_fd: Insufficient options for proto=fd [ 284.993483][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1753'. [ 285.094418][T10021] device syzkaller0 entered promiscuous mode [ 285.169826][T10022] loop2: detected capacity change from 0 to 256 [ 285.744959][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'. [ 285.886043][T10058] loop3: detected capacity change from 0 to 256 [ 285.963080][T10063] device syzkaller0 entered promiscuous mode [ 286.527176][T10075] device syzkaller0 entered promiscuous mode [ 286.532484][T10075] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 286.781645][T10084] device syzkaller0 entered promiscuous mode [ 286.792199][T10084] tipc: Enabling of bearer rejected, failed to enable media [ 286.833654][T10088] 9pnet_fd: Insufficient options for proto=fd [ 286.970736][T10095] loop2: detected capacity change from 0 to 256 [ 287.298023][T10100] device syzkaller0 entered promiscuous mode [ 287.978624][T10113] device syzkaller0 entered promiscuous mode [ 287.981523][T10113] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 288.225490][T10128] device syzkaller0 entered promiscuous mode [ 288.238856][T10128] tipc: Enabling of bearer rejected, failed to enable media [ 288.360267][T10143] device syzkaller0 entered promiscuous mode [ 288.649806][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.651500][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.653066][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.655745][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.657472][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.659853][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.661496][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.663789][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.665392][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.667645][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.674035][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.679530][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.681131][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.221430][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.520770][T10171] loop3: detected capacity change from 0 to 256 [ 289.669580][T10177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.676219][T10177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.678010][T10177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.043171][T10189] device syzkaller0 entered promiscuous mode [ 290.464949][T10200] device syzkaller0 entered promiscuous mode [ 290.574624][T10204] loop4: detected capacity change from 0 to 256 [ 290.836531][T10213] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.391342][T10229] device syzkaller0 entered promiscuous mode [ 291.481209][T10233] loop4: detected capacity change from 0 to 256 [ 291.507099][T10235] device syzkaller0 entered promiscuous mode [ 292.585681][T10275] device syzkaller0 entered promiscuous mode [ 292.608195][T10270] loop4: detected capacity change from 0 to 256 [ 292.747110][T10279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.231209][T10310] device syzkaller0 entered promiscuous mode [ 294.625382][T10323] __nla_validate_parse: 771 callbacks suppressed [ 294.625393][T10323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1867'. [ 295.512364][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.514002][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.515495][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.517539][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.519277][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.521013][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.522656][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.524354][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.525996][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.530155][T10349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.672134][T10359] device syzkaller0 entered promiscuous mode [ 295.803434][T10368] device syzkaller0 entered promiscuous mode [ 296.147637][T10382] loop3: detected capacity change from 0 to 256 [ 296.170981][T10384] device syzkaller0 entered promiscuous mode [ 296.174376][T10384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 296.313788][T10394] device syzkaller0 entered promiscuous mode [ 296.344846][T10400] device syzkaller0 entered promiscuous mode [ 296.820546][T10407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.832950][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.835476][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.836932][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.417021][T10422] loop1: detected capacity change from 0 to 256 [ 298.017253][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.223858][T10456] loop3: detected capacity change from 0 to 256 [ 298.645654][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.860149][T10476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.954341][T10478] 9pnet: Could not find request transport: fd0x0000000000000003 [ 299.529157][T10490] loop2: detected capacity change from 0 to 256 [ 299.597192][T10511] device syzkaller0 entered promiscuous mode [ 299.866159][T10527] __nla_validate_parse: 927 callbacks suppressed [ 299.866186][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.869228][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.871094][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.874317][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.876280][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.879132][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.880909][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.883503][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.885399][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.888009][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 299.895698][T10527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.334031][T10540] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 300.336162][T10540] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 300.356306][T10539] Invalid option length (1047276) for dns_resolver key [ 300.458098][T10539] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.550751][T10546] loop0: detected capacity change from 0 to 256 [ 300.689572][T10555] device syzkaller0 entered promiscuous mode [ 301.456685][T10597] loop2: detected capacity change from 0 to 256 [ 301.567090][T10602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.573019][T10602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.574936][T10602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.157616][T10627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.505840][T10639] device syzkaller0 entered promiscuous mode [ 303.210232][T10664] loop2: detected capacity change from 0 to 256 [ 303.278763][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.284595][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.286317][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.616154][T10671] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 303.640084][T10671] Invalid option length (1047276) for dns_resolver key [ 303.648351][T10673] device syzkaller0 entered promiscuous mode [ 304.244791][T10698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 304.248697][T10698] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 304.250653][T10698] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 304.252253][T10698] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 304.280837][T10695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.297027][T10694] loop0: detected capacity change from 0 to 256 [ 304.363441][T10705] tipc: Enabled bearer , priority 0 [ 304.377307][T10705] device syzkaller0 entered promiscuous mode [ 304.391046][T10705] tipc: Resetting bearer [ 304.395126][T10704] tipc: Resetting bearer [ 304.428514][T10704] tipc: Disabling bearer [ 304.685931][T10720] device syzkaller0 entered promiscuous mode [ 304.712955][T10722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 304.714927][T10722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 304.723060][T10722] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 304.724717][T10722] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 305.022229][T10732] __nla_validate_parse: 775 callbacks suppressed [ 305.022252][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.024832][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.026452][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.029259][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.030721][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.032991][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.034497][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.036868][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.038525][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.040809][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 305.047741][T10732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.324848][T10736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 305.327411][T10736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 305.331329][T10736] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 305.335076][T10736] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 305.413245][T10738] loop3: detected capacity change from 0 to 256 [ 305.583888][T10745] device syzkaller0 entered promiscuous mode [ 305.803933][T10759] 9pnet_fd: Insufficient options for proto=fd [ 305.845153][T10762] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 305.847174][T10762] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 305.849244][T10762] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 305.851000][T10762] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 305.936016][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.157479][T10767] tipc: Enabled bearer , priority 0 [ 306.159194][T10767] device syzkaller0 entered promiscuous mode [ 306.167376][T10767] tipc: Resetting bearer [ 306.169889][T10766] tipc: Resetting bearer [ 306.226705][T10766] tipc: Disabling bearer [ 306.236825][T10769] loop0: detected capacity change from 0 to 256 [ 306.357575][T10780] device syzkaller0 entered promiscuous mode [ 306.749771][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.231515][T10800] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 307.233523][T10800] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 307.235207][T10800] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 307.239994][T10800] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 307.300015][T10805] tipc: Enabled bearer , priority 0 [ 307.301838][T10805] device syzkaller0 entered promiscuous mode [ 307.313139][T10805] tipc: Resetting bearer [ 307.326332][T10804] tipc: Resetting bearer [ 307.376620][T10804] tipc: Disabling bearer [ 307.518085][T10819] device syzkaller0 entered promiscuous mode [ 307.615793][T10827] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 307.618356][T10827] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 307.620322][T10827] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 307.622194][T10827] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 307.922279][T10829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 307.924019][T10829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 307.925623][T10829] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 307.927560][T10829] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 307.939327][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.941655][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.942916][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.054780][T10835] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 308.059383][T10835] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 308.061347][T10835] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 308.062911][T10835] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 308.432775][T10840] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 308.434580][T10840] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 308.439799][T10840] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 308.441286][T10840] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 308.454111][T10843] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 308.456773][T10844] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 308.459802][T10844] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 308.460325][T10843] Invalid option length (1047276) for dns_resolver key [ 308.466741][T10844] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 308.468251][T10844] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 308.571092][T10851] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 308.586868][T10851] Invalid option length (1047276) for dns_resolver key [ 308.955811][T10858] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 308.965678][T10858] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 308.968601][T10858] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 308.970611][T10858] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 309.003173][T10864] binder: 10863:10864 got transaction to invalid handle, 1 [ 309.004614][T10864] binder: 10864:10863 cannot find target node [ 309.005735][T10864] binder: 10863:10864 transaction call to 0:0 failed 41/29201/-22, size 0-0 line 3062 [ 309.008867][T10864] binder: 10863:10864 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 309.011452][T10864] binder: 10864 RLIMIT_NICE not set [ 309.059788][T10865] binder: 10863:10865 got transaction to invalid handle, 1 [ 309.061308][T10865] binder: 10865:10863 cannot find target node [ 309.062476][T10865] binder: 10863:10865 transaction call to 0:0 failed 42/29201/-22, size 0-0 line 3062 [ 309.189565][T10868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 309.191490][T10868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 309.193300][T10868] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 309.194904][T10868] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 309.220078][T10870] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 309.221872][T10870] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 309.223605][T10870] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 309.225260][T10870] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 309.410127][T10876] device syzkaller0 entered promiscuous mode [ 309.605074][T10884] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 309.607300][T10884] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 309.609291][T10884] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 309.611092][T10884] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 309.652310][T10888] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 309.654200][T10888] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 309.655892][T10888] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 309.661926][T10888] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 309.733344][T10892] device syzkaller0 entered promiscuous mode [ 309.828890][ T4822] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.830008][ T4822] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.905405][T10896] device syzkaller0 entered promiscuous mode [ 309.921537][T10896] tipc: Enabled bearer , priority 0 [ 309.937150][T10896] tipc: Resetting bearer [ 309.948681][T10895] tipc: Resetting bearer [ 310.008942][T10895] tipc: Disabling bearer [ 310.054421][T10902] netlink: 'syz.4.2071': attribute type 10 has an invalid length. [ 310.077334][T10902] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 310.236865][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.238740][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.416774][T10907] loop1: detected capacity change from 0 to 256 [ 310.431832][T10902] infiniband syz1: set active [ 310.442702][T10911] device syzkaller0 entered promiscuous mode [ 310.450399][T10902] infiniband syz1: added bridge_slave_1 [ 310.499991][T10902] RDS/IB: syz1: added [ 310.501043][T10902] smc: adding ib device syz1 with port count 1 [ 310.502079][T10902] smc: ib device syz1 port 1 has pnetid [ 310.773030][T10926] __nla_validate_parse: 624 callbacks suppressed [ 310.773053][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.775960][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.777926][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.781248][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.783012][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.785517][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.787325][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.789783][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.791791][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.794315][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2077'. [ 310.802044][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.210768][T10935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.481508][T10942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 311.483708][T10942] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 311.489027][T10942] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 311.491048][T10942] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 311.578136][T10949] device syzkaller0 entered promiscuous mode [ 311.591631][T10952] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 311.610172][T10952] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 311.634870][T10952] rdma_rxe: rxe_register_device failed with error -23 [ 311.639946][T10952] rdma_rxe: failed to add bridge_slave_1 [ 311.643802][T10952] md: could not open device unknown-block(1,0). [ 311.646345][T10952] md: could not open device unknown-block(1,1). [ 311.647947][T10952] md: could not open device unknown-block(1,3). [ 311.691079][T10958] tipc: Enabled bearer , priority 0 [ 311.692955][T10958] device syzkaller0 entered promiscuous mode [ 311.712294][T10958] tipc: Resetting bearer [ 311.715082][T10957] tipc: Resetting bearer [ 311.747169][T10957] tipc: Disabling bearer [ 311.884412][T10974] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 311.886389][T10974] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 311.888253][T10974] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 311.889973][T10974] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 311.989396][T10979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.995151][T10979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.997021][T10979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.002564][T10979] infiniband syz1: set active [ 312.320666][T10987] device syzkaller0 entered promiscuous mode [ 312.325199][T10987] tipc: Enabled bearer , priority 0 [ 312.331381][T10987] tipc: Resetting bearer [ 312.332941][T10989] netlink: 'syz.2.2105': attribute type 10 has an invalid length. [ 312.344444][T10989] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.346691][T10986] tipc: Resetting bearer [ 312.357599][T10989] rdma_rxe: rxe_register_device failed with error -23 [ 312.358957][T10989] rdma_rxe: failed to add bridge_slave_1 [ 312.363192][T10989] md: could not open device unknown-block(1,0). [ 312.364660][T10989] md: could not open device unknown-block(1,1). [ 312.368906][T10989] md: could not open device unknown-block(1,3). [ 312.377271][T10986] tipc: Disabling bearer [ 312.400901][T10991] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 312.403687][T10991] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 312.405765][T10991] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 312.409313][T10991] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 312.454259][T10995] device syzkaller0 entered promiscuous mode [ 312.536232][T10999] device syzkaller0 entered promiscuous mode [ 312.787008][T11010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.111057][T11017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 313.113102][T11017] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 313.115151][T11017] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 313.120651][T11017] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 313.227246][T11025] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 313.231283][T11025] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 313.233423][T11025] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 313.235307][T11025] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 313.243775][T11026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 313.245862][T11026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 313.248340][T11026] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 313.249995][T11026] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 313.303819][T11034] device syzkaller0 entered promiscuous mode [ 313.311192][T11034] tipc: Enabled bearer , priority 0 [ 313.321004][T11034] tipc: Resetting bearer [ 313.323557][T11033] tipc: Resetting bearer [ 313.359392][T11033] tipc: Disabling bearer [ 313.370836][T11037] loop0: detected capacity change from 0 to 256 [ 313.474657][T11042] device syzkaller0 entered promiscuous mode [ 313.574301][T11058] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 313.576841][T11058] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 313.578862][T11058] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 313.581023][T11058] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 313.602907][T11060] device syzkaller0 entered promiscuous mode [ 313.632805][T11062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 313.634585][T11062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 313.637714][T11062] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 313.639406][T11062] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 313.768371][T11066] device syzkaller0 entered promiscuous mode [ 313.769468][T11069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 313.771457][T11069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 313.773533][T11069] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 313.775362][T11069] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 313.775530][T11067] loop3: detected capacity change from 0 to 256 [ 313.872074][T11073] device syzkaller0 entered promiscuous mode [ 313.878520][T11075] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 313.879229][T11073] tipc: Enabled bearer , priority 0 [ 313.884412][T11075] Invalid option length (1047276) for dns_resolver key [ 313.885523][T11073] tipc: Resetting bearer [ 313.888887][T11072] tipc: Resetting bearer [ 313.941469][T11072] tipc: Disabling bearer [ 314.209983][T11094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 314.212404][T11094] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 314.214862][T11094] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 314.217817][T11094] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 314.700440][T11115] loop4: detected capacity change from 0 to 256 [ 314.764983][T11119] tipc: Enabled bearer , priority 0 [ 314.766982][T11119] device syzkaller0 entered promiscuous mode [ 314.773476][T11119] tipc: Resetting bearer [ 314.775853][T11118] tipc: Resetting bearer [ 314.810073][T11121] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 314.812254][T11121] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 314.814073][T11121] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 314.815823][T11121] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 314.837497][T11118] tipc: Disabling bearer [ 314.848430][T11123] device syzkaller0 entered promiscuous mode [ 314.853227][T11123] tipc: Enabled bearer , priority 0 [ 314.858586][T11123] tipc: Resetting bearer [ 314.861053][T11122] tipc: Resetting bearer [ 314.907577][T11122] tipc: Disabling bearer [ 314.944236][T11131] binder: 11130:11131 got transaction to invalid handle, 1 [ 314.945579][T11131] binder: 11131:11130 cannot find target node [ 314.946754][T11131] binder: 11130:11131 transaction call to 0:0 failed 46/29201/-22, size 0-0 line 3062 [ 314.948841][T11131] binder: 11130:11131 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 314.951110][T11131] binder: 11131 RLIMIT_NICE not set [ 314.999866][T11134] binder: 11130:11134 got transaction to invalid handle, 1 [ 315.001315][T11134] binder: 11134:11130 cannot find target node [ 315.002395][T11134] binder: 11130:11134 transaction call to 0:0 failed 47/29201/-22, size 0-0 line 3062 [ 315.225358][T11140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.308796][T11144] loop2: detected capacity change from 0 to 256 [ 315.768745][ T4822] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.769985][ T4822] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.851862][T11158] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 315.871113][T11158] Invalid option length (1047276) for dns_resolver key [ 315.927063][T11166] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 315.929106][T11166] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 315.931091][T11166] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 315.932804][T11166] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 316.463889][T11178] device syzkaller0 entered promiscuous mode [ 316.468989][T11178] tipc: Enabled bearer , priority 0 [ 316.474162][T11178] tipc: Resetting bearer [ 316.478327][T11177] tipc: Resetting bearer [ 316.567201][T11177] tipc: Disabling bearer [ 316.618280][T11180] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 316.620484][T11180] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 316.622605][T11180] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 316.624646][T11180] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 316.674212][T11186] device syzkaller0 entered promiscuous mode [ 316.679828][T11186] tipc: Enabled bearer , priority 0 [ 316.685811][T11186] tipc: Resetting bearer [ 316.689020][T11188] Invalid option length (1047276) for dns_resolver key [ 316.692769][T11185] tipc: Resetting bearer [ 316.737106][T11185] tipc: Disabling bearer [ 316.860106][T11195] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 316.862044][T11195] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 316.863991][T11195] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 316.865513][T11195] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 316.872899][T11199] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 316.874797][T11199] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 316.881042][T11199] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 316.883521][T11199] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 316.923201][T11202] device syzkaller0 entered promiscuous mode [ 316.933892][T11202] tipc: Enabled bearer , priority 0 [ 316.942836][T11201] tipc: Resetting bearer [ 317.037213][T11201] tipc: Disabling bearer [ 317.792191][T11227] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 317.794269][T11227] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 317.796933][T11227] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 317.798668][T11227] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 317.849762][T11231] device syzkaller0 entered promiscuous mode [ 317.853773][T11231] tipc: Enabled bearer , priority 0 [ 317.860035][T11231] tipc: Resetting bearer [ 317.862396][T11230] tipc: Resetting bearer [ 317.896759][T11230] tipc: Disabling bearer [ 317.977378][T11237] Invalid option length (1047276) for dns_resolver key [ 318.032486][T11240] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 318.034576][T11240] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 318.039250][T11240] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 318.041008][T11240] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 318.079706][T11243] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 318.081665][T11243] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 318.083714][T11243] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 318.085462][T11243] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 318.103506][T11244] device syzkaller0 entered promiscuous mode [ 318.116608][T11244] tipc: Enabled bearer , priority 0 [ 318.120809][T11241] tipc: Resetting bearer [ 318.227651][T11241] tipc: Disabling bearer [ 318.876682][T11268] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 318.878462][T11268] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 318.880368][T11268] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 318.881996][T11268] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 318.915360][T11270] device syzkaller0 entered promiscuous mode [ 318.921962][T11270] tipc: Enabled bearer , priority 0 [ 318.927143][T11270] tipc: Resetting bearer [ 318.930546][T11269] tipc: Resetting bearer [ 318.978788][T11269] tipc: Disabling bearer [ 319.036852][T11273] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 319.038736][T11273] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 319.040584][T11273] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 319.042420][T11273] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 319.158921][T11277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 319.161042][T11277] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 319.163054][T11277] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 319.164972][T11277] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 319.204269][T11279] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 319.208727][T11279] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 319.210815][T11279] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 319.212599][T11279] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 319.258308][T11283] 9pnet_fd: Insufficient options for proto=fd [ 319.754144][T11295] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 319.757049][T11295] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 319.759171][T11295] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 319.760932][T11295] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 320.020386][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 320.022307][T11305] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 320.024116][T11305] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 320.025745][T11305] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 320.146161][T11308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 320.152879][T11308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 320.154883][T11308] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 320.162992][T11308] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 320.164316][T11309] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 320.171562][T11309] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 320.173600][T11309] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 320.175115][T11309] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 320.263722][T11318] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 320.265560][T11318] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 320.275047][T11318] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 320.277988][T11318] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 320.278299][T11315] device syzkaller0 entered promiscuous mode [ 320.290411][T11315] tipc: Enabled bearer , priority 0 [ 320.339969][T11315] tipc: Resetting bearer [ 320.346457][T11314] tipc: Resetting bearer [ 320.398103][T11314] tipc: Disabling bearer [ 320.537665][T11329] loop2: detected capacity change from 0 to 256 [ 320.791089][T11348] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 320.793114][T11348] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 320.795164][T11348] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 320.797357][T11348] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 320.978516][T11359] device syzkaller0 entered promiscuous mode [ 320.983004][T11359] tipc: Enabled bearer , priority 0 [ 320.990373][T11359] tipc: Resetting bearer [ 320.993009][T11358] tipc: Resetting bearer [ 321.029104][T11358] tipc: Disabling bearer [ 321.217693][T11368] loop4: detected capacity change from 0 to 256 [ 321.509729][T11379] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 321.511942][T11379] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 321.513813][T11379] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 321.515334][T11379] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 321.573262][T11382] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 321.575650][T11382] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 321.579521][T11382] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 321.581267][T11382] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 321.593993][T11377] device wlan0 entered promiscuous mode [ 321.594381][T11380] __nla_validate_parse: 783 callbacks suppressed [ 321.594392][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 321.619094][T11385] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 321.622168][T11385] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 321.631602][T11385] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 321.633228][T11385] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 321.637654][T11387] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 321.639704][T11387] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 321.641467][T11387] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 321.643129][T11387] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 321.696767][T11390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 321.698592][T11390] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 321.700372][T11390] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 321.701872][T11390] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 321.753451][T11390] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 321.787872][T11395] IPVS: length: 217 != 24 [ 321.909999][T11395] device macvlan2 entered promiscuous mode [ 321.911926][T11395] bond1: (slave macvlan2): Opening slave failed [ 322.087132][T11403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 322.089274][T11403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 322.091157][T11403] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 322.093191][T11403] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 322.364473][T11418] device syzkaller0 entered promiscuous mode [ 322.373437][T11418] tipc: Enabled bearer , priority 0 [ 322.375970][T11417] tipc: Resetting bearer [ 322.467301][T11417] tipc: Disabling bearer [ 322.540490][T11424] tipc: Enabled bearer , priority 0 [ 322.542317][T11424] device syzkaller0 entered promiscuous mode [ 322.586689][T11424] tipc: Resetting bearer [ 322.588966][T11423] tipc: Resetting bearer [ 322.606786][T11426] binder: 11425:11426 got transaction to invalid handle, 1 [ 322.608078][T11426] binder: 11426:11425 cannot find target node [ 322.609050][T11426] binder: 11425:11426 transaction call to 0:0 failed 51/29201/-22, size 0-0 line 3062 [ 322.611173][T11426] binder: 11425:11426 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 322.613710][T11426] binder: 11426 RLIMIT_NICE not set [ 322.626680][T11423] tipc: Disabling bearer [ 322.663793][T11427] binder: 11425:11427 got transaction to invalid handle, 1 [ 322.665404][T11427] binder: 11427:11425 cannot find target node [ 322.667038][T11427] binder: 11425:11427 transaction call to 0:0 failed 52/29201/-22, size 0-0 line 3062 [ 322.680551][T11429] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 322.682517][T11429] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 322.684394][T11429] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 322.686158][T11429] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 322.808384][T11435] 9pnet_fd: Insufficient options for proto=fd [ 323.274721][T11440] device syzkaller0 entered promiscuous mode [ 323.283285][T11440] tipc: Enabled bearer , priority 0 [ 323.294354][T11440] tipc: Resetting bearer [ 323.298255][T11439] tipc: Resetting bearer [ 323.356725][T11439] tipc: Disabling bearer [ 323.396379][T11443] device wlan0 entered promiscuous mode [ 323.415700][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 323.435288][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 323.437234][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 323.484864][T11448] loop2: detected capacity change from 0 to 256 [ 323.525781][T11451] device syzkaller0 entered promiscuous mode [ 323.530601][T11451] tipc: Enabled bearer , priority 0 [ 323.532667][T11450] tipc: Resetting bearer [ 323.730861][T11450] tipc: Disabling bearer [ 323.843572][T11460] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 323.845918][T11460] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 323.848416][T11460] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 323.848587][T11462] tipc: Enabled bearer , priority 0 [ 323.850003][T11460] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 323.852457][T11462] device syzkaller0 entered promiscuous mode [ 323.890842][T11462] tipc: Resetting bearer [ 323.893183][T11461] tipc: Resetting bearer [ 323.927617][T11461] tipc: Disabling bearer [ 324.337236][T11475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 324.339152][T11475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 324.341157][T11475] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 324.342945][T11475] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 324.354573][T11476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 324.359936][T11476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 324.361930][T11476] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 324.363591][T11476] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 324.366943][T11475] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 324.420162][T11480] loop1: detected capacity change from 0 to 256 [ 324.474793][T11484] binder: 11483:11484 got transaction to invalid handle, 1 [ 324.476610][T11484] binder: 11484:11483 cannot find target node [ 324.478942][T11484] binder: 11483:11484 transaction call to 0:0 failed 56/29201/-22, size 0-0 line 3062 [ 324.481540][T11484] binder: 11483:11484 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 324.484020][T11484] binder: 11484 RLIMIT_NICE not set [ 324.535212][T11488] binder: 11483:11488 got transaction to invalid handle, 1 [ 324.537214][T11488] binder: 11488:11483 cannot find target node [ 324.538281][T11488] binder: 11483:11488 transaction call to 0:0 failed 57/29201/-22, size 0-0 line 3062 [ 324.581477][T11490] device syzkaller0 entered promiscuous mode [ 324.637674][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.639310][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.640745][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.650201][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.651726][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.654257][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.655837][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.658087][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 324.665017][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.670467][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.672156][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.677628][T11491] infiniband syz1: set active [ 324.697624][T11491] device wlan0 left promiscuous mode [ 324.875571][T11490] tipc: Enabled bearer , priority 0 [ 324.879212][T11489] tipc: Resetting bearer [ 324.967670][T11489] tipc: Disabling bearer [ 325.032164][T11498] tipc: Enabled bearer , priority 0 [ 325.033833][T11498] device syzkaller0 entered promiscuous mode [ 325.036976][T11498] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 325.090206][T11498] tipc: Resetting bearer [ 325.093114][T11497] tipc: Resetting bearer [ 325.137340][T11497] tipc: Disabling bearer [ 325.435791][T11508] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 325.449401][T11508] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 325.469983][T11508] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 325.472319][T11508] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 325.473932][T11510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 325.475849][T11510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 325.478003][T11510] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 325.480313][T11510] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 325.541467][T11512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 325.543593][T11512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 325.546214][T11512] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 325.551156][T11512] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 325.636827][T11516] ------------[ cut here ]------------ [ 325.638036][T11516] WARNING: CPU: 1 PID: 11516 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x16c/0x19c [ 325.639852][T11516] Modules linked in: [ 325.640521][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Not tainted syzkaller #0 [ 325.641866][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 325.643672][T11516] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 325.645090][T11516] pc : ieee80211_link_release_channel+0x16c/0x19c [ 325.646245][T11516] lr : ieee80211_link_release_channel+0x16c/0x19c [ 325.647376][T11516] sp : ffff800021827140 [ 325.648110][T11516] x29: ffff800021827140 x28: 1fffe00019899568 x27: 1fffe000198994ec [ 325.649586][T11516] x26: dfff800000000000 x25: dfff800000000000 x24: ffff0000cc4cab42 [ 325.650925][T11516] x23: 1fffe000198992b5 x22: dfff800000000000 x21: 0000000000000000 [ 325.652329][T11516] x20: ffff0000cc4ca228 x19: ffff0000cc4c95a8 x18: 1fffe00033e7697e [ 325.653753][T11516] x17: ffff80001537d000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 325.655135][T11516] x14: 0000000000000001 x13: 1ffff00004304ddc x12: 0000000000080000 [ 325.656479][T11516] x11: 00000000000351a5 x10: ffff80002ac76000 x9 : ffff8000114a8510 [ 325.657814][T11516] x8 : 00000000000351a6 x7 : ffff8000114a8410 x6 : 0000000000000000 [ 325.659258][T11516] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d44b4 [ 325.660710][T11516] x2 : ffff0000cf62b800 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.662162][T11516] Call trace: [ 325.662751][T11516] ieee80211_link_release_channel+0x16c/0x19c [ 325.663802][T11516] ieee80211_link_stop+0x9c/0xc4 [ 325.664636][T11516] ieee80211_if_change_type+0x1d0/0xc84 [ 325.665566][T11516] ieee80211_change_iface+0x64/0x3ec [ 325.666470][T11516] cfg80211_change_iface+0x728/0xf1c [ 325.667387][T11516] nl80211_set_interface+0x4e0/0x718 [ 325.668407][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 325.669456][T11516] genl_rcv_msg+0x424/0x600 [ 325.670302][T11516] netlink_rcv_skb+0x220/0x3ec [ 325.671097][T11516] genl_rcv+0x38/0x50 [ 325.671807][T11516] netlink_unicast+0x5fc/0x80c [ 325.672619][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 325.673453][T11516] ____sys_sendmsg+0x588/0x90c [ 325.674257][T11516] __sys_sendmsg+0x288/0x374 [ 325.675063][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 325.675945][T11516] invoke_syscall+0x98/0x290 [ 325.676768][T11516] el0_svc_common+0x13c/0x258 [ 325.677560][T11516] do_el0_svc+0x5c/0x134 [ 325.678322][T11516] el0_svc+0x58/0x128 [ 325.679030][T11516] el0t_64_sync_handler+0x84/0xf0 [ 325.679877][T11516] el0t_64_sync+0x18c/0x190 [ 325.680646][T11516] irq event stamp: 3534 [ 325.681350][T11516] hardirqs last enabled at (3533): [] __cancel_work_timer+0x2bc/0x450 [ 325.683020][T11516] hardirqs last disabled at (3534): [] el1_dbg+0x24/0x80 [ 325.684447][T11516] softirqs last enabled at (3490): [] handle_softirqs+0xb1c/0xc90 [ 325.686063][T11516] softirqs last disabled at (3469): [] __do_softirq+0x14/0x20 [ 325.687653][T11516] ---[ end trace 0000000000000000 ]--- [ 325.692298][T11516] ------------[ cut here ]------------ [ 325.693323][T11516] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 325.694891][T11516] WARNING: CPU: 1 PID: 11516 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x35c/0x63c [ 325.696725][T11516] Modules linked in: [ 325.697426][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 325.699022][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 325.700916][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 325.702360][T11516] pc : drv_unassign_vif_chanctx+0x35c/0x63c [ 325.703434][T11516] lr : drv_unassign_vif_chanctx+0x35c/0x63c [ 325.704477][T11516] sp : ffff800021826fe0 [ 325.705172][T11516] x29: ffff800021826fe0 x28: dfff800000000000 x27: 0000000000000000 [ 325.706625][T11516] x26: ffff0000cc4ca668 x25: dfff800000000000 x24: ffff0000cc4ca7b8 [ 325.708124][T11516] x23: 0000000000000000 x22: ffff0000d1822800 x21: ffff0000cc4ca7b8 [ 325.709566][T11516] x20: ffff800017d5e000 x19: ffff0000cc4c8c80 x18: 1fffe00033e7697e [ 325.710978][T11516] x17: ffff80001537d000 x16: ffff8000082dd248 x15: 0000000040000000 [ 325.712436][T11516] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 325.713829][T11516] x11: ff0080000a975d20 x10: 0000000000000003 x9 : 37c88f0ba6d85300 [ 325.715240][T11516] x8 : 37c88f0ba6d85300 x7 : ffff80000825ab50 x6 : 0000000000000000 [ 325.716611][T11516] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 325.718026][T11516] x2 : 0000000000000006 x1 : ffff800011cedc80 x0 : ffff80018a0de000 [ 325.719388][T11516] Call trace: [ 325.719954][T11516] drv_unassign_vif_chanctx+0x35c/0x63c [ 325.720890][T11516] ieee80211_assign_link_chanctx+0x140/0x82c [ 325.721909][T11516] __ieee80211_link_release_channel+0x29c/0x55c [ 325.723000][T11516] ieee80211_link_release_channel+0x130/0x19c [ 325.723974][T11516] ieee80211_link_stop+0x9c/0xc4 [ 325.724762][T11516] ieee80211_if_change_type+0x1d0/0xc84 [ 325.725635][T11516] ieee80211_change_iface+0x64/0x3ec [ 325.726539][T11516] cfg80211_change_iface+0x728/0xf1c [ 325.727457][T11516] nl80211_set_interface+0x4e0/0x718 [ 325.728377][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 325.729390][T11516] genl_rcv_msg+0x424/0x600 [ 325.730203][T11516] netlink_rcv_skb+0x220/0x3ec [ 325.731013][T11516] genl_rcv+0x38/0x50 [ 325.731711][T11516] netlink_unicast+0x5fc/0x80c [ 325.732536][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 325.733366][T11516] ____sys_sendmsg+0x588/0x90c [ 325.734229][T11516] __sys_sendmsg+0x288/0x374 [ 325.735104][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 325.736000][T11516] invoke_syscall+0x98/0x290 [ 325.736832][T11516] el0_svc_common+0x13c/0x258 [ 325.737674][T11516] do_el0_svc+0x5c/0x134 [ 325.738451][T11516] el0_svc+0x58/0x128 [ 325.739194][T11516] el0t_64_sync_handler+0x84/0xf0 [ 325.740106][T11516] el0t_64_sync+0x18c/0x190 [ 325.740937][T11516] irq event stamp: 4002 [ 325.741686][T11516] hardirqs last enabled at (4001): [] finish_lock_switch+0xb0/0x1c8 [ 325.743391][T11516] hardirqs last disabled at (4002): [] el1_dbg+0x24/0x80 [ 325.744878][T11516] softirqs last enabled at (3968): [] handle_softirqs+0xb1c/0xc90 [ 325.746535][T11516] softirqs last disabled at (3537): [] __do_softirq+0x14/0x20 [ 325.748122][T11516] ---[ end trace 0000000000000000 ]--- [ 325.755126][T11516] ------------[ cut here ]------------ [ 325.756318][T11516] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 325.759672][T11516] WARNING: CPU: 1 PID: 11516 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x220/0x260 [ 325.761724][T11516] Modules linked in: [ 325.762478][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 325.764364][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 325.766348][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 325.767768][T11516] pc : ieee80211_vif_cfg_change_notify+0x220/0x260 [ 325.768884][T11516] lr : ieee80211_vif_cfg_change_notify+0x220/0x260 [ 325.769964][T11516] sp : ffff800021826fe0 [ 325.770666][T11516] x29: ffff800021826fe0 x28: dfff800000000000 x27: ffff800015380384 [ 325.772118][T11516] x26: ffff0000d1822820 x25: 0000000000000000 x24: dfff800000000000 [ 325.773546][T11516] x23: 0000000000000000 x22: ffff0000cc4ca760 x21: ffff0000f5fc0e80 [ 325.775052][T11516] x20: ffff800017d5e000 x19: ffff0000cc4c8c80 x18: 1fffe00033e7697e [ 325.776515][T11516] x17: ffff80001537d000 x16: ffff8000082dd248 x15: 0000000040000000 [ 325.778027][T11516] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 325.779496][T11516] x11: ff0080000a975d20 x10: 0000000000000003 x9 : 37c88f0ba6d85300 [ 325.781008][T11516] x8 : 37c88f0ba6d85300 x7 : ffff80000825ab50 x6 : 0000000000000000 [ 325.782530][T11516] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 325.784008][T11516] x2 : 0000000000000006 x1 : ffff800011cedc80 x0 : ffff80018a0de000 [ 325.785489][T11516] Call trace: [ 325.786092][T11516] ieee80211_vif_cfg_change_notify+0x220/0x260 [ 325.787165][T11516] ieee80211_assign_link_chanctx+0x6f0/0x82c [ 325.788224][T11516] __ieee80211_link_release_channel+0x29c/0x55c [ 325.789349][T11516] ieee80211_link_release_channel+0x130/0x19c [ 325.790432][T11516] ieee80211_link_stop+0x9c/0xc4 [ 325.791321][T11516] ieee80211_if_change_type+0x1d0/0xc84 [ 325.792313][T11516] ieee80211_change_iface+0x64/0x3ec [ 325.793268][T11516] cfg80211_change_iface+0x728/0xf1c [ 325.794217][T11516] nl80211_set_interface+0x4e0/0x718 [ 325.795196][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 325.796183][T11516] genl_rcv_msg+0x424/0x600 [ 325.797012][T11516] netlink_rcv_skb+0x220/0x3ec [ 325.797871][T11516] genl_rcv+0x38/0x50 [ 325.798594][T11516] netlink_unicast+0x5fc/0x80c [ 325.799428][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 325.800239][T11516] ____sys_sendmsg+0x588/0x90c [ 325.801085][T11516] __sys_sendmsg+0x288/0x374 [ 325.801928][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 325.802820][T11516] invoke_syscall+0x98/0x290 [ 325.803651][T11516] el0_svc_common+0x13c/0x258 [ 325.804455][T11516] do_el0_svc+0x5c/0x134 [ 325.805204][T11516] el0_svc+0x58/0x128 [ 325.805910][T11516] el0t_64_sync_handler+0x84/0xf0 [ 325.806807][T11516] el0t_64_sync+0x18c/0x190 [ 325.807594][T11516] irq event stamp: 4302 [ 325.808312][T11516] hardirqs last enabled at (4301): [] finish_lock_switch+0xb0/0x1c8 [ 325.810029][T11516] hardirqs last disabled at (4302): [] el1_dbg+0x24/0x80 [ 325.811567][T11516] softirqs last enabled at (4284): [] handle_softirqs+0xb1c/0xc90 [ 325.813219][T11516] softirqs last disabled at (4267): [] __do_softirq+0x14/0x20 [ 325.814767][T11516] ---[ end trace 0000000000000000 ]--- [ 325.824283][T11520] loop4: detected capacity change from 0 to 256 [ 325.844905][T11516] ------------[ cut here ]------------ [ 325.846022][T11516] WARNING: CPU: 1 PID: 11516 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338 [ 325.847873][T11516] Modules linked in: [ 325.848637][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 325.850244][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 325.852011][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 325.853434][T11516] pc : ieee80211_recalc_idle+0x298/0x338 [ 325.854480][T11516] lr : ieee80211_recalc_idle+0x298/0x338 [ 325.855679][T11516] sp : ffff800021826fe0 [ 325.856538][T11516] x29: ffff800021826fe0 x28: 0000000000000000 x27: ffff800015380000 [ 325.858199][T11516] x26: ffff0000d1822820 x25: 0000000000000000 x24: dfff800000000000 [ 325.859818][T11516] x23: 1fffe0001ebf858c x22: 1fffe0001ebf81d7 x21: dfff800000000000 [ 325.861420][T11516] x20: 0000000000000000 x19: ffff0000f5fc0e80 x18: 1fffe00033e7697e [ 325.862942][T11516] x17: ffff80001537d000 x16: ffff8000082dbd3c x15: 0000000000000002 [ 325.864386][T11516] x14: 0000000000000007 x13: 1ffff00002a70071 x12: 0000000000080000 [ 325.865843][T11516] x11: 000000000007ffff x10: ffff80002ac76000 x9 : ffff8000113df658 [ 325.867256][T11516] x8 : 0000000000080000 x7 : ffff80001137eeac x6 : 0000000000000000 [ 325.868640][T11516] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 325.870056][T11516] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.871446][T11516] Call trace: [ 325.872025][T11516] ieee80211_recalc_idle+0x298/0x338 [ 325.872960][T11516] ieee80211_del_chanctx+0x35c/0x70c [ 325.873914][T11516] ieee80211_free_chanctx+0x258/0x33c [ 325.874845][T11516] __ieee80211_link_release_channel+0x3d4/0x55c [ 325.875927][T11516] ieee80211_link_release_channel+0x130/0x19c [ 325.876970][T11516] ieee80211_link_stop+0x9c/0xc4 [ 325.877815][T11516] ieee80211_if_change_type+0x1d0/0xc84 [ 325.878829][T11516] ieee80211_change_iface+0x64/0x3ec [ 325.879724][T11516] cfg80211_change_iface+0x728/0xf1c [ 325.880658][T11516] nl80211_set_interface+0x4e0/0x718 [ 325.881581][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 325.882539][T11516] genl_rcv_msg+0x424/0x600 [ 325.883340][T11516] netlink_rcv_skb+0x220/0x3ec [ 325.884153][T11516] genl_rcv+0x38/0x50 [ 325.884860][T11516] netlink_unicast+0x5fc/0x80c [ 325.885705][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 325.886529][T11516] ____sys_sendmsg+0x588/0x90c [ 325.887356][T11516] __sys_sendmsg+0x288/0x374 [ 325.888143][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 325.888986][T11516] invoke_syscall+0x98/0x290 [ 325.889834][T11516] el0_svc_common+0x13c/0x258 [ 325.890649][T11516] do_el0_svc+0x5c/0x134 [ 325.891432][T11516] el0_svc+0x58/0x128 [ 325.892103][T11516] el0t_64_sync_handler+0x84/0xf0 [ 325.893005][T11516] el0t_64_sync+0x18c/0x190 [ 325.893806][T11516] irq event stamp: 4384 [ 325.894526][T11516] hardirqs last enabled at (4383): [] exit_to_kernel_mode+0xcc/0xfc [ 325.896227][T11516] hardirqs last disabled at (4384): [] el1_dbg+0x24/0x80 [ 325.897708][T11516] softirqs last enabled at (4378): [] handle_softirqs+0xb1c/0xc90 [ 325.899396][T11516] softirqs last disabled at (4305): [] __do_softirq+0x14/0x20 [ 325.900972][T11516] ---[ end trace 0000000000000000 ]--- [ 325.910609][T11516] ------------[ cut here ]------------ [ 325.911796][T11516] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 325.913496][T11516] WARNING: CPU: 1 PID: 11516 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 325.915125][T11516] Modules linked in: [ 325.915847][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 325.917488][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 325.919314][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 325.920808][T11516] pc : __debug_object_init+0x2c8/0x434 [ 325.921795][T11516] lr : __debug_object_init+0x2c8/0x434 [ 325.922821][T11516] sp : ffff800021827030 [ 325.923552][T11516] x29: ffff800021827030 x28: dfff800000000000 x27: ffff0000d5295fe0 [ 325.924989][T11516] x26: ffff0000cc4c99f8 x25: 0000000000000000 x24: 0000000000000003 [ 325.926446][T11516] x23: ffff800011d0b280 x22: ffff8000121e2a80 x21: 0000000000000000 [ 325.927860][T11516] x20: ffff800011d0b280 x19: ffff0000cc4c99f8 x18: 1fffe00033e7697e [ 325.929295][T11516] x17: ffff80001537d000 x16: ffff8000082dd248 x15: 0000000040000000 [ 325.930737][T11516] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 325.932213][T11516] x11: ff0080000a975d20 x10: 0000000000000003 x9 : 37c88f0ba6d85300 [ 325.933682][T11516] x8 : 37c88f0ba6d85300 x7 : ffff80000825ab50 x6 : 0000000000000000 [ 325.935150][T11516] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 325.936580][T11516] x2 : 0000000000000006 x1 : ffff800011cedc80 x0 : ffff80018a0de000 [ 325.938003][T11516] Call trace: [ 325.938558][T11516] __debug_object_init+0x2c8/0x434 [ 325.939441][T11516] debug_object_init+0x20/0x2c [ 325.940258][T11516] init_timer_key+0x54/0x4a8 [ 325.941076][T11516] ieee80211_sta_setup_sdata+0x2dc/0x5c4 [ 325.942076][T11516] ieee80211_setup_sdata+0x7f8/0xa94 [ 325.942982][T11516] ieee80211_if_change_type+0x1dc/0xc84 [ 325.943959][T11516] ieee80211_change_iface+0x64/0x3ec [ 325.944940][T11516] cfg80211_change_iface+0x728/0xf1c [ 325.945931][T11516] nl80211_set_interface+0x4e0/0x718 [ 325.946828][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 325.947835][T11516] genl_rcv_msg+0x424/0x600 [ 325.948627][T11516] netlink_rcv_skb+0x220/0x3ec [ 325.949459][T11516] genl_rcv+0x38/0x50 [ 325.950151][T11516] netlink_unicast+0x5fc/0x80c [ 325.950983][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 325.951855][T11516] ____sys_sendmsg+0x588/0x90c [ 325.952732][T11516] __sys_sendmsg+0x288/0x374 [ 325.953568][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 325.954396][T11516] invoke_syscall+0x98/0x290 [ 325.955215][T11516] el0_svc_common+0x13c/0x258 [ 325.956050][T11516] do_el0_svc+0x5c/0x134 [ 325.956831][T11516] el0_svc+0x58/0x128 [ 325.957535][T11516] el0t_64_sync_handler+0x84/0xf0 [ 325.958398][T11516] el0t_64_sync+0x18c/0x190 [ 325.959198][T11516] irq event stamp: 4542 [ 325.959926][T11516] hardirqs last enabled at (4541): [] finish_lock_switch+0xb0/0x1c8 [ 325.961622][T11516] hardirqs last disabled at (4542): [] el1_dbg+0x24/0x80 [ 325.963141][T11516] softirqs last enabled at (4482): [] handle_softirqs+0xb1c/0xc90 [ 325.964756][T11516] softirqs last disabled at (4387): [] __do_softirq+0x14/0x20 [ 325.966391][T11516] ---[ end trace 0000000000000000 ]--- [ 325.978522][T11516] INFO: trying to register non-static key. [ 325.979648][T11516] The code is fine but needs lockdep annotation, or maybe [ 325.980886][T11516] you didn't initialize this object before use? [ 325.981890][T11516] turning off the locking correctness validator. [ 325.982924][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 325.984429][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 325.986186][T11516] Call trace: [ 325.986788][T11516] dump_backtrace+0x1c4/0x1f0 [ 325.987595][T11516] show_stack+0x2c/0x3c [ 325.988366][T11516] __dump_stack+0x30/0x40 [ 325.989186][T11516] dump_stack_lvl+0xf4/0x15c [ 325.990009][T11516] dump_stack+0x1c/0x5c [ 325.990723][T11516] assign_lock_key+0x230/0x264 [ 325.991589][T11516] register_lock_class+0x1ac/0x690 [ 325.992493][T11516] __lock_acquire+0x164/0x6634 [ 325.993358][T11516] lock_acquire+0x20c/0x638 [ 325.994187][T11516] __timer_delete_sync+0xa0/0x21c [ 325.995057][T11516] timer_fixup_init+0x40/0x70 [ 325.995898][T11516] __debug_object_init+0x310/0x434 [ 325.996802][T11516] debug_object_init+0x20/0x2c [ 325.997647][T11516] init_timer_key+0x54/0x4a8 [ 325.998466][T11516] ieee80211_sta_setup_sdata+0x2dc/0x5c4 [ 325.999489][T11516] ieee80211_setup_sdata+0x7f8/0xa94 [ 326.000438][T11516] ieee80211_if_change_type+0x1dc/0xc84 [ 326.001427][T11516] ieee80211_change_iface+0x64/0x3ec [ 326.002446][T11516] cfg80211_change_iface+0x728/0xf1c [ 326.003455][T11516] nl80211_set_interface+0x4e0/0x718 [ 326.004370][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 326.005408][T11516] genl_rcv_msg+0x424/0x600 [ 326.006162][T11516] netlink_rcv_skb+0x220/0x3ec [ 326.007013][T11516] genl_rcv+0x38/0x50 [ 326.007695][T11516] netlink_unicast+0x5fc/0x80c [ 326.008538][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 326.009378][T11516] ____sys_sendmsg+0x588/0x90c [ 326.010253][T11516] __sys_sendmsg+0x288/0x374 [ 326.011087][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 326.011990][T11516] invoke_syscall+0x98/0x290 [ 326.012802][T11516] el0_svc_common+0x13c/0x258 [ 326.013584][T11516] do_el0_svc+0x5c/0x134 [ 326.014316][T11516] el0_svc+0x58/0x128 [ 326.015028][T11516] el0t_64_sync_handler+0x84/0xf0 [ 326.015901][T11516] el0t_64_sync+0x18c/0x190 [ 326.018863][T11516] ------------[ cut here ]------------ [ 326.020006][T11516] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 326.021633][T11516] WARNING: CPU: 1 PID: 11516 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 326.023192][T11516] Modules linked in: [ 326.023880][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 326.025385][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 326.027165][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 326.028556][T11516] pc : __debug_object_init+0x2c8/0x434 [ 326.029555][T11516] lr : __debug_object_init+0x2c8/0x434 [ 326.030580][T11516] sp : ffff800021826fa0 [ 326.031356][T11516] x29: ffff800021826fa0 x28: dfff800000000000 x27: ffff0000d5295fe0 [ 326.032871][T11516] x26: ffff0000cc4c99f8 x25: 0000000000000000 x24: 0000000000000003 [ 326.034346][T11516] x23: ffff800011d0b280 x22: ffff8000121e2a80 x21: 0000000000000000 [ 326.035800][T11516] x20: ffff800011d0b280 x19: ffff0000cc4c99f8 x18: 1fffe00033e7697e [ 326.037196][T11516] x17: ffff80001537d000 x16: ffff800008043b30 x15: 0000000040000000 [ 326.038599][T11516] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 326.040121][T11516] x11: ff00800008048e14 x10: 0000000040000002 x9 : 37c88f0ba6d85300 [ 326.041554][T11516] x8 : 37c88f0ba6d85300 x7 : ffff800011cec160 x6 : ffff80000825ab50 [ 326.042919][T11516] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 326.044272][T11516] x2 : ffff800021826b60 x1 : 0000000000000000 x0 : ffff80000825abe4 [ 326.045647][T11516] Call trace: [ 326.046200][T11516] __debug_object_init+0x2c8/0x434 [ 326.047144][T11516] debug_object_init+0x20/0x2c [ 326.048104][T11516] timer_fixup_init+0x50/0x70 [ 326.048923][T11516] __debug_object_init+0x310/0x434 [ 326.049842][T11516] debug_object_init+0x20/0x2c [ 326.050695][T11516] init_timer_key+0x54/0x4a8 [ 326.051528][T11516] ieee80211_sta_setup_sdata+0x2dc/0x5c4 [ 326.052548][T11516] ieee80211_setup_sdata+0x7f8/0xa94 [ 326.053471][T11516] ieee80211_if_change_type+0x1dc/0xc84 [ 326.054464][T11516] ieee80211_change_iface+0x64/0x3ec [ 326.055447][T11516] cfg80211_change_iface+0x728/0xf1c [ 326.056416][T11516] nl80211_set_interface+0x4e0/0x718 [ 326.057392][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 326.058377][T11516] genl_rcv_msg+0x424/0x600 [ 326.059233][T11516] netlink_rcv_skb+0x220/0x3ec [ 326.060101][T11516] genl_rcv+0x38/0x50 [ 326.060802][T11516] netlink_unicast+0x5fc/0x80c [ 326.061630][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 326.062471][T11516] ____sys_sendmsg+0x588/0x90c [ 326.063262][T11516] __sys_sendmsg+0x288/0x374 [ 326.064055][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 326.064895][T11516] invoke_syscall+0x98/0x290 [ 326.065724][T11516] el0_svc_common+0x13c/0x258 [ 326.066560][T11516] do_el0_svc+0x5c/0x134 [ 326.067357][T11516] el0_svc+0x58/0x128 [ 326.068096][T11516] el0t_64_sync_handler+0x84/0xf0 [ 326.068997][T11516] el0t_64_sync+0x18c/0x190 [ 326.069832][T11516] irq event stamp: 4862 [ 326.070598][T11516] hardirqs last enabled at (4861): [] exit_to_kernel_mode+0xcc/0xfc [ 326.072324][T11516] hardirqs last disabled at (4862): [] __timer_delete_sync+0x78/0x21c [ 326.074064][T11516] softirqs last enabled at (4856): [] handle_softirqs+0xb1c/0xc90 [ 326.075727][T11516] softirqs last disabled at (4545): [] __do_softirq+0x14/0x20 [ 326.077360][T11516] ---[ end trace 0000000000000000 ]--- [ 326.084225][T11516] ------------[ cut here ]------------ [ 326.085279][T11516] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 326.086977][T11516] WARNING: CPU: 1 PID: 11516 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 326.088751][T11516] Modules linked in: [ 326.089613][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 326.091367][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 326.093047][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 326.094418][T11516] pc : __debug_object_init+0x2c8/0x434 [ 326.095427][T11516] lr : __debug_object_init+0x2c8/0x434 [ 326.096441][T11516] sp : ffff800021826f10 [ 326.097156][T11516] x29: ffff800021826f10 x28: dfff800000000000 x27: ffff0000d5295fe0 [ 326.098610][T11516] x26: ffff0000cc4c99f8 x25: 0000000000000000 x24: 0000000000000003 [ 326.100009][T11516] x23: ffff800011d0b280 x22: ffff8000121e2a80 x21: 0000000000000000 [ 326.101497][T11516] x20: ffff800011d0b280 x19: ffff0000cc4c99f8 x18: 1fffe00033e7697e [ 326.102876][T11516] x17: ffff80001537d000 x16: ffff800008043b30 x15: 0000000040000000 [ 326.104239][T11516] x14: 0000000000000001 x13: 1fffe00033e79070 x12: 0000000000000000 [ 326.105727][T11516] x11: ff00800008048e14 x10: 0000000040000002 x9 : 37c88f0ba6d85300 [ 326.107234][T11516] x8 : 37c88f0ba6d85300 x7 : ffff800011cec160 x6 : ffff80000825ab50 [ 326.108729][T11516] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 326.110060][T11516] x2 : ffff800021826ac0 x1 : 0000000000000000 x0 : ffff80000825abe4 [ 326.111442][T11516] Call trace: [ 326.112069][T11516] __debug_object_init+0x2c8/0x434 [ 326.112953][T11516] debug_object_init+0x20/0x2c [ 326.113771][T11516] timer_fixup_init+0x50/0x70 [ 326.114587][T11516] __debug_object_init+0x310/0x434 [ 326.115475][T11516] debug_object_init+0x20/0x2c [ 326.116317][T11516] timer_fixup_init+0x50/0x70 [ 326.117145][T11516] __debug_object_init+0x310/0x434 [ 326.118046][T11516] debug_object_init+0x20/0x2c [ 326.118864][T11516] init_timer_key+0x54/0x4a8 [ 326.119666][T11516] ieee80211_sta_setup_sdata+0x2dc/0x5c4 [ 326.120677][T11516] ieee80211_setup_sdata+0x7f8/0xa94 [ 326.121570][T11516] ieee80211_if_change_type+0x1dc/0xc84 [ 326.122472][T11516] ieee80211_change_iface+0x64/0x3ec [ 326.123370][T11516] cfg80211_change_iface+0x728/0xf1c [ 326.124303][T11516] nl80211_set_interface+0x4e0/0x718 [ 326.125211][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 326.126187][T11516] genl_rcv_msg+0x424/0x600 [ 326.126987][T11516] netlink_rcv_skb+0x220/0x3ec [ 326.127852][T11516] genl_rcv+0x38/0x50 [ 326.128546][T11516] netlink_unicast+0x5fc/0x80c [ 326.129378][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 326.130212][T11516] ____sys_sendmsg+0x588/0x90c [ 326.131054][T11516] __sys_sendmsg+0x288/0x374 [ 326.131855][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 326.132739][T11516] invoke_syscall+0x98/0x290 [ 326.133591][T11516] el0_svc_common+0x13c/0x258 [ 326.134429][T11516] do_el0_svc+0x5c/0x134 [ 326.135163][T11516] el0_svc+0x58/0x128 [ 326.135874][T11516] el0t_64_sync_handler+0x84/0xf0 [ 326.136701][T11516] el0t_64_sync+0x18c/0x190 [ 326.137501][T11516] irq event stamp: 4862 [ 326.138196][T11516] hardirqs last enabled at (4861): [] exit_to_kernel_mode+0xcc/0xfc [ 326.139899][T11516] hardirqs last disabled at (4862): [] __timer_delete_sync+0x78/0x21c [ 326.141626][T11516] softirqs last enabled at (4856): [] handle_softirqs+0xb1c/0xc90 [ 326.143312][T11516] softirqs last disabled at (4545): [] __do_softirq+0x14/0x20 [ 326.144837][T11516] ---[ end trace 0000000000000000 ]--- [ 326.146425][T11516] ------------[ cut here ]------------ [ 326.147379][T11516] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 326.148930][T11516] WARNING: CPU: 1 PID: 11516 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 326.150468][T11516] Modules linked in: [ 326.151193][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 326.152813][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 326.154630][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 326.156067][T11516] pc : __debug_object_init+0x2c8/0x434 [ 326.157015][T11516] lr : __debug_object_init+0x2c8/0x434 [ 326.157984][T11516] sp : ffff800021826e80 [ 326.158694][T11516] x29: ffff800021826e80 x28: dfff800000000000 x27: ffff0000d5295fe0 [ 326.160174][T11516] x26: ffff0000cc4c99f8 x25: 0000000000000000 x24: 0000000000000003 [ 326.161578][T11516] x23: ffff800011d0b280 x22: ffff8000121e2a80 x21: 0000000000000000 [ 326.162956][T11516] x20: ffff800011d0b280 x19: ffff0000cc4c99f8 x18: 1fffe00033e7697e [ 326.164317][T11516] x17: ffff80001537d000 x16: ffff800008043b30 x15: ffff00019f3b4bfc [ 326.165686][T11516] x14: 0000000000000001 x13: 1fffe0001b0b1d90 x12: 0000000000000000 [ 326.167118][T11516] x11: 0000000000000000 x10: ffff60001b0b1d91 x9 : 37c88f0ba6d85300 [ 326.168587][T11516] x8 : 37c88f0ba6d85300 x7 : ffff800011cec160 x6 : ffff80000825ab50 [ 326.169968][T11516] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000824981c [ 326.171347][T11516] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 326.172767][T11516] Call trace: [ 326.173339][T11516] __debug_object_init+0x2c8/0x434 [ 326.174218][T11516] debug_object_init+0x20/0x2c [ 326.175055][T11516] timer_fixup_init+0x50/0x70 [ 326.175896][T11516] __debug_object_init+0x310/0x434 [ 326.176816][T11516] debug_object_init+0x20/0x2c [ 326.177637][T11516] timer_fixup_init+0x50/0x70 [ 326.178440][T11516] __debug_object_init+0x310/0x434 [ 326.179332][T11516] debug_object_init+0x20/0x2c [ 326.180184][T11516] timer_fixup_init+0x50/0x70 [ 326.180978][T11516] __debug_object_init+0x310/0x434 [ 326.181844][T11516] debug_object_init+0x20/0x2c [ 326.182716][T11516] init_timer_key+0x54/0x4a8 [ 326.183574][T11516] ieee80211_sta_setup_sdata+0x2dc/0x5c4 [ 326.184542][T11516] ieee80211_setup_sdata+0x7f8/0xa94 [ 326.185462][T11516] ieee80211_if_change_type+0x1dc/0xc84 [ 326.186447][T11516] ieee80211_change_iface+0x64/0x3ec [ 326.187397][T11516] cfg80211_change_iface+0x728/0xf1c [ 326.188336][T11516] nl80211_set_interface+0x4e0/0x718 [ 326.189285][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 326.190241][T11516] genl_rcv_msg+0x424/0x600 [ 326.191035][T11516] netlink_rcv_skb+0x220/0x3ec [ 326.191814][T11516] genl_rcv+0x38/0x50 [ 326.192519][T11516] netlink_unicast+0x5fc/0x80c [ 326.193386][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 326.194233][T11516] ____sys_sendmsg+0x588/0x90c [ 326.195075][T11516] __sys_sendmsg+0x288/0x374 [ 326.195878][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 326.196753][T11516] invoke_syscall+0x98/0x290 [ 326.197537][T11516] el0_svc_common+0x13c/0x258 [ 326.198339][T11516] do_el0_svc+0x5c/0x134 [ 326.199093][T11516] el0_svc+0x58/0x128 [ 326.199916][T11516] el0t_64_sync_handler+0x84/0xf0 [ 326.200906][T11516] el0t_64_sync+0x18c/0x190 [ 326.201819][T11516] irq event stamp: 4862 [ 326.202649][T11516] hardirqs last enabled at (4861): [] exit_to_kernel_mode+0xcc/0xfc [ 326.204549][T11516] hardirqs last disabled at (4862): [] __timer_delete_sync+0x78/0x21c [ 326.206448][T11516] softirqs last enabled at (4856): [] handle_softirqs+0xb1c/0xc90 [ 326.208128][T11516] softirqs last disabled at (4545): [] __do_softirq+0x14/0x20 [ 326.209760][T11516] ---[ end trace 0000000000000000 ]--- [ 326.212806][T11516] ------------[ cut here ]------------ [ 326.213690][T11516] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 326.215144][T11516] WARNING: CPU: 1 PID: 11516 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 326.216710][T11516] Modules linked in: [ 326.217385][T11516] CPU: 1 PID: 11516 Comm: syz.4.2294 Tainted: G W syzkaller #0 [ 326.218932][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 326.220647][T11516] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 326.222029][T11516] pc : __debug_object_init+0x2c8/0x434 [ 326.222934][T11516] lr : __debug_object_init+0x2c8/0x434 [ 326.223912][T11516] sp : ffff800021826df0 [ 326.224707][T11516] x29: ffff800021826df0 x28: dfff800000000000 x27: ffff0000d5295fe0 [ 326.226091][T11516] x26: ffff0000cc4c99f8 x25: 0000000000000000 x24: 0000000000000003 [ 326.227541][T11516] x23: ffff800011d0b280 x22: ffff8000121e2a80 x21: 0000000000000000 [ 326.228969][T11516] x20: ffff800011d0b280 x19: ffff0000cc4c99f8 x18: 1fffe00033e7697e [ 326.230358][T11516] x17: 6e6968207473696c x16: ffff800011b90080 x15: 6570797420746365 [ 326.231782][T11516] x14: 0000000000000001 x13: 1fffe00033e769a3 x12: 0000000000080000 [ 326.233185][T11516] x11: 000000000007ffff x10: ffff80002ac76000 x9 : 37c88f0ba6d85300 [ 326.234560][T11516] x8 : 37c88f0ba6d85300 x7 : 0000000000000001 x6 : 0000000000000001 [ 326.235955][T11516] x5 : ffff800021826878 x4 : ffff800015464e80 x3 : ffff800008540904 [ 326.237309][T11516] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 326.238684][T11516] Call trace: [ 326.239238][T11516] __debug_object_init+0x2c8/0x434 [ 326.240114][T11516] debug_object_init+0x20/0x2c [ 326.241020][T11516] timer_fixup_init+0x50/0x70 [ 326.241867][T11516] __debug_object_init+0x310/0x434 [ 326.242775][T11516] debug_object_init+0x20/0x2c [ 326.243649][T11516] timer_fixup_init+0x50/0x70 [ 326.244452][T11516] __debug_object_init+0x310/0x434 [ 326.245368][T11516] debug_object_init+0x20/0x2c [ 326.246227][T11516] timer_fixup_init+0x50/0x70 [ 326.247014][T11516] __debug_object_init+0x310/0x434 [ 326.247901][T11516] debug_object_init+0x20/0x2c [ 326.248721][T11516] timer_fixup_init+0x50/0x70 [ 326.249590][T11516] __debug_object_init+0x310/0x434 [ 326.250487][T11516] debug_object_init+0x20/0x2c [ 326.251330][T11516] init_timer_key+0x54/0x4a8 [ 326.252146][T11516] ieee80211_sta_setup_sdata+0x2dc/0x5c4 [ 326.253114][T11516] ieee80211_setup_sdata+0x7f8/0xa94 [ 326.254096][T11516] ieee80211_if_change_type+0x1dc/0xc84 [ 326.255149][T11516] ieee80211_change_iface+0x64/0x3ec [ 326.256133][T11516] cfg80211_change_iface+0x728/0xf1c [ 326.257087][T11516] nl80211_set_interface+0x4e0/0x718 [ 326.258104][T11516] genl_family_rcv_msg_doit+0x210/0x308 [ 326.259090][T11516] genl_rcv_msg+0x424/0x600 [ 326.259936][T11516] netlink_rcv_skb+0x220/0x3ec [ 326.260843][T11516] genl_rcv+0x38/0x50 [ 326.261538][T11516] netlink_unicast+0x5fc/0x80c [ 326.262362][T11516] netlink_sendmsg+0x6f0/0x9d8 [ 326.263174][T11516] ____sys_sendmsg+0x588/0x90c [ 326.264014][T11516] __sys_sendmsg+0x288/0x374 [ 326.264811][T11516] __arm64_sys_sendmsg+0x80/0x94 [ 326.265661][T11516] invoke_syscall+0x98/0x290 [ 326.266489][T11516] el0_svc_common+0x13c/0x258 [ 326.267276][T11516] do_el0_svc+0x5c/0x134 [ 326.268005][T11516] el0_svc+0x58/0x128 [ 326.268693][T11516] el0t_64_sync_handler+0x84/0xf0 [ 326.269566][T11516] el0t_64_sync+0x18c/0x190 [ 326.270355][T11516] irq event stamp: 4862 [ 326.271068][T11516] hardirqs last enabled at (4861): [] exit_to_kernel_mode+0xcc/0xfc [ 326.272772][T11516] hardirqs last disabled at (4862): [] __timer_delete_sync+0x78/0x21c [ 326.274643][T11516] softirqs last enabled at (4856): [] handle_softirqs+0xb1c/0xc90 [ 326.276281][T11516] softirqs last disabled at (4545): [] __do_softirq+0x14/0x20 [ 326.277807][T11516] ---[ end trace 0000000000000000 ]---