last executing test programs: 23m36.518600106s ago: executing program 3 (id=88): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x7040, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x202d) 23m36.041440161s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 23m34.820470304s ago: executing program 3 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="8b7f0000", 0x4}, {&(0x7f00000000c0)="0f36ed34", 0x4}], 0x2}, 0x0) 23m34.436882438s ago: executing program 3 (id=100): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000006980)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) renameat2(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) 23m31.594312029s ago: executing program 3 (id=106): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000017c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="11"], 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 23m26.76430602s ago: executing program 3 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14010}, 0x90) 23m25.88306648s ago: executing program 32 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14010}, 0x90) 27.784965292s ago: executing program 4 (id=5271): socket(0x1, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27.452787465s ago: executing program 4 (id=5274): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 26.946034871s ago: executing program 4 (id=5276): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='@', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x1000f) 26.790130823s ago: executing program 4 (id=5278): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x4e, 0x0, 0x1}, 0x28) syz_open_dev$loop(&(0x7f00000002c0), 0x80, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 26.328559517s ago: executing program 4 (id=5283): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x20, 0x0}) 25.952577281s ago: executing program 4 (id=5287): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 25.667578105s ago: executing program 33 (id=5287): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 6.51335621s ago: executing program 1 (id=5347): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d040000005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)='S\x00\x00', 0x3}], 0x2) 6.363266982s ago: executing program 5 (id=5349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x2, 0x3, 0xf, 0x8, 0x4, 0x18, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x6739, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 6.255272333s ago: executing program 1 (id=5350): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.844697428s ago: executing program 5 (id=5351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x84, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x40, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x21, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x43, 0x668c}}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0xac) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.794918058s ago: executing program 1 (id=5353): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 5.60968412s ago: executing program 5 (id=5354): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{0x0}], 0x1}}], 0x1, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000e40)={&(0x7f00000000c0)={0xa, 0x4, 0xa4000, @remote, 0x3}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000180)='I', 0x1}], 0x1}, 0x20009084) 5.59599238s ago: executing program 2 (id=5355): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x850) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r5, @ANYBLOB="0b062dbd7000000000003000000008000200", @ANYRES32=r3, @ANYBLOB="05003500e900000005003300030000000500340000000000050036"], 0x3c}}, 0x0) 4.70829548s ago: executing program 1 (id=5357): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, 0x0, 0x0) writev(r5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 4.508017592s ago: executing program 5 (id=5358): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d040000005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)='S\x00\x00', 0x3}], 0x2) 4.284657424s ago: executing program 2 (id=5360): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x73e1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x56) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x12}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="27030200dc0f14000e00073c122400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 4.144435346s ago: executing program 5 (id=5361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.896038908s ago: executing program 0 (id=5362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x84, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x40, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x21, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x43, 0x668c}}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0xac) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.69965756s ago: executing program 2 (id=5363): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0xd) open(&(0x7f0000000000)='./file0\x00', 0x10a640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.623880471s ago: executing program 5 (id=5364): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f000301000000090400000001"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 3.566005052s ago: executing program 0 (id=5365): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(0xffffffffffffffff, &(0x7f00000005c0)=""/228, 0xe4) 3.392316454s ago: executing program 2 (id=5366): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=ANY=[@ANYRESOCT=r0], 0x48}}, 0x8854) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 3.392063794s ago: executing program 0 (id=5367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.245186505s ago: executing program 0 (id=5368): socket(0x1, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.229909416s ago: executing program 0 (id=5369): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3b, 0xfa00, {0x5, &(0x7f00000000c0), 0x111}}, 0x20) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.280402996s ago: executing program 0 (id=5370): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x105040, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010000", 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014000100000000000000000001001130000100000000000000a5c3e0bf0000f4d9000000"], 0x28}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002140)=ANY=[@ANYRES32=0x0, @ANYBLOB="86b4bf4e6b2d16ca52e8ff82bd79bc7ad7b0265a3a8690ab7f3d105378fd644dad2721d88ecb11e92a965c3142087ae8110a6da9633b1704a8ce1e3c0cd416ba34180442cdf9444eff69860ec402fd6c5a3cfa69788d476ca621d651f843d50a739a67db93f702f18835d42e0b28521bb6e05cc1004469cdf2aabe7757a40fc20ec3d8f3eb0adab016a58df23cbd3ddd4e04092aca3dd7f747b41f861771ea70a93c4e6b24fdd89c7b23dbc62ca40a4fd25d986834c172f78d229d4444dc3ecf0c8eb967737316618f2f", @ANYRES8=r4, @ANYRES16=r3, @ANYBLOB, @ANYRES64=0x0], 0xa) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000ca000300000800000086dd08"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 932.9947ms ago: executing program 2 (id=5371): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x9, 0x0, 0x1, 0x200, 0x0, 0x4, 0x7, 0x10001, 0x81, 0x1, 0x80000001, 0x8, 0x2, 0x1ff, 0x7, 0x7, 0xfffffffb, 0x3ff, 0x4, 0x3, 0x7, 0xffffffff, 0x434, 0x6, 0x1, 0x9, 0x9, 0x3, 0xffff, 0xfffffffb, 0x8000, 0x7, 0x7fff, 0x3, 0x101, 0x6, 0x7fffffff, 0xe, 0x4, 0x4, 0x8, 0x40, 0x9, 0x6, 0xa, 0x215, 0x8001, 0x7, 0x1, 0x0, 0x2e6, 0x4, 0xffffff7f, 0x2, 0x1, 0x8000, 0x5, 0x0, 0x9, 0x10, 0x6, 0x200, 0x32, 0x7, 0x7f80000, 0x6, 0x8b, 0x8, 0x3, 0x0, 0x2, 0x7, 0x7, 0x4641ebda, 0x9, 0x2, 0x0, 0xff, 0x0, 0x8319, 0x29e4, 0x200, 0x6, 0x10001, 0xc, 0xa, 0x3, 0x0, 0x2, 0x80000001, 0x7, 0x1, 0x1fe, 0x0, 0xd, 0x5, 0xf, 0x10, 0x0, 0x0, 0x1, 0x80000000, 0xa, 0x8, 0xffff, 0x6, 0x7, 0x9, 0x100, 0x7, 0x2, 0x6, 0x10, 0x0, 0x6, 0x7, 0x240, 0x8, 0x5, 0x81, 0xaeb, 0xff, 0x0, 0x80000001, 0x8, 0xc17, 0x80, 0xffffff03, 0xef3, 0x1, 0x3, 0x400, 0x7ff, 0xffff, 0x1, 0x4, 0x7, 0x7, 0x4, 0x1, 0x40, 0x0, 0xfffffff7, 0x0, 0x8, 0x5588, 0x40, 0x4, 0x3ff, 0x89e48883, 0x8, 0x281, 0x8, 0x8, 0x40, 0xffffffff, 0x4, 0x293d8b13, 0x45, 0xfe, 0x3ff, 0xfb1, 0xfffffffe, 0xc5, 0x9, 0x11d, 0x3, 0x9, 0x81, 0x73c2, 0x5, 0x1, 0x3, 0x4, 0x5, 0x81, 0x2, 0x40, 0x400, 0x7, 0x56e2, 0x31, 0xfffffffc, 0x5, 0x3, 0xd, 0xdb51, 0x2, 0x1, 0x8, 0x2, 0x1, 0x8a, 0x9, 0x8cb6, 0xb637, 0x4, 0x9, 0x7, 0x5b03, 0xfff, 0x8, 0x5, 0x81, 0x0, 0x4, 0x5d, 0x80000000, 0x0, 0x2, 0x4, 0x10001, 0xc7, 0x5, 0x3, 0x6, 0x8, 0x80000001, 0x3, 0x6, 0x6, 0x800, 0x5, 0x7, 0x1, 0x1fd8, 0x0, 0x7, 0xa, 0x7, 0x1, 0x82c, 0x84, 0x0, 0x95, 0x8, 0x6, 0x3, 0xd99, 0x40, 0x0, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7000000, 0x7, 0x9, 0x3, 0xffffff5a, 0x20000000, 0x8, 0x8]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 329.903326ms ago: executing program 1 (id=5372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 232.517437ms ago: executing program 2 (id=5373): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101ac2, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 1 (id=5374): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x850) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r5, @ANYBLOB="0b062dbd7000000000003000000008000200", @ANYRES32=r3, @ANYBLOB="05003500e900000005003300030000000500340000000000050036"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 3][T19166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1204.179210][T19162] loop1: detected capacity change from 0 to 4096 [ 1204.215603][T19162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.260801][T19166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.443049][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.682978][T19181] loop2: detected capacity change from 0 to 4096 [ 1204.691947][T19181] EXT4-fs: inline encryption not supported [ 1204.716846][T19181] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 1204.726231][T19181] System zones: 0-5 [ 1204.757331][T19181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.863249][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.304522][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.912243][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1205.963946][ T51] block nbd4: Receive control failed (result -1) [ 1206.111906][T19198] loop2: detected capacity change from 0 to 7 [ 1206.131942][T19198] Dev loop2: unable to read RDB block 7 [ 1206.149800][T19198] loop2: AHDI p2 p3 [ 1206.155629][T19198] loop2: partition table partially beyond EOD, truncated [ 1206.183584][T19198] loop2: p3 start 335544320 is beyond EOD, truncated [ 1206.455393][T19204] loop2: detected capacity change from 0 to 2048 [ 1206.479464][T19204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.553473][T19204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.806182][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.127347][T19213] loop2: detected capacity change from 0 to 4096 [ 1207.202151][T19213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.259767][T19219] syzkaller1: entered promiscuous mode [ 1207.265650][T19219] syzkaller1: entered allmulticast mode [ 1207.466520][T18488] IPVS: starting estimator thread 0... [ 1207.585775][T19225] IPVS: using max 28 ests per chain, 67200 per kthread [ 1207.877889][T19233] syzkaller0: entered promiscuous mode [ 1207.883475][T19233] syzkaller0: entered allmulticast mode [ 1207.972782][T19235] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1207.985360][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.993058][T19235] nbd: must specify a device to reconfigure [ 1208.215277][T19237] syzkaller0: entered promiscuous mode [ 1208.230196][T19237] syzkaller0: entered allmulticast mode [ 1209.551289][T19268] loop2: detected capacity change from 0 to 7 [ 1209.582321][T19268] Dev loop2: unable to read RDB block 7 [ 1209.589754][T19268] loop2: AHDI p2 p3 [ 1209.593751][T19268] loop2: partition table partially beyond EOD, truncated [ 1209.611697][T19268] loop2: p3 start 335544320 is beyond EOD, truncated [ 1210.854167][T19273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1210.865205][T19273] nbd: must specify a device to reconfigure [ 1212.095690][T19291] syzkaller1: entered promiscuous mode [ 1212.101253][T19291] syzkaller1: entered allmulticast mode [ 1213.175000][T19308] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1213.216678][T19308] nbd: must specify a device to reconfigure [ 1213.294022][T19310] loop2: detected capacity change from 0 to 7 [ 1213.331307][T19310] Dev loop2: unable to read RDB block 7 [ 1213.348553][T19310] loop2: AHDI p2 p3 [ 1213.357148][T19310] loop2: partition table partially beyond EOD, truncated [ 1213.365056][T19310] loop2: p3 start 335544320 is beyond EOD, truncated [ 1213.509139][T19314] syzkaller0: entered promiscuous mode [ 1213.522075][T19314] syzkaller0: entered allmulticast mode [ 1214.195022][T19335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.216428][T19335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.277797][T19346] program syz.1.4016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1214.288054][T19335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.314834][T19335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.342015][T19335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.370136][T19335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.380401][T19335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.401252][T19335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.411582][T19335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.431254][T19335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.557999][T19348] loop1: detected capacity change from 0 to 1024 [ 1214.602598][T19348] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1214.712171][T19348] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.4017: lblock 2 mapped to illegal pblock 2 (length 1) [ 1214.777811][T19348] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1214.798904][T19348] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.4017: lblock 0 mapped to illegal pblock 48 (length 1) [ 1214.841370][T19348] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1214.865893][T19348] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.4017: Failed to acquire dquot type 0 [ 1214.926226][T19348] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1214.959342][T19348] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4017: mark_inode_dirty error [ 1215.016190][T19348] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1215.027904][T19348] EXT4-fs (loop1): 1 orphan inode deleted [ 1215.060642][T19348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.108880][ T49] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1215.145915][ T49] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1215.158986][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 1215.174653][T19348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.185354][T19348] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.4017: Invalid inode table block 1 in block_group 0 [ 1215.217755][T19348] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1215.228138][T19348] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz.1.4017: mark_inode_dirty error [ 1215.517135][T19365] syzkaller0: entered promiscuous mode [ 1215.518645][T19367] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1215.532120][T19367] nbd: must specify a device to reconfigure [ 1215.541275][T19365] syzkaller0: entered allmulticast mode [ 1216.444439][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1216.817436][T19391] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1216.850372][T19391] nbd: must specify a device to reconfigure [ 1217.046316][T19395] syzkaller0: entered promiscuous mode [ 1217.065218][T19395] syzkaller0: entered allmulticast mode [ 1217.595853][T19411] loop1: detected capacity change from 0 to 1024 [ 1217.665820][T19411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.706670][T19411] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.784295][T19411] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.4039: lblock 3 mapped to illegal pblock 3 (length 1) [ 1217.831099][T19411] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1217.867664][T19411] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1217.867664][T19411] [ 1217.985471][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1218.225392][T19422] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1218.249550][T19422] nbd: must specify a device to reconfigure [ 1218.535804][T19427] syzkaller0: entered promiscuous mode [ 1218.541831][T19427] syzkaller0: entered allmulticast mode [ 1218.827754][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1219.390049][T19440] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1222.196476][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1222.319123][ T51] block nbd5: Receive control failed (result -1) [ 1222.427614][T19484] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4057'. [ 1222.439353][T19484] nbd: must specify a device to reconfigure [ 1222.522867][T10052] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1222.684031][T19488] syzkaller0: entered promiscuous mode [ 1222.706771][T19488] syzkaller0: entered allmulticast mode [ 1222.719596][T10052] usb 3-1: Using ep0 maxpacket: 32 [ 1222.729298][T10052] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.742531][T10052] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1222.756619][T10052] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1222.766033][T10052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.361504][T10052] usb 3-1: string descriptor 0 read error: -71 [ 1225.392141][T10052] usb 3-1: USB disconnect, device number 10 [ 1225.936658][T19520] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1226.881527][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1226.968023][ T5777] block nbd6: Receive control failed (result -1) [ 1226.990875][T19532] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1227.046529][T19532] nbd: must specify a device to reconfigure [ 1227.223843][T19542] loop2: detected capacity change from 0 to 7 [ 1227.236410][T17617] Dev loop2: unable to read RDB block 7 [ 1227.246241][T17617] loop2: unable to read partition table [ 1227.256470][T17617] loop2: partition table beyond EOD, truncated [ 1227.268447][T19542] Dev loop2: unable to read RDB block 7 [ 1227.280204][T19542] loop2: unable to read partition table [ 1227.293879][T19542] loop2: partition table beyond EOD, truncated [ 1227.314924][T19542] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1227.580583][T19544] syzkaller0: entered promiscuous mode [ 1227.586251][T19544] syzkaller0: entered allmulticast mode [ 1227.718209][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1230.373569][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1230.906424][T19571] syzkaller1: entered promiscuous mode [ 1230.912098][T19571] syzkaller1: entered allmulticast mode [ 1231.066534][T19576] policy can only be matched on NF_INET_PRE_ROUTING [ 1231.066560][T19576] unable to load match [ 1231.081790][T19577] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1231.091587][T19577] nbd: must specify a device to reconfigure [ 1231.244641][T19582] loop2: detected capacity change from 0 to 7 [ 1231.256552][T19582] Dev loop2: unable to read RDB block 7 [ 1231.262203][T19582] loop2: unable to read partition table [ 1231.270334][T19582] loop2: partition table beyond EOD, truncated [ 1231.294256][T19582] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1231.529062][T19589] syzkaller0: entered promiscuous mode [ 1231.534913][T19589] syzkaller0: entered allmulticast mode [ 1235.008779][T19622] loop2: detected capacity change from 0 to 7 [ 1235.017211][T17617] Dev loop2: unable to read RDB block 7 [ 1235.022853][T17617] loop2: unable to read partition table [ 1235.029121][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1235.037047][T17617] loop2: partition table beyond EOD, truncated [ 1235.045377][T19622] Dev loop2: unable to read RDB block 7 [ 1235.055247][T19622] loop2: unable to read partition table [ 1235.068839][T19622] loop2: partition table beyond EOD, truncated [ 1235.108496][ T5777] block nbd7: Receive control failed (result -1) [ 1235.113042][T19622] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1235.583101][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1235.776846][T19635] syzkaller0: entered promiscuous mode [ 1235.782636][T19635] syzkaller0: entered allmulticast mode [ 1235.798815][T19635] tipc: Enabled bearer , priority 0 [ 1235.808122][T19634] tipc: Resetting bearer [ 1235.866885][T19634] tipc: Disabling bearer [ 1236.144618][T19637] syzkaller0: entered promiscuous mode [ 1236.150608][T19637] syzkaller0: entered allmulticast mode [ 1236.986354][T19650] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1238.660918][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1238.968457][T19641] syzkaller0: entered promiscuous mode [ 1238.974378][T19641] syzkaller0: entered allmulticast mode [ 1239.772616][T19674] loop2: detected capacity change from 0 to 7 [ 1239.782010][T19674] Dev loop2: unable to read RDB block 7 [ 1239.788606][T19674] loop2: unable to read partition table [ 1239.796609][T19674] loop2: partition table beyond EOD, truncated [ 1239.809359][T19674] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1240.038781][T19676] syzkaller0: entered promiscuous mode [ 1240.047011][T19676] syzkaller0: entered allmulticast mode [ 1243.553634][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4118'. [ 1243.585934][T19712] syzkaller0: entered promiscuous mode [ 1243.592343][T19712] syzkaller0: entered allmulticast mode [ 1243.617145][ T51] block nbd8: Receive control failed (result -1) [ 1244.599195][T19727] syzkaller0: entered promiscuous mode [ 1244.605469][T19727] syzkaller0: entered allmulticast mode [ 1247.740566][T19755] syzkaller0: entered promiscuous mode [ 1247.746833][T19755] syzkaller0: entered allmulticast mode [ 1247.909178][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4131'. [ 1247.929553][T19760] loop2: detected capacity change from 0 to 7 [ 1247.941446][T19760] Dev loop2: unable to read RDB block 7 [ 1247.947665][T19760] loop2: AHDI p2 [ 1247.961666][ T51] block nbd9: Receive control failed (result -1) [ 1247.988819][T19760] loop2: partition table partially beyond EOD, truncated [ 1248.669464][T19771] syzkaller0: entered promiscuous mode [ 1248.675583][T19771] syzkaller0: entered allmulticast mode [ 1249.789375][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.796253][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.779267][T19801] syzkaller0: entered promiscuous mode [ 1251.785249][T19801] syzkaller0: entered allmulticast mode [ 1251.941935][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4144'. [ 1252.010818][ T51] block nbd10: Receive control failed (result -1) [ 1252.315877][T19817] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1252.739396][T19821] syzkaller0: entered promiscuous mode [ 1252.755386][T19821] syzkaller0: entered allmulticast mode [ 1256.048179][T19861] syzkaller0: entered promiscuous mode [ 1256.053752][T19861] syzkaller0: entered allmulticast mode [ 1256.093434][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4155'. [ 1256.166930][ T51] block nbd11: Receive control failed (result -1) [ 1256.551058][T19872] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1257.051687][T19882] syzkaller0: entered promiscuous mode [ 1257.057260][T19882] syzkaller0: entered allmulticast mode [ 1260.949412][T19921] syzkaller0: entered promiscuous mode [ 1260.962435][T19921] syzkaller0: entered allmulticast mode [ 1260.974537][T19923] only policy match revision 0 supported [ 1260.974558][T19923] unable to load match [ 1260.996064][T19926] loop4: detected capacity change from 0 to 1024 [ 1261.024846][T19926] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 1261.024846][T19926] [ 1262.093889][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4170'. [ 1262.242370][ T51] block nbd12: Receive control failed (result -1) [ 1262.613554][T19946] syzkaller0: entered promiscuous mode [ 1262.619416][T19946] syzkaller0: entered allmulticast mode [ 1262.627682][T19947] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1266.035794][T19967] syzkaller0: entered promiscuous mode [ 1266.052288][T19967] syzkaller0: entered allmulticast mode [ 1266.062624][T19969] syzkaller0: entered promiscuous mode [ 1266.068436][T19969] syzkaller0: entered allmulticast mode [ 1266.480648][T19979] loop1: detected capacity change from 0 to 1024 [ 1266.503423][T19979] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1266.503423][T19979] [ 1267.951560][T19991] loop2: detected capacity change from 0 to 7 [ 1267.975357][T19991] Dev loop2: unable to read RDB block 7 [ 1267.981215][T19991] loop2: AHDI p2 [ 1267.993305][T19987] syzkaller0: entered promiscuous mode [ 1267.999841][T19987] syzkaller0: entered allmulticast mode [ 1268.003728][T19991] loop2: partition table partially beyond EOD, truncated [ 1268.615301][T20004] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1271.912254][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4191'. [ 1271.924964][T20024] only policy match revision 0 supported [ 1271.924981][T20024] unable to load match [ 1271.945687][T20026] syzkaller0: entered promiscuous mode [ 1271.954063][ T51] block nbd13: Receive control failed (result -1) [ 1271.964913][T20026] syzkaller0: entered allmulticast mode [ 1272.150934][T20034] loop2: detected capacity change from 0 to 1024 [ 1272.163258][T20034] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1272.163258][T20034] [ 1273.305807][T20036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.316879][T20036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.332347][T20036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.345664][T20036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.356010][T20036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.367834][T20036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.392031][T20036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.412947][T20036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.423722][T20036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.434679][T20036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.851555][T20051] syzkaller0: entered promiscuous mode [ 1273.857115][T20051] syzkaller0: entered allmulticast mode [ 1274.080228][T20060] loop2: detected capacity change from 0 to 7 [ 1274.100160][T20060] Dev loop2: unable to read RDB block 7 [ 1274.105830][T20060] loop2: AHDI p2 p3 [ 1274.121456][T20060] loop2: partition table partially beyond EOD, truncated [ 1274.132494][T20060] loop2: p3 start 335544320 is beyond EOD, truncated [ 1274.269187][T20061] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1275.855474][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1277.499101][T20096] loop2: detected capacity change from 0 to 1024 [ 1277.533822][T20096] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1277.533822][T20096] [ 1277.845946][T20103] loop1: detected capacity change from 0 to 1024 [ 1278.276271][T20103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.744084][T20103] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1278.782467][T20103] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.4210: lblock 3 mapped to illegal pblock 3 (length 1) [ 1278.801295][T20103] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1278.813831][T20103] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1278.813831][T20103] [ 1278.881017][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1279.025330][T20116] loop2: detected capacity change from 0 to 7 [ 1279.059395][T20116] Dev loop2: unable to read RDB block 7 [ 1279.075399][T20116] loop2: AHDI p2 p3 [ 1279.082058][T20116] loop2: partition table partially beyond EOD, truncated [ 1279.101430][T20116] loop2: p3 start 335544320 is beyond EOD, truncated [ 1279.160859][T20118] syzkaller0: entered promiscuous mode [ 1279.178647][T20118] syzkaller0: entered allmulticast mode [ 1279.488327][T20124] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1281.238040][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1282.450204][T20155] syzkaller0: entered promiscuous mode [ 1282.459911][T20155] syzkaller0: entered allmulticast mode [ 1283.511473][T20165] loop2: detected capacity change from 0 to 1024 [ 1283.584187][T20165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.628257][T20165] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.652819][T20165] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.4224: lblock 3 mapped to illegal pblock 3 (length 1) [ 1283.667677][T20165] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1283.680307][T20165] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1283.680307][T20165] [ 1283.718870][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1283.864735][T20172] syzkaller0: entered promiscuous mode [ 1283.870373][T20172] syzkaller0: entered allmulticast mode [ 1284.251206][T20187] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1285.936105][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1286.971077][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1286.992898][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.078480][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.099027][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.143270][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.164557][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.189142][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.205408][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.221605][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.249889][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.285708][T20207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.311949][T20207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.527649][T20223] syzkaller0: entered promiscuous mode [ 1287.555693][T20223] syzkaller0: entered allmulticast mode [ 1287.796278][T20242] syzkaller0: entered promiscuous mode [ 1287.802805][T20242] syzkaller0: entered allmulticast mode [ 1290.926763][T20279] 9pnet_virtio: no channels available for device .. [ 1290.944018][T20280] loop2: detected capacity change from 0 to 7 [ 1290.960032][T20280] Dev loop2: unable to read RDB block 7 [ 1290.976553][T20280] loop2: AHDI p2 p3 [ 1290.981163][T20280] loop2: partition table partially beyond EOD, truncated [ 1291.003400][T20280] loop2: p3 start 335544320 is beyond EOD, truncated [ 1291.131694][T20285] syzkaller0: entered promiscuous mode [ 1291.171973][T20285] syzkaller0: entered allmulticast mode [ 1291.325505][T20293] syzkaller0: entered promiscuous mode [ 1291.331108][T20293] syzkaller0: entered allmulticast mode [ 1292.843392][T20324] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1294.337664][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1294.411651][T20338] loop2: detected capacity change from 0 to 7 [ 1294.442975][T20338] Dev loop2: unable to read RDB block 7 [ 1294.460339][T20338] loop2: AHDI p2 p3 [ 1294.472913][T20338] loop2: partition table partially beyond EOD, truncated [ 1294.495749][T20338] loop2: p3 start 335544320 is beyond EOD, truncated [ 1294.690051][T20348] 9pnet_virtio: no channels available for device .. [ 1294.742346][T20344] syzkaller0: entered promiscuous mode [ 1294.747893][T20344] syzkaller0: entered allmulticast mode [ 1294.894267][T20354] syzkaller0: entered promiscuous mode [ 1294.899959][T20354] syzkaller0: entered allmulticast mode [ 1295.067172][T20350] syzkaller0: entered promiscuous mode [ 1295.093756][T20350] syzkaller0: entered allmulticast mode [ 1295.260014][T20368] loop2: detected capacity change from 0 to 7 [ 1295.293627][T20368] Dev loop2: unable to read RDB block 7 [ 1295.321501][T20368] loop2: AHDI p2 p3 [ 1295.325616][T20368] loop2: partition table partially beyond EOD, truncated [ 1295.382477][T20368] loop2: p3 start 335544320 is beyond EOD, truncated [ 1295.654099][T20376] 9pnet_virtio: no channels available for device .. [ 1295.705983][T20357] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1298.005575][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4267'. [ 1298.144967][T20390] syzkaller0: entered promiscuous mode [ 1298.177106][T20390] syzkaller0: entered allmulticast mode [ 1298.345596][T20394] syzkaller0: entered promiscuous mode [ 1298.374629][T20394] syzkaller0: entered allmulticast mode [ 1298.520792][T20398] loop2: detected capacity change from 0 to 2048 [ 1298.550409][T20398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1298.647116][T20398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.716474][ T28] audit: type=1804 audit(1777970632.943:28): pid=20398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4279" name="/newroot/455/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1298.880190][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1298.942300][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.296119][T20411] syzkaller0: entered promiscuous mode [ 1299.304680][T20411] syzkaller0: entered allmulticast mode [ 1299.905218][T20435] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1301.670620][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1302.240055][T20445] syzkaller0: entered promiscuous mode [ 1302.264199][T20445] syzkaller0: entered allmulticast mode [ 1302.385936][T20448] loop2: detected capacity change from 0 to 2048 [ 1302.398188][T20448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1302.510784][T20448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.539815][T20450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.552153][T20450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.565748][T20450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.578210][T20450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.588949][T20450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.605398][T20450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.615943][T20450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.627158][T20450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.637424][T20450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.648185][T20450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.658549][ T28] audit: type=1804 audit(1777970636.621:29): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4291" name="/newroot/458/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1302.753840][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.091662][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4294'. [ 1303.494741][T20467] syzkaller0: entered promiscuous mode [ 1303.500294][T20467] syzkaller0: entered allmulticast mode [ 1303.734871][T20475] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1305.181179][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1306.436636][T20502] syzkaller0: entered promiscuous mode [ 1306.448828][T20502] syzkaller0: entered allmulticast mode [ 1306.478199][T20504] loop2: detected capacity change from 0 to 2048 [ 1306.520642][T20504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1306.582944][T20504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.625074][ T28] audit: type=1804 audit(1777970640.346:30): pid=20504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4302" name="/newroot/461/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1306.765303][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.857535][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 1307.420891][T20534] syzkaller0: entered promiscuous mode [ 1307.427043][T20534] syzkaller0: entered allmulticast mode [ 1307.491406][T20539] program syz.4.4313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.497598][T20535] loop1: detected capacity change from 0 to 4096 [ 1307.541809][T20535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.785416][T20545] loop2: detected capacity change from 0 to 2048 [ 1307.807777][T20545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1307.922372][T20545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.974551][ T28] audit: type=1804 audit(1777970641.600:31): pid=20545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4315" name="/newroot/465/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1308.100015][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.334430][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.895473][T20582] loop2: detected capacity change from 0 to 7 [ 1309.903138][T19931] Dev loop2: unable to read RDB block 7 [ 1309.909134][T19931] loop2: unable to read partition table [ 1309.915555][T19931] loop2: partition table beyond EOD, truncated [ 1309.945836][T20582] Dev loop2: unable to read RDB block 7 [ 1309.952842][T20582] loop2: unable to read partition table [ 1309.959415][T20582] loop2: partition table beyond EOD, truncated [ 1309.985874][T20582] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1311.301557][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4317'. [ 1311.416437][T20591] loop1: detected capacity change from 0 to 2048 [ 1311.444963][T20591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1311.560536][T20591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.622349][ T28] audit: type=1804 audit(1777970645.015:32): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4324" name="/newroot/467/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 1311.693977][T20599] syzkaller0: entered promiscuous mode [ 1311.722922][T20599] syzkaller0: entered allmulticast mode [ 1311.818409][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.229640][T20613] syzkaller0: entered promiscuous mode [ 1312.277622][T20613] syzkaller0: entered allmulticast mode [ 1312.295804][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1315.032490][T20639] loop1: detected capacity change from 0 to 4096 [ 1315.099671][T20639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.125592][T20641] loop4: detected capacity change from 0 to 2048 [ 1315.156045][T20641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1315.226776][T20649] loop2: detected capacity change from 0 to 7 [ 1315.234481][T20649] Dev loop2: unable to read RDB block 7 [ 1315.242311][T20649] loop2: unable to read partition table [ 1315.262770][T20649] loop2: partition table beyond EOD, truncated [ 1315.286450][T20649] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1315.298955][T20641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.360703][ T28] audit: type=1804 audit(1777970648.506:33): pid=20641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4337" name="/newroot/430/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 1315.445435][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.453229][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.516707][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.523769][T20656] syzkaller0: entered promiscuous mode [ 1315.536070][T20656] syzkaller0: entered allmulticast mode [ 1315.765739][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4344'. [ 1315.862862][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.989581][T20669] syzkaller0: entered promiscuous mode [ 1315.995164][T20669] syzkaller0: entered allmulticast mode [ 1316.821935][T20699] program syz.0.4350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1319.064108][T20721] loop2: detected capacity change from 0 to 4096 [ 1319.127652][T20721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.178427][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1319.480961][T20741] program syz.1.4359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1319.705975][T20747] syzkaller0: entered promiscuous mode [ 1319.711542][T20747] syzkaller0: entered allmulticast mode [ 1319.902971][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.744390][T20784] program syz.2.4368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1323.926241][T20790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1323.958837][T20790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.029058][T20790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.030559][T20795] loop2: detected capacity change from 0 to 4096 [ 1324.070493][T20795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.080132][T20790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.118178][T20790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.129288][T20790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.139235][T20790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.150783][T20790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.162054][T20790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.173195][T20790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.183211][T20790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.193933][T20790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.866078][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.890252][T20812] syzkaller0: entered promiscuous mode [ 1324.896162][T20812] syzkaller0: entered allmulticast mode [ 1325.157694][T20818] program syz.4.4380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1325.341810][T20822] loop4: detected capacity change from 0 to 1024 [ 1325.372617][T20822] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1325.486732][T20822] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.4382: lblock 2 mapped to illegal pblock 2 (length 1) [ 1325.578535][T20822] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1325.590274][T20822] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.4382: lblock 0 mapped to illegal pblock 48 (length 1) [ 1325.638597][T20822] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1325.649138][T20822] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4382: Failed to acquire dquot type 0 [ 1325.686127][T20822] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1325.723318][T20822] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4382: mark_inode_dirty error [ 1325.741702][T20822] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1325.753564][T20822] EXT4-fs (loop4): 1 orphan inode deleted [ 1325.760906][T20822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.774028][ T1087] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1325.789768][ T1087] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1325.799440][T20836] loop1: detected capacity change from 0 to 4096 [ 1325.813611][ T1087] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 1325.893082][T20836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1325.958972][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.032607][T14659] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1326.059625][T20840] syzkaller0: entered promiscuous mode [ 1326.070733][T20840] syzkaller0: entered allmulticast mode [ 1326.083508][T14659] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1326.096093][T14659] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1326.382509][T20846] program syz.0.4390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1326.616193][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.175560][T20868] syzkaller0: entered promiscuous mode [ 1327.181307][T20868] syzkaller0: entered allmulticast mode [ 1327.431582][T20870] loop4: detected capacity change from 0 to 1024 [ 1327.468529][T20870] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1327.521401][T20870] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.4399: lblock 2 mapped to illegal pblock 2 (length 1) [ 1327.554464][T20870] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1327.580631][T20870] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.4399: lblock 0 mapped to illegal pblock 48 (length 1) [ 1327.625278][T20870] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1327.636999][T20876] loop2: detected capacity change from 0 to 4096 [ 1327.643707][T20870] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4399: Failed to acquire dquot type 0 [ 1327.666044][T20870] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1327.694825][T20876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.708034][T20870] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4399: mark_inode_dirty error [ 1327.725614][T20870] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1327.771434][T20870] EXT4-fs (loop4): 1 orphan inode deleted [ 1327.778646][T20870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1327.791782][ T11] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1327.844012][ T11] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1327.878395][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 1327.941194][T20881] program syz.0.4403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1327.968765][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.033131][T14659] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1328.091910][T14659] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1328.102044][T14659] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1328.294816][T20888] syzkaller0: entered promiscuous mode [ 1328.302653][T20888] syzkaller0: entered allmulticast mode [ 1328.462717][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.927094][T20909] program syz.4.4414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.184067][T20913] syzkaller0: entered promiscuous mode [ 1329.189694][T20913] syzkaller0: entered allmulticast mode [ 1329.318621][T20915] loop2: detected capacity change from 0 to 4096 [ 1329.344543][T20915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.701066][T20921] loop4: detected capacity change from 0 to 1024 [ 1329.738593][T20921] EXT4-fs: Ignoring removed nobh option [ 1329.759122][T20921] EXT4-fs: Ignoring removed bh option [ 1329.803185][T20921] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1329.905195][T20921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.021174][T20925] syzkaller0: entered promiscuous mode [ 1330.026983][T20925] syzkaller0: entered allmulticast mode [ 1330.103537][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.224535][T20931] random: crng reseeded on system resumption [ 1330.947655][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.212138][T20939] program syz.4.4424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1334.947686][T20975] loop4: detected capacity change from 0 to 4096 [ 1335.001343][T20975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.100256][T20981] program syz.2.4433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1335.679252][T20989] random: crng reseeded on system resumption [ 1336.563089][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.777178][T20996] syzkaller0: entered promiscuous mode [ 1336.786417][T20996] syzkaller0: entered allmulticast mode [ 1337.042224][T10068] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1337.253427][T10068] usb 5-1: Using ep0 maxpacket: 16 [ 1337.277660][T10068] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.288107][T10068] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.305371][T10068] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1337.317163][T10068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1337.325388][T10068] usb 5-1: SerialNumber: syz [ 1339.405065][T21004] syzkaller0: entered promiscuous mode [ 1339.410748][T21004] syzkaller0: entered allmulticast mode [ 1339.430641][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 1339.442967][T10068] usb 5-1: USB disconnect, device number 8 [ 1339.715521][T21022] program syz.2.4443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1339.923239][T21026] loop2: detected capacity change from 0 to 4096 [ 1339.979408][T21026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.404160][T21040] random: crng reseeded on system resumption [ 1341.392762][T21043] syzkaller0: entered promiscuous mode [ 1341.406852][T21043] syzkaller0: entered allmulticast mode [ 1341.439174][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.042088][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4460'. [ 1342.178466][T21067] loop2: detected capacity change from 0 to 4096 [ 1342.222650][T21067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.411688][T10055] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1342.489356][T21075] syzkaller0: entered promiscuous mode [ 1342.495058][T21075] syzkaller0: entered allmulticast mode [ 1342.615300][T10055] usb 1-1: Using ep0 maxpacket: 16 [ 1342.636980][T10055] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.657899][T10055] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.668877][T10055] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1342.677981][T10055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1342.689317][T10055] usb 1-1: SerialNumber: syz [ 1342.931696][T10067] usb 1-1: USB disconnect, device number 10 [ 1343.020497][T21084] loop4: detected capacity change from 0 to 1024 [ 1343.028910][T21084] EXT4-fs: Ignoring removed nobh option [ 1343.035152][T21084] EXT4-fs: Ignoring removed bh option [ 1343.064584][T21084] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1343.102625][T14123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.104722][T21084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1343.328831][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.572658][T21095] nbd: must specify at least one socket [ 1344.399905][T21120] loop4: detected capacity change from 0 to 1024 [ 1344.408285][T21120] EXT4-fs: Ignoring removed nobh option [ 1344.454938][T21120] EXT4-fs: Ignoring removed bh option [ 1344.515434][T21120] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1344.554735][T21120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1344.732899][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.147036][T10068] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1345.340219][T10068] usb 5-1: Using ep0 maxpacket: 16 [ 1345.348098][T10068] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.389888][T10068] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.413124][T10068] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1345.430854][T10068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1345.439807][T10068] usb 5-1: SerialNumber: syz [ 1345.591786][T21152] nbd: must specify at least one socket [ 1345.703640][T10068] usb 5-1: USB disconnect, device number 9 [ 1347.314024][T21171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4502'. [ 1348.136014][T21192] nbd: must specify at least one socket [ 1348.812252][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1349.026081][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1349.058296][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.068480][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1349.101297][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1349.126987][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1349.140879][ T9] usb 1-1: SerialNumber: syz [ 1349.386632][ T9] usb 1-1: USB disconnect, device number 11 [ 1350.748557][T21226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1350.798836][T21230] loop1: detected capacity change from 0 to 1024 [ 1350.823252][T21230] EXT4-fs: Ignoring removed nobh option [ 1350.844496][T21230] EXT4-fs: Ignoring removed bh option [ 1350.869522][T21230] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1350.909566][T21230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.142272][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.155783][T21244] syzkaller0: entered promiscuous mode [ 1351.161530][T21244] syzkaller0: entered allmulticast mode [ 1352.795188][T21271] loop1: detected capacity change from 0 to 1024 [ 1352.810309][T21271] EXT4-fs: Ignoring removed nobh option [ 1352.816062][T21271] EXT4-fs: Ignoring removed bh option [ 1352.830377][T10056] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1352.862408][T21271] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1352.918992][T21271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.974329][T21275] syzkaller0: entered promiscuous mode [ 1352.992315][T21275] syzkaller0: entered allmulticast mode [ 1353.026912][T14528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.054850][T10056] usb 5-1: Using ep0 maxpacket: 16 [ 1353.066445][T10056] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.107957][T10056] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1353.129603][T10056] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1353.157386][T10056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1353.187631][T10056] usb 5-1: SerialNumber: syz [ 1353.446404][T10056] usb 5-1: USB disconnect, device number 10 [ 1353.466214][T21290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1354.137892][T21307] syzkaller0: entered promiscuous mode [ 1354.164248][T21307] syzkaller0: entered allmulticast mode [ 1354.894629][T21335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1354.940233][T21335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1355.113074][T21340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4565'. [ 1355.254537][T21344] syzkaller0: entered promiscuous mode [ 1355.272887][T21344] syzkaller0: entered allmulticast mode [ 1356.025476][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1356.063221][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.176309][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.212351][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.241082][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.270602][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.292637][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.313916][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.334744][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.356582][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.382622][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.404506][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.577855][T21374] syzkaller0: entered promiscuous mode [ 1356.591690][T21374] syzkaller0: entered allmulticast mode [ 1357.171894][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4583'. [ 1357.481676][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.505396][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.523489][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.544302][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.556953][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.568292][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.579712][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.600124][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.621099][T21400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.643424][T21400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.882996][T21405] syzkaller0: entered promiscuous mode [ 1357.901172][T21405] syzkaller0: entered allmulticast mode [ 1358.375539][T21418] random: crng reseeded on system resumption [ 1362.164038][T21441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.180782][T21441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.198600][T21441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.209754][T21441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.220538][T21441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.231996][T21441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.242896][T21441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.254315][T21441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.264670][T21441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.276139][T21441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.360095][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4599'. [ 1363.006959][T21461] syzkaller0: entered promiscuous mode [ 1363.014060][T21461] syzkaller0: entered allmulticast mode [ 1363.084077][T21462] random: crng reseeded on system resumption [ 1364.610476][T21479] tipc: Enabled bearer , priority 10 [ 1364.716343][T21484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1365.179610][T21500] random: crng reseeded on system resumption [ 1366.344259][T21508] syzkaller0: entered promiscuous mode [ 1366.380040][T21508] syzkaller0: entered allmulticast mode [ 1366.814329][T21523] loop4: detected capacity change from 0 to 4096 [ 1366.906624][T21523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.106258][T21535] syzkaller0: entered promiscuous mode [ 1367.113036][T21535] syzkaller0: entered allmulticast mode [ 1367.123980][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1367.687147][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.157199][T21554] Invalid argument reading file caps for ./file0 [ 1368.498161][T21558] loop4: detected capacity change from 0 to 4096 [ 1368.521734][T21558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.652529][T21568] syzkaller0: entered promiscuous mode [ 1368.685829][T21568] syzkaller0: entered allmulticast mode [ 1368.907176][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1369.759643][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.679379][T21604] bridge1: entered promiscuous mode [ 1370.907471][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1371.269739][T21624] loop4: detected capacity change from 0 to 1024 [ 1371.277341][T21624] EXT4-fs: Ignoring removed orlov option [ 1371.316580][T21624] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 1371.557947][ T2178] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1371.723158][ T2178] usb 2-1: device descriptor read/64, error -71 [ 1371.998488][T21645] program syz.2.4674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1372.011907][ T2178] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1372.206108][ T2178] usb 2-1: device descriptor read/64, error -71 [ 1372.333667][ T2178] usb usb2-port1: attempt power cycle [ 1373.505552][T21674] syzkaller0: entered promiscuous mode [ 1373.517491][T21674] syzkaller0: entered allmulticast mode [ 1373.603833][ T2178] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1373.672222][ T2178] usb 2-1: device descriptor read/8, error -71 [ 1373.968645][ T2178] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1374.002754][ T2178] usb 2-1: device descriptor read/8, error -71 [ 1374.016156][T21691] IPVS: ip_vs_add_dest(): server weight less than zero [ 1374.127090][T21695] C: renamed from team_slave_0 (while UP) [ 1374.135526][T21695] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 1374.143989][T21695] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1374.151319][ T2178] usb usb2-port1: unable to enumerate USB device [ 1374.158839][T21695] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1374.751628][T21709] tipc: Enabled bearer , priority 0 [ 1374.773276][T21709] syzkaller0: entered promiscuous mode [ 1374.778833][T21709] syzkaller0: entered allmulticast mode [ 1374.844040][T21709] tipc: Resetting bearer [ 1374.874368][T21708] tipc: Resetting bearer [ 1374.982702][T21708] tipc: Disabling bearer [ 1375.116947][T21720] syzkaller0: entered promiscuous mode [ 1375.129460][T21720] syzkaller0: entered allmulticast mode [ 1375.362709][T21724] loop4: detected capacity change from 0 to 4096 [ 1375.395446][T21724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1376.400126][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.687986][T21752] syzkaller0: entered promiscuous mode [ 1376.713809][T21752] syzkaller0: entered allmulticast mode [ 1377.199513][T21771] netlink: 436 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1377.209568][T21771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1377.336540][T21769] loop4: detected capacity change from 0 to 4096 [ 1377.356314][T21769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.808654][T21790] syzkaller0: entered promiscuous mode [ 1377.814626][T21790] syzkaller0: entered allmulticast mode [ 1378.114824][T21801] syz_tun: entered allmulticast mode [ 1378.126158][T14659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.614677][T21821] program syz.0.4754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.258779][T21845] program syz.1.4765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.795933][T21869] program syz.2.4776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.982019][T21871] loop4: detected capacity change from 0 to 256 [ 1380.282609][T10052] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1380.454846][T10052] usb 3-1: device descriptor read/64, error -71 [ 1380.752872][T10052] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1380.947606][T10052] usb 3-1: device descriptor read/64, error -71 [ 1381.122647][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1381.135062][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1381.728411][T10052] usb usb3-port1: attempt power cycle [ 1381.844701][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 1381.965225][T21905] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4791'. [ 1382.181257][T10052] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1382.250918][T10052] usb 3-1: device descriptor read/8, error -71 [ 1382.569473][T10052] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1382.609198][T10052] usb 3-1: device descriptor read/8, error -71 [ 1382.745292][T10052] usb usb3-port1: unable to enumerate USB device [ 1383.077575][T21918] SET target dimension over the limit! [ 1385.617800][T21932] program syz.0.4801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.635531][T21933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1386.682288][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4802'. [ 1386.953536][T10066] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1387.132809][T10066] usb 1-1: device descriptor read/64, error -71 [ 1387.342071][T21961] syzkaller0: entered promiscuous mode [ 1387.367660][T21961] syzkaller0: entered allmulticast mode [ 1387.421010][T10066] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1387.423371][T21963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1387.602676][T10066] usb 1-1: device descriptor read/64, error -71 [ 1387.731245][T10066] usb usb1-port1: attempt power cycle [ 1387.824961][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1388.191926][T10066] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1388.242230][T10066] usb 1-1: device descriptor read/8, error -71 [ 1388.532986][T10066] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1388.603088][T10066] usb 1-1: device descriptor read/8, error -71 [ 1388.738119][T10066] usb usb1-port1: unable to enumerate USB device [ 1388.833840][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1389.165163][T21992] syzkaller0: entered promiscuous mode [ 1389.182492][T21992] syzkaller0: entered allmulticast mode [ 1391.304347][T22003] syzkaller0: entered promiscuous mode [ 1391.309885][T22003] syzkaller0: entered allmulticast mode [ 1391.976484][T22011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4831'. [ 1393.174157][T22025] syzkaller0: entered promiscuous mode [ 1393.179850][T22025] syzkaller0: entered allmulticast mode [ 1393.712108][T22033] program syz.2.4837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1394.034705][T22037] netlink: 'syz.2.4839': attribute type 39 has an invalid length. [ 1394.252943][T22039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4840'. [ 1395.010603][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4849'. [ 1395.400217][T22074] loop4: detected capacity change from 0 to 128 [ 1395.456327][T22074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1395.474354][T22074] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.681691][T22085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4861'. [ 1395.727936][T14659] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1397.189937][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1397.545887][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1397.557762][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1397.566074][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1397.574932][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1397.583036][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1397.591239][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1398.340626][T22117] chnl_net:caif_netlink_parms(): no params data found [ 1398.583889][T22117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.623915][T22117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.653094][T22117] bridge_slave_0: entered allmulticast mode [ 1398.674983][T22117] bridge_slave_0: entered promiscuous mode [ 1398.698025][T22117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.714945][T22117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.722785][T22117] bridge_slave_1: entered allmulticast mode [ 1398.730771][T22117] bridge_slave_1: entered promiscuous mode [ 1398.790179][T22117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.804405][T22117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.861228][T22117] team0: Port device team_slave_0 added [ 1398.873741][T22117] team0: Port device team_slave_1 added [ 1398.930424][T22117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.968646][T22117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.031138][T22117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.055196][T22117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.081499][T22117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.109834][T22117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.267061][T22117] hsr_slave_0: entered promiscuous mode [ 1399.274667][T22117] hsr_slave_1: entered promiscuous mode [ 1399.281181][T22117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1399.289267][T22117] Cannot create hsr debugfs directory [ 1399.559403][T22146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4881'. [ 1399.806187][ T5777] Bluetooth: hci4: command tx timeout [ 1400.363342][T22117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.425549][T22152] SET target dimension over the limit! [ 1400.448241][T22154] tipc: Enabling of bearer rejected, failed to enable media [ 1400.601048][T22117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.792979][T22117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.999915][T22117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.167830][T22164] syzkaller0: entered promiscuous mode [ 1401.173512][T22164] syzkaller0: entered allmulticast mode [ 1402.040444][ T5777] Bluetooth: hci4: command tx timeout [ 1402.646839][T22193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1404.259777][ T5777] Bluetooth: hci4: command tx timeout [ 1404.683809][T22117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1404.719940][T22117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1404.747747][T22117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1404.768768][T22117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1405.090288][T22117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.143787][T22117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.220567][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.227802][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.280602][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.287852][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.358179][T22117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1405.383104][T22117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.450259][T22219] syzkaller0: entered promiscuous mode [ 1405.457585][T22219] syzkaller0: entered allmulticast mode [ 1405.492758][T22222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1405.839895][T22117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.967939][T22117] veth0_vlan: entered promiscuous mode [ 1405.999235][T22117] veth1_vlan: entered promiscuous mode [ 1406.068159][T22117] veth0_macvtap: entered promiscuous mode [ 1406.081546][T22117] veth1_macvtap: entered promiscuous mode [ 1406.131475][T22117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.147505][T22117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.161934][T22117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.367622][T22117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.395033][T22117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.414377][T22117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.428631][T22117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.447714][T22117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.462957][T22117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.484691][ T5777] Bluetooth: hci4: command tx timeout [ 1406.492519][T22117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.525326][T22117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.535348][T22117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.545956][T22117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.557444][T22117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.569792][T22117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.579098][T22117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.587959][T22117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.608767][T22117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.636665][T22229] syzkaller0: entered promiscuous mode [ 1406.642228][T22229] syzkaller0: entered allmulticast mode [ 1406.849311][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.857203][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.935181][ T7011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.943277][ T7011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.120065][T22245] syzkaller0: entered promiscuous mode [ 1407.125629][T22245] syzkaller0: entered allmulticast mode [ 1408.095347][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1408.118219][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1408.136372][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1408.166033][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1408.193197][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1408.209377][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1409.322506][T22263] chnl_net:caif_netlink_parms(): no params data found [ 1409.568363][T22263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.578279][T22263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.586632][T22263] bridge_slave_0: entered allmulticast mode [ 1409.594621][T22263] bridge_slave_0: entered promiscuous mode [ 1409.616594][T22263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.623819][T22263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.643982][T22263] bridge_slave_1: entered allmulticast mode [ 1409.652218][T22263] bridge_slave_1: entered promiscuous mode [ 1409.721144][T22263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.755976][T22263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.866241][T22263] team0: Port device team_slave_0 added [ 1409.891061][T22263] team0: Port device team_slave_1 added [ 1410.406826][ T5777] Bluetooth: hci0: command tx timeout [ 1410.552520][T22263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.581718][T22263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.651682][T22263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.683903][T22263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.715171][T22263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.753195][T22263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.871104][T22263] hsr_slave_0: entered promiscuous mode [ 1410.898233][T22263] hsr_slave_1: entered promiscuous mode [ 1410.905304][T22263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1410.928160][T22263] Cannot create hsr debugfs directory [ 1411.156955][T22315] random: crng reseeded on system resumption [ 1412.291240][T22263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.493562][T22263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.629865][ T5777] Bluetooth: hci0: command tx timeout [ 1412.678699][T22263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.444858][T22263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.092627][T22356] random: crng reseeded on system resumption [ 1414.852234][ T5777] Bluetooth: hci0: command tx timeout [ 1414.915359][T22263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1414.998859][T22263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1415.099309][T22263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1415.143443][T22263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1415.453893][T22263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.542493][T22263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.576128][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.583419][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.637807][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.645067][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.139287][T22263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.245409][T22263] veth0_vlan: entered promiscuous mode [ 1416.274643][T22263] veth1_vlan: entered promiscuous mode [ 1416.368361][T22263] veth0_macvtap: entered promiscuous mode [ 1416.397112][T22263] veth1_macvtap: entered promiscuous mode [ 1416.427175][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.438196][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.448761][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.460557][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.475106][T22263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.493740][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.513192][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.527885][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.538749][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.548943][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.619373][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.641343][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.675407][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.696971][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.714624][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.732082][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.753966][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.812521][T22263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.988061][T22263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.059593][T22263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.068591][T22263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.079152][ T5777] Bluetooth: hci0: command tx timeout [ 1417.095590][T22263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.163275][T22396] syzkaller0: entered promiscuous mode [ 1417.168966][T22396] syzkaller0: entered allmulticast mode [ 1419.962910][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.004350][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.079676][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.100032][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.457188][T22454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1421.480500][T22454] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1421.507355][T22454] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1421.519598][T22454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1421.537558][T22454] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1421.545857][T22454] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1421.627735][T22456] tipc: Enabled bearer , priority 0 [ 1421.671330][T22456] syzkaller0: entered promiscuous mode [ 1421.676870][T22456] syzkaller0: entered allmulticast mode [ 1421.772908][T22456] tipc: Resetting bearer [ 1421.851614][T22455] tipc: Resetting bearer [ 1421.997845][T22455] tipc: Disabling bearer [ 1422.080092][T22465] xt_hashlimit: size too large, truncated to 1048576 [ 1422.206325][T21518] syz_tun (unregistering): left allmulticast mode [ 1422.565855][T22452] chnl_net:caif_netlink_parms(): no params data found [ 1422.787076][T22452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.813421][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.860638][T22452] bridge_slave_0: entered allmulticast mode [ 1422.901942][T22452] bridge_slave_0: entered promiscuous mode [ 1422.931367][T22452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.962322][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.970296][T22452] bridge_slave_1: entered allmulticast mode [ 1423.000783][T22452] bridge_slave_1: entered promiscuous mode [ 1423.102201][T22452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.127778][T22452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.211922][T22452] team0: Port device team_slave_0 added [ 1423.245023][T22452] team0: Port device team_slave_1 added [ 1423.321766][T22452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.340171][T22452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.425825][T22452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.439052][T22452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.457395][T22452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.506701][T22452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.663446][T22452] hsr_slave_0: entered promiscuous mode [ 1423.732162][T22452] hsr_slave_1: entered promiscuous mode [ 1423.740293][T22452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1423.755148][ T5777] Bluetooth: hci3: command tx timeout [ 1423.759776][T22452] Cannot create hsr debugfs directory [ 1424.330811][T22452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.966483][ T5777] Bluetooth: hci3: command tx timeout [ 1426.379914][T22452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.587951][T22513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1426.688070][T22452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.719404][ T5777] block nbd14: Receive control failed (result -1) [ 1426.772999][T22516] syzkaller0: entered promiscuous mode [ 1426.779446][T22516] syzkaller0: entered allmulticast mode [ 1426.914735][T22452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.389997][T22534] tipc: Started in network mode [ 1427.394959][T22534] tipc: Node identity dac04c2fe63, cluster identity 4711 [ 1427.419152][T22534] tipc: Enabled bearer , priority 0 [ 1427.428619][T22452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1427.454092][T22452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1427.486394][T22537] syzkaller0: entered promiscuous mode [ 1427.502932][T22537] syzkaller0: entered allmulticast mode [ 1427.579662][T22452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1427.614768][T22452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1427.687705][T22545] tipc: Resetting bearer [ 1427.736505][T22533] tipc: Resetting bearer [ 1427.813538][T22533] tipc: Disabling bearer [ 1428.194367][ T5777] Bluetooth: hci3: command tx timeout [ 1428.831086][T22452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.939091][T22452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.081052][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.088333][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.180329][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.187571][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.288373][T22561] syzkaller0: entered promiscuous mode [ 1429.316677][T22561] syzkaller0: entered allmulticast mode [ 1429.382162][T22564] tipc: Enabled bearer , priority 0 [ 1429.458987][T22560] tipc: Resetting bearer [ 1429.594636][T22560] tipc: Disabling bearer [ 1430.160782][T22573] Invalid argument reading file caps for ./file0 [ 1430.277233][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4998'. [ 1430.313745][T22452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.336716][ T5777] block nbd15: Receive control failed (result -1) [ 1430.411537][ T5777] Bluetooth: hci3: command tx timeout [ 1430.515784][T22580] tipc: Started in network mode [ 1430.534839][T22580] tipc: Node identity 265dfa761d14, cluster identity 4711 [ 1430.571365][T22580] tipc: Enabled bearer , priority 0 [ 1430.590715][T22452] veth0_vlan: entered promiscuous mode [ 1430.733532][T22583] tipc: Resetting bearer [ 1430.764217][T22580] syzkaller0: entered promiscuous mode [ 1430.782054][T22580] syzkaller0: entered allmulticast mode [ 1430.809733][T22579] tipc: Resetting bearer [ 1430.864410][T22579] tipc: Disabling bearer [ 1431.202548][T22452] veth1_vlan: entered promiscuous mode [ 1431.331967][T22592] syzkaller0: entered promiscuous mode [ 1431.400778][T22592] syzkaller0: entered allmulticast mode [ 1431.936310][T22452] veth0_macvtap: entered promiscuous mode [ 1431.983296][T22452] veth1_macvtap: entered promiscuous mode [ 1432.100854][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.177015][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.216673][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.484011][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.504803][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.804508][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.827453][T22452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.145849][T22607] Cannot find del_set index 0 as target [ 1433.443967][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.509723][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.555612][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.822693][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.845548][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.856401][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.866756][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.887709][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.898756][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.909494][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.681036][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.725343][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.765393][T22452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.802263][T22452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.841793][T22452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.874347][T22615] Bluetooth: MGMT ver 1.22 [ 1434.890940][T22452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.909787][T22452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.918559][T22452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.929399][T22452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.319985][T13890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.379616][T13890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.559979][T13890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.582237][T13890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.795415][T22623] syzkaller0: entered promiscuous mode [ 1435.818556][T22623] syzkaller0: entered allmulticast mode [ 1438.307207][T22653] Invalid argument reading file caps for ./file0 [ 1438.582925][T22454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1438.624598][T22454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1438.636135][T22454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1438.647767][T22454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1438.656847][T22454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1438.666235][T22454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1440.651832][T22659] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1440.926328][ T5777] Bluetooth: hci1: command tx timeout [ 1441.035949][T22662] chnl_net:caif_netlink_parms(): no params data found [ 1441.350268][T22662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.359179][T22662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.367705][T22662] bridge_slave_0: entered allmulticast mode [ 1441.375628][T22662] bridge_slave_0: entered promiscuous mode [ 1441.384675][T22662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.392417][T22662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.400249][T22662] bridge_slave_1: entered allmulticast mode [ 1441.408904][T22662] bridge_slave_1: entered promiscuous mode [ 1441.442264][T22662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.455833][T22662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.539875][T22662] team0: Port device team_slave_0 added [ 1441.668007][T22662] team0: Port device team_slave_1 added [ 1441.704570][T22692] Invalid argument reading file caps for ./file0 [ 1441.766722][T22662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.782033][T22662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.808976][T22662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.822521][T22662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.845223][T22662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.874874][T22662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.048916][T22662] hsr_slave_0: entered promiscuous mode [ 1442.080589][T22662] hsr_slave_1: entered promiscuous mode [ 1442.087161][T22662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.095876][T22662] Cannot create hsr debugfs directory [ 1442.141783][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 1442.199760][ T5777] block nbd16: Receive control failed (result -1) [ 1442.402378][T22708] tipc: Enabled bearer , priority 0 [ 1442.420738][T22708] syzkaller0: entered promiscuous mode [ 1442.439787][T22708] syzkaller0: entered allmulticast mode [ 1442.489598][T22708] tipc: Resetting bearer [ 1442.536368][T22707] tipc: Resetting bearer [ 1442.626095][T22707] tipc: Disabling bearer [ 1442.930725][T22662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.978292][T22662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.159364][ T5777] Bluetooth: hci1: command tx timeout [ 1443.218883][T22715] syzkaller0: entered promiscuous mode [ 1443.245189][T22715] syzkaller0: entered allmulticast mode [ 1443.346891][T22662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.365973][T22662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.597610][T10052] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1443.811344][T10052] usb 1-1: Using ep0 maxpacket: 16 [ 1443.827541][T10052] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.838543][T10052] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1443.877274][T10052] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1443.886788][T10052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1443.894837][T10052] usb 1-1: SerialNumber: syz [ 1445.375652][ T5777] Bluetooth: hci1: command tx timeout [ 1445.999004][T22662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.011449][T22662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.042909][T22731] gretap0: entered promiscuous mode [ 1446.067583][T22239] usb 1-1: USB disconnect, device number 16 [ 1446.186643][T22662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.203631][T22662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.550106][T22741] Cannot find del_set index 0 as target [ 1446.746297][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1446.753724][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1447.600788][T22662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1447.668937][ T5777] Bluetooth: hci1: command tx timeout [ 1447.690989][T22745] tipc: Started in network mode [ 1447.695943][T22745] tipc: Node identity 660ad9deeb21, cluster identity 4711 [ 1447.723508][T22745] tipc: Enabled bearer , priority 0 [ 1447.747090][T22746] syzkaller0: entered promiscuous mode [ 1447.752736][T22746] syzkaller0: entered allmulticast mode [ 1447.797329][T22662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1447.837476][T22745] tipc: Resetting bearer [ 1447.868748][T22662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1447.927815][T22662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1447.990794][T22744] tipc: Resetting bearer [ 1448.269219][T22744] tipc: Disabling bearer [ 1448.375104][T22662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.395712][T22662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.482662][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.489899][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.597231][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.604511][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.787646][T22758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1449.120497][T22662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.670018][T22662] veth0_vlan: entered promiscuous mode [ 1449.742566][T10055] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1449.755444][T22662] veth1_vlan: entered promiscuous mode [ 1449.806848][T22662] veth0_macvtap: entered promiscuous mode [ 1449.819462][T22662] veth1_macvtap: entered promiscuous mode [ 1449.865805][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.879631][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.897138][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.908395][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.918442][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.929110][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.959784][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.970539][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.977931][T10055] usb 3-1: Using ep0 maxpacket: 16 [ 1449.990451][T10055] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.990468][T22662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.020583][T10055] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1450.022208][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.046089][T10055] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1450.058145][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.059828][T10055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1450.083355][T10055] usb 3-1: SerialNumber: syz [ 1450.088312][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.115566][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.142741][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.160502][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.180396][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.229918][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.240623][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.257480][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.269244][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.280764][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.291447][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.302731][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.314441][T22662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.325454][T22662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.349929][T22662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.375237][T22778] gretap0: entered promiscuous mode [ 1450.387041][T10067] usb 3-1: USB disconnect, device number 15 [ 1450.433071][T22662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.442520][T22662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.465804][T22662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.487270][T22662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.546112][T22792] tipc: Enabled bearer , priority 0 [ 1450.576364][T22792] syzkaller0: entered promiscuous mode [ 1450.581903][T22792] syzkaller0: entered allmulticast mode [ 1450.657973][T22792] tipc: Resetting bearer [ 1450.692629][T22791] tipc: Resetting bearer [ 1450.729596][T22791] tipc: Disabling bearer [ 1450.758559][T13890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.766470][T13890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.840470][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.865074][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.312498][T22809] loop2: detected capacity change from 0 to 4096 [ 1452.324672][T22809] EXT4-fs: Ignoring removed bh option [ 1452.569908][T22809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.220353][T22809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.944295][T22822] tipc: Started in network mode [ 1453.967096][T22822] tipc: Node identity 8ad3cab58a09, cluster identity 4711 [ 1454.012212][T22822] tipc: Enabled bearer , priority 0 [ 1454.055740][T22827] syzkaller0: entered promiscuous mode [ 1454.097771][T22827] syzkaller0: entered allmulticast mode [ 1454.134667][T22822] tipc: Resetting bearer [ 1454.177626][T22821] tipc: Resetting bearer [ 1454.198027][T10055] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1454.244001][T22821] tipc: Disabling bearer [ 1454.412151][T10055] usb 2-1: Using ep0 maxpacket: 16 [ 1454.419770][T10055] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.445433][T10055] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1454.474316][T10055] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1454.493799][T10055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1454.525125][T10055] usb 2-1: SerialNumber: syz [ 1454.699982][T22839] random: crng reseeded on system resumption [ 1455.016136][T22824] gretap0: entered promiscuous mode [ 1455.058106][T10066] usb 2-1: USB disconnect, device number 16 [ 1456.009099][T22868] random: crng reseeded on system resumption [ 1457.017864][T22890] random: crng reseeded on system resumption [ 1457.234595][T22239] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1457.489997][T22239] usb 2-1: Using ep0 maxpacket: 16 [ 1457.518199][T22239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.542626][T22239] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1457.585911][T22239] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1457.595034][T22239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1457.618501][T22239] usb 2-1: SerialNumber: syz [ 1457.866724][T22239] usb 2-1: USB disconnect, device number 17 [ 1458.703344][T22852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1458.767315][T22918] random: crng reseeded on system resumption [ 1459.052370][T22931] tipc: Enabling of bearer rejected, failed to enable media [ 1460.053998][T22239] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1460.257083][T22239] usb 3-1: Using ep0 maxpacket: 16 [ 1460.270016][T22239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.293501][T22239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1460.318935][T22239] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1460.339417][T22239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1460.351773][T22239] usb 3-1: SerialNumber: syz [ 1460.388950][T22950] syzkaller0: entered promiscuous mode [ 1460.394584][T22950] syzkaller0: entered allmulticast mode [ 1463.506945][T10055] usb 3-1: USB disconnect, device number 16 [ 1463.687503][T22980] program syz.2.5131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.577658][T23001] random: crng reseeded on system resumption [ 1465.431062][T23025] program syz.1.5144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.946389][T23036] syzkaller0: entered promiscuous mode [ 1465.955066][T23036] syzkaller0: entered allmulticast mode [ 1465.990984][T23036] tipc: Enabled bearer , priority 0 [ 1466.003282][T23035] tipc: Resetting bearer [ 1466.149116][T23035] tipc: Disabling bearer [ 1466.306646][T23047] program syz.1.5153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.814307][T23060] Cannot find del_set index 0 as target [ 1468.309378][T23074] syzkaller0: entered promiscuous mode [ 1468.329629][T23074] syzkaller0: entered allmulticast mode [ 1468.559716][T23079] random: crng reseeded on system resumption [ 1471.362096][T23117] syzkaller0: entered promiscuous mode [ 1471.367750][T23117] syzkaller0: entered allmulticast mode [ 1471.958398][T23128] Cannot find del_set index 0 as target [ 1473.177663][T23133] loop1: detected capacity change from 0 to 4096 [ 1473.186216][T23133] EXT4-fs: Ignoring removed bh option [ 1473.228042][T23133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1473.385111][T23133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.338254][T23154] random: crng reseeded on system resumption [ 1476.553379][T23168] tipc: Enabled bearer , priority 0 [ 1476.690613][T23167] tipc: Disabling bearer [ 1476.714067][T23170] loop1: detected capacity change from 0 to 1024 [ 1476.801291][T23170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.884600][T23170] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.505763][T22117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1478.294873][T23197] random: crng reseeded on system resumption [ 1482.407541][T23274] random: crng reseeded on system resumption [ 1482.762031][T10068] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1482.975394][T10068] usb 2-1: Using ep0 maxpacket: 16 [ 1482.999520][T10068] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.026473][T10068] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1483.055022][T10068] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1483.083810][T10068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1483.108373][T10068] usb 2-1: SerialNumber: syz [ 1483.355595][T10055] usb 2-1: USB disconnect, device number 18 [ 1484.491206][T23314] Cannot find del_set index 0 as target [ 1486.386849][T10055] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1486.602231][T10055] usb 1-1: Using ep0 maxpacket: 16 [ 1486.610204][T10055] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.620644][T10055] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1486.631295][T10055] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1486.662050][T10055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1486.670718][T10055] usb 1-1: SerialNumber: syz [ 1486.812365][T23338] random: crng reseeded on system resumption [ 1486.940292][T10055] usb 1-1: USB disconnect, device number 17 [ 1490.263513][T10052] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1490.477168][T10052] usb 5-1: Using ep0 maxpacket: 16 [ 1490.485007][T10052] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.495651][T10052] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1490.513428][T10052] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1490.540532][T10052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1490.573483][T10052] usb 5-1: SerialNumber: syz [ 1490.829416][T10052] usb 5-1: USB disconnect, device number 11 [ 1491.261326][T23396] random: crng reseeded on system resumption [ 1492.913534][T10055] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1493.148842][T10055] usb 2-1: Using ep0 maxpacket: 16 [ 1493.193363][T10055] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.207914][T10055] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1493.220141][T10055] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1493.229660][T10055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1493.238094][T10055] usb 2-1: SerialNumber: syz [ 1493.499059][T10055] usb 2-1: USB disconnect, device number 19 [ 1493.514005][T23434] random: crng reseeded on system resumption [ 1494.238196][T23441] loop4: detected capacity change from 0 to 8192 [ 1494.291255][T23441] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1494.803758][T13890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.000902][T13890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.194049][T13890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.417776][T13890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.553112][ T8948] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1495.755209][ T8948] usb 3-1: Using ep0 maxpacket: 16 [ 1495.769721][ T8948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.820827][ T8948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1495.842217][T13890] tipc: Left network mode [ 1495.856469][ T8948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1495.881152][T22454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1495.899423][ T8948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1495.911636][T22454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1495.921352][T22454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1495.933043][T22454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1495.944144][T22454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1495.951849][ T8948] usb 3-1: SerialNumber: syz [ 1495.956798][T22454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1496.266348][ T8948] usb 3-1: USB disconnect, device number 17 [ 1496.603338][T23477] chnl_net:caif_netlink_parms(): no params data found [ 1497.081462][T23477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.100964][T23477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.134596][T23477] bridge_slave_0: entered allmulticast mode [ 1497.178325][T23477] bridge_slave_0: entered promiscuous mode [ 1497.228896][T23477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.269694][T23477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.295334][T23477] bridge_slave_1: entered allmulticast mode [ 1497.329147][T23477] bridge_slave_1: entered promiscuous mode [ 1497.937956][T23477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.986602][T23477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.174716][T13890] hsr_slave_0: left promiscuous mode [ 1498.214202][ T5777] Bluetooth: hci1: command tx timeout [ 1498.226595][T13890] hsr_slave_1: left promiscuous mode [ 1498.252424][T13890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.265915][T13890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.318897][T13890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.346598][T13890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.378728][T13890] bridge_slave_1: left allmulticast mode [ 1498.384457][T13890] bridge_slave_1: left promiscuous mode [ 1498.410933][T13890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.477145][T13890] bridge_slave_0: left allmulticast mode [ 1498.497381][T13890] bridge_slave_0: left promiscuous mode [ 1498.516728][T13890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.575233][T13890] veth1_macvtap: left promiscuous mode [ 1498.586061][T13890] veth0_macvtap: left promiscuous mode [ 1498.596321][T13890] veth1_vlan: left promiscuous mode [ 1498.606070][T13890] veth0_vlan: left promiscuous mode [ 1498.802329][T10052] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1499.015616][T10052] usb 3-1: Using ep0 maxpacket: 16 [ 1499.022968][T10052] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.041303][T10052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.066303][T10052] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1499.075689][T10052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1499.089922][T10052] usb 3-1: SerialNumber: syz [ 1499.340807][T10055] usb 3-1: USB disconnect, device number 18 [ 1499.676500][T13890] team0 (unregistering): Port device team_slave_1 removed [ 1499.763298][T13890] team0 (unregistering): Port device team_slave_0 removed [ 1499.855057][T13890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.930358][T13890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.426149][ T5777] Bluetooth: hci1: command tx timeout [ 1500.505006][T13890] bond0 (unregistering): Released all slaves [ 1500.726990][T23477] team0: Port device team_slave_0 added [ 1500.788421][T23477] team0: Port device team_slave_1 added [ 1500.947596][T23477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.973932][T23477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.073284][T23477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.393454][T23477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.551459][T23477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.694651][T23477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.706010][ T5777] Bluetooth: hci1: command tx timeout [ 1503.141572][T23477] hsr_slave_0: entered promiscuous mode [ 1503.151541][T23477] hsr_slave_1: entered promiscuous mode [ 1503.166397][T23477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1503.695759][T23477] Cannot create hsr debugfs directory [ 1504.208685][T10066] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1504.354942][T23477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1504.391743][T23477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1504.407678][T23477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1504.424018][T10066] usb 2-1: Using ep0 maxpacket: 16 [ 1504.431249][T10066] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.456724][T23477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1504.463570][T10066] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.486735][T10066] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1504.503147][T10066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1504.533826][T10066] usb 2-1: SerialNumber: syz [ 1504.758256][T23477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.805358][T23477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.824938][ T8948] usb 2-1: USB disconnect, device number 20 [ 1504.877998][ T5777] Bluetooth: hci1: command tx timeout [ 1505.380302][T23565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.387664][T23565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.688297][T23565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.695533][T23565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.582777][T23477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.626991][T23477] veth0_vlan: entered promiscuous mode [ 1507.678293][T23477] veth1_vlan: entered promiscuous mode [ 1507.738613][T23477] veth0_macvtap: entered promiscuous mode [ 1507.770607][T23477] veth1_macvtap: entered promiscuous mode [ 1507.830385][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.854868][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.870775][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.892706][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.924562][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.946213][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.959651][T10055] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1507.976520][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.997464][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.025213][T23477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.083227][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.106747][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.124070][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.134956][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.144851][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.155614][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.165903][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.176486][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.186422][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.198055][T10055] usb 1-1: Using ep0 maxpacket: 16 [ 1508.216767][T10055] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.219963][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.237195][T10055] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.246554][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.259005][T10055] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1508.268173][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.278749][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.290394][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.294781][T10055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1508.316537][T23477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.321038][T10055] usb 1-1: SerialNumber: syz [ 1508.341827][T23477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.386171][T23477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.457338][T23477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.477470][T23477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.497252][T23477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.516891][T23477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.585838][T10055] usb 1-1: USB disconnect, device number 18 [ 1509.299894][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.336011][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.576919][T23668] syzkaller0: entered promiscuous mode [ 1509.582553][T23668] syzkaller0: entered allmulticast mode [ 1512.409066][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1512.425901][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1512.655702][T11631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.669162][T11631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.603219][T23722] random: crng reseeded on system resumption [ 1514.467253][T10068] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1514.600934][T23740] syzkaller0: entered promiscuous mode [ 1514.622222][T23740] syzkaller0: entered allmulticast mode [ 1514.653945][T23744] syzkaller0: entered promiscuous mode [ 1514.661278][T23744] syzkaller0: entered allmulticast mode [ 1514.702506][T10068] usb 1-1: Using ep0 maxpacket: 16 [ 1514.715202][T10068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.743534][T10068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1514.754613][T10068] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1514.765098][T10068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1514.773696][T10068] usb 1-1: SerialNumber: syz [ 1515.040070][T10068] usb 1-1: USB disconnect, device number 19 [ 1516.376823][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1516.446511][T23785] bond0: entered promiscuous mode [ 1516.451643][T23785] bond_slave_0: entered promiscuous mode [ 1516.519518][T23785] bond_slave_1: entered promiscuous mode [ 1516.609970][T23785] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1516.617775][T23785] Cannot create hsr debugfs directory [ 1516.641048][T23785] hsr1: entered promiscuous mode [ 1516.709009][T23796] syzkaller0: entered promiscuous mode [ 1516.735809][T23796] syzkaller0: entered allmulticast mode [ 1517.133058][T23812] random: crng reseeded on system resumption [ 1517.756412][T23829] Cannot find del_set index 0 as target [ 1519.597307][T10057] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1519.833184][T10057] usb 6-1: Using ep0 maxpacket: 16 [ 1519.856721][T10057] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.899871][T10057] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1519.940575][T10057] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1519.970930][T10057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1519.982186][T10057] usb 6-1: SerialNumber: syz [ 1520.124348][T23849] tipc: Enabling of bearer rejected, failed to enable media [ 1520.249717][T10057] usb 6-1: USB disconnect, device number 2 [ 1520.266155][T23851] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1520.534927][T23859] loop2: detected capacity change from 0 to 128 [ 1520.570825][T23859] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1520.585267][T23859] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.726595][T23862] BUG: unable to handle page fault for address: ffffffffffffffec [ 1520.734397][T23862] #PF: supervisor read access in kernel mode [ 1520.740409][T23862] #PF: error_code(0x0000) - not-present page [ 1520.746438][T23862] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 1520.752498][T23862] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1520.757742][T23862] CPU: 0 PID: 23862 Comm: syz.2.5373 Not tainted syzkaller #0 [ 1520.765241][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1520.775332][T23862] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 1520.781150][T23862] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 1520.800801][T23862] RSP: 0018:ffffc90004cef6f8 EFLAGS: 00010246 [ 1520.806917][T23862] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 1520.814923][T23862] RDX: ffffc9001368d000 RSI: 0000000000002ad1 RDI: ffffffffffffffec [ 1520.822923][T23862] RBP: ffffc90004cef810 R08: ffff8880512d5c1f R09: 1ffff1100a25ab83 [ 1520.830943][T23862] R10: dffffc0000000000 R11: ffffed100a25ab84 R12: ffff8880512d5cb0 [ 1520.838960][T23862] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 1520.846965][T23862] FS: 00007fa506f7f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1520.855964][T23862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1520.862580][T23862] CR2: ffffffffffffffec CR3: 0000000064d6e000 CR4: 00000000003506f0 [ 1520.870597][T23862] Call Trace: [ 1520.873915][T23862] [ 1520.876884][T23862] finish_range+0x234/0x340 [ 1520.881437][T23862] ? update_tind_extent_range+0x3f0/0x3f0 [ 1520.887208][T23862] ext4_ext_migrate+0xa3f/0x1080 [ 1520.892199][T23862] ? mb_regenerate_buddy+0x510/0x510 [ 1520.897531][T23862] ? down_read_killable+0x340/0x340 [ 1520.902778][T23862] ? sb_start_write+0x110/0x1c0 [ 1520.907673][T23862] ? mnt_want_write_file+0x16a/0x200 [ 1520.913012][T23862] ext4_ioctl+0x1ee3/0x3b80 [ 1520.917565][T23862] ? ext4_fileattr_set+0x16d0/0x16d0 [ 1520.922933][T23862] ? mark_lock+0x94/0x320 [ 1520.927304][T23862] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1520.933340][T23862] ? do_vfs_ioctl+0x1573/0x1cc0 [ 1520.938235][T23862] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 1520.943927][T23862] ? tomoyo_path_number_perm+0x217/0x620 [ 1520.949621][T23862] ? __lock_acquire+0x7d40/0x7d40 [ 1520.954690][T23862] ? slab_free_freelist_hook+0x130/0x1a0 [ 1520.960360][T23862] ? tomoyo_path_number_perm+0x500/0x620 [ 1520.966039][T23862] ? __kmem_cache_free+0xba/0x1e0 [ 1520.971127][T23862] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1520.976819][T23862] ? tomoyo_path_number_perm+0x217/0x620 [ 1520.982510][T23862] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1520.988036][T23862] ? __fget_files+0x28/0x4b0 [ 1520.992667][T23862] ? __fget_files+0x28/0x4b0 [ 1520.997319][T23862] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1521.002295][T23862] ? security_file_ioctl+0x80/0xa0 [ 1521.007459][T23862] ? ext4_fileattr_set+0x16d0/0x16d0 [ 1521.012784][T23862] __se_sys_ioctl+0xfd/0x170 [ 1521.017427][T23862] do_syscall_64+0x55/0xa0 [ 1521.021904][T23862] ? clear_bhb_loop+0x40/0x90 [ 1521.026640][T23862] ? clear_bhb_loop+0x40/0x90 [ 1521.031359][T23862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.037292][T23862] RIP: 0033:0x7fa50619cdd9 [ 1521.041753][T23862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.061400][T23862] RSP: 002b:00007fa506f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.069853][T23862] RAX: ffffffffffffffda RBX: 00007fa506416090 RCX: 00007fa50619cdd9 [ 1521.077856][T23862] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 1521.085864][T23862] RBP: 00007fa506232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1521.093900][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.101901][T23862] R13: 00007fa506416128 R14: 00007fa506416090 R15: 00007ffcdeee0338 [ 1521.109916][T23862] [ 1521.112960][T23862] Modules linked in: [ 1521.116923][T23862] CR2: ffffffffffffffec [ 1521.121137][T23862] ---[ end trace 0000000000000000 ]--- [ 1521.126623][T23862] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 1521.132420][T23862] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 1521.152056][T23862] RSP: 0018:ffffc90004cef6f8 EFLAGS: 00010246 [ 1521.158161][T23862] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 1521.166158][T23862] RDX: ffffc9001368d000 RSI: 0000000000002ad1 RDI: ffffffffffffffec [ 1521.174167][T23862] RBP: ffffc90004cef810 R08: ffff8880512d5c1f R09: 1ffff1100a25ab83 [ 1521.182177][T23862] R10: dffffc0000000000 R11: ffffed100a25ab84 R12: ffff8880512d5cb0 [ 1521.190194][T23862] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 1521.198201][T23862] FS: 00007fa506f7f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1521.207178][T23862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1521.213806][T23862] CR2: ffffffffffffffec CR3: 0000000064d6e000 CR4: 00000000003506f0 [ 1521.221824][T23862] Kernel panic - not syncing: Fatal exception [ 1521.228045][T23862] Kernel Offset: disabled [ 1521.232371][T23862] Rebooting in 86400 seconds..