last executing test programs: 10.137196693s ago: executing program 4 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) 7.259979603s ago: executing program 3 (id=346): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=@base={0xa, 0x2, 0x4, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) get_robust_list(0x0, &(0x7f0000000100), &(0x7f0000000140)=0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204858, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x80800) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c4) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unshare(0x22020600) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x1c) 7.171189845s ago: executing program 4 (id=347): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) 7.071678878s ago: executing program 1 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0xffffffffffffffff, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x4c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x5dc}], 0x1}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) 6.475401402s ago: executing program 4 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x20, r5, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000380)={0x2, 0x0, [{0x80000019, 0x4, 0x6, 0x2, 0x3, 0xf1, 0x8}, {0x14, 0x7f, 0x7, 0x27, 0xef56, 0x49, 0x6}]}) syz_open_procfs(0x0, 0x0) writev(r3, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000950000000000000042bf4e7b58990d9f0a3b507d468e2d63ef04762aae4909e26a035e92343dfaa7ed4fd3192fcbb6120bde1f90a96c2e01af7a0873470b852be1d7a3e1300b5619f642732b4b3ee9ebbc31f07eecc1e49fd8a079de4a6180"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) 3.759929019s ago: executing program 3 (id=353): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed071f23", 0x4}, {0x0}], 0x2}, 0x40000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.758881989s ago: executing program 0 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1fd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 3.758394319s ago: executing program 1 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0xe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.620177432s ago: executing program 4 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) 3.544099944s ago: executing program 1 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x488, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x40, 0xdc2, 0x1000, {0x7, 0x1, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff8, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x2, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x1, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x1, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}], 0x1}, 0x8000) 3.28816736s ago: executing program 0 (id=360): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.228655276s ago: executing program 0 (id=362): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x800, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x800, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x100, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x2, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x5, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x46b, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x3, 0x0, 0x8, 0x8, 0x53, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0xfffffffe, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x5, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x2, 0x8, 0xf, 0x1, 0x8, 0xa, 0x3, 0x100, 0x2, 0x1, 0x40, 0x8, 0x9, 0x401, 0x80, 0xfffffff9, 0x4, 0x9, 0x7, 0x9273, 0xbf1f, 0x9, 0xef0, 0xd, 0x9, 0x9, 0x9, 0x4, 0x40, 0x6, 0x9, 0x8, 0x6, 0x4, 0x7, 0x4, 0x1, 0x81, 0x5, 0x2, 0x4, 0x7107, 0x3d3, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x0, 0x8, 0x7d77, 0x3, 0xa6b7, 0x5, 0xfffffff8, 0x0, 0x148a00, 0xfffff000, 0x2, 0x200, 0xfffffa66, 0x9, 0x5, 0xd1, 0x32d3, 0x2, 0x3ff, 0x7fff, 0xe, 0x0, 0x2, 0x2, 0x7ff, 0xff, 0x2, 0x1, 0x3, 0x85ba, 0x8, 0xff, 0x79, 0x8001, 0x7, 0x3, 0x9, 0xf, 0x4, 0xa, 0xffff, 0x3, 0x8, 0x5, 0x0, 0xe, 0xb1, 0x2, 0x6, 0xff, 0x7, 0x3ff8, 0x5, 0x752, 0xc9, 0x6, 0x1, 0x9, 0x5, 0x370e, 0xfffffffc, 0x0, 0xc, 0x18, 0x6, 0x1eb6, 0x6, 0x9ce9def, 0xf, 0x2, 0x8, 0x1, 0x241, 0xfffffffb, 0x7, 0x1, 0x10, 0x2b4, 0x3ff, 0x8, 0x3, 0x54, 0x6, 0xf107, 0xaf, 0x1, 0xa, 0x1, 0x0, 0x3, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x9, 0xeaa, 0x7, 0x6, 0x0, 0x1, 0x4, 0x23, 0x0, 0x9, 0x544, 0x4, 0x7f, 0x5, 0x7, 0xffffffff, 0xffff, 0xffffff86, 0x9db7, 0x110c00, 0x0, 0x1, 0x1, 0x5, 0x7ff, 0x80, 0x7ff, 0x9, 0xacf, 0xff, 0xffff, 0x8, 0x6, 0xffe00000, 0x9, 0x2, 0xcaa, 0xedd, 0x8, 0x7fffffff, 0x1, 0x400, 0x6, 0x3, 0x0, 0x101, 0xa24, 0x3, 0x9, 0x8, 0x5, 0xfffffffe, 0x2, 0x26c, 0x72, 0x200, 0x800, 0xffffffff, 0x2, 0x1, 0x7fffffff, 0x7fffffff, 0x7115bd5f, 0xd15, 0x2, 0x1ff, 0x8001, 0x1, 0x4a16fb1d, 0x1, 0x6, 0x10, 0x4, 0x9, 0x2, 0xcd3, 0x4, 0x1442, 0x10001, 0x6, 0x6, 0x8, 0x7fff, 0x4, 0x401, 0x9, 0x5, 0xb, 0x0, 0x2, 0xd, 0x2, 0x10000, 0x8, 0x3ff, 0x6, 0x200, 0xe03e, 0x6, 0x5, 0x1, 0xfffffeff, 0x6, 0xe9, 0x77d, 0x2, 0x2, 0x1, 0x3, 0x0, 0x9, 0x8]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.966710162s ago: executing program 0 (id=365): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001f00030400000000001000000006ce", @ANYRES32=0x0, @ANYBLOB="41a3"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r0 = socket(0xa, 0x3, 0xff) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000001080)=ANY=[], 0xc0}}], 0x1, 0xc000) 1.610159691s ago: executing program 0 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0xffffffff, 0x40000a, 0x6, 0x6, 0x9, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x6, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.095245813s ago: executing program 4 (id=368): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x1}}, 0x10) close(0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180), 0x4) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 848.201759ms ago: executing program 2 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x7, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 764.735601ms ago: executing program 1 (id=370): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed071f23", 0x4}, {0x0}], 0x2}, 0x40000) 764.154472ms ago: executing program 2 (id=371): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20b1b7d68d244073b838f2bd11e15c000000000a01040000000000000000010000060900010073797a300000000020000000030a01010000000000000000010000000900f27d73797a300000000044000000060a010400000000000000000100000008000b400000000028000480240001800b000100657874686472000014000280080001400000000c0500020089000000140000001100e6a7133a86dbd731d7c6dd978744b247b53017089dbcf9061fec3ffb8862b468e02fde90a768ed55af2d61b5e7a5086744efa79b2514e497b298a6caa7465980a6f70bbcfe95cca13ac46ea5"], 0xac}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x20044804) 763.778172ms ago: executing program 3 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 751.844232ms ago: executing program 4 (id=373): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYRES16=0x0], 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) unshare(0x24060400) fstat(r0, &(0x7f00000002c0)) 663.968834ms ago: executing program 2 (id=374): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 550.085047ms ago: executing program 3 (id=375): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0xff, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x4, 0x4, 0x20, 0xff, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 518.270478ms ago: executing program 0 (id=376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x168, 0x65, 0x100, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff3, 0xd}, {0xe, 0x10}}, [@f_tcindex={{0xc}, {0x138, 0x2, [@TCA_TCINDEX_ACT={0x134, 0x7, [@m_xt={0x130, 0x6, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x35, 0x6, {0xff, 'security\x00', 0x13, 0x7, "971002a264c93b614eb4ce"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xa1, 0x6, "4ddec2ce996e3ba91aa18d899bdcb675e4d45f94c88dbf9c647d516790322b676165b56c59c2df90a0c32952c21416259d38043b54386dbe96f359074174771e523d96f7c17fdd3d6340065935caa302c201beccb139741fd47c49a81392ea54d14f8bfd39499f4124457e0695e786de13c0b9d554d408d6fd1d87fa216b9e5784ead4b26aa60ccf82ff6f15cc565dedf2654a84f759e8877f12dad44d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x168}}, 0x0) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1}, 0xfffe}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x3}], 0x2, 0x3, 0x0) 506.882028ms ago: executing program 2 (id=377): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) ptrace(0x10, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x21, 0x4, 0x3, 0x9, 0x84, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x27, 0xc3, [@remote, @local, @local, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @multicast2]}, @rr={0x7, 0x13, 0x5f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @local, @multicast1]}, @noop, @rr={0x7, 0x3, 0xaa}, @timestamp_addr={0x44, 0x2c, 0x37, 0x1, 0x7, [{@local, 0x2}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x6}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x3, 0xef}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet(0x2, 0x1, 0x6) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000f80)={0x80000000, &(0x7f0000000ec0), &(0x7f0000000f00)}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) listen(r5, 0x5) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) fstat(r3, &(0x7f0000000140)) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6c", 0x96}) 480.585348ms ago: executing program 1 (id=378): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) 414.501ms ago: executing program 3 (id=379): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed071f23", 0x4}, {0x0}], 0x2}, 0x40000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 380.853541ms ago: executing program 2 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x488, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x40, 0xdc2, 0x1000, {0x7, 0x1, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff8, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x2, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x1, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x1, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}], 0x1}, 0x8000) 69.178109ms ago: executing program 1 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000640)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000780)=0x28) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000", 0x39}], 0x1) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a14198305b083ea95961d53b3ab3d38030000000100005ff00000000000000000000004a47655c0bf349652f5fb7ece7573e9bd0ee07c16054ea4d7cf741", @ANYRES32=0x0, @ANYBLOB="000000000000000010001280080001007369740004"], 0x30}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) r3 = socket(0x40000000015, 0x5, 0x0) sendto$l2tp6(r3, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) 28.30319ms ago: executing program 3 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0xffffffffffffffff, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x4c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x5dc}], 0x1}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=383): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x1}}, 0x10) close(0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180), 0x4) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 59.137486][ T4175] cgroup: Unknown subsys name 'net' [ 59.309662][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.519850][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.862639][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.873191][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.922139][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.956691][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.010506][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.017822][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.026152][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.044782][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.065468][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.072563][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.081052][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.161557][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.179419][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.192378][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.199587][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.207460][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.221226][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.228768][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.237346][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.251755][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.259174][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.267563][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.278224][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.285608][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.293315][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.300691][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.307984][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.316343][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.330234][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.337334][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.345375][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.366504][ T4190] team0: Port device team_slave_0 added [ 62.381824][ T4190] team0: Port device team_slave_1 added [ 62.410219][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.417503][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.425757][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.440092][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.459704][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.470443][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.479811][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.486982][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.495629][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.503933][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.520678][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.538477][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.558709][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.565805][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.591807][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.609903][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.617007][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.643050][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.679053][ T4187] team0: Port device team_slave_0 added [ 62.694503][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.705634][ T4196] team0: Port device team_slave_0 added [ 62.712925][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.728222][ T4187] team0: Port device team_slave_1 added [ 62.742055][ T4189] team0: Port device team_slave_0 added [ 62.750177][ T4196] team0: Port device team_slave_1 added [ 62.768114][ T4188] team0: Port device team_slave_0 added [ 62.782598][ T4189] team0: Port device team_slave_1 added [ 62.807981][ T4188] team0: Port device team_slave_1 added [ 62.814091][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.821079][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.847209][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.865324][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.872425][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.898604][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.913071][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.920731][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.928106][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.935411][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.961340][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.979550][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.986578][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.012514][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.068719][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.075814][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.101741][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.123895][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.131061][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.157383][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.169337][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.176374][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.202284][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.213942][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.220937][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.246953][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.266920][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.274081][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.280848][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.288699][ T4187] Cannot create hsr debugfs directory [ 63.359758][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.367601][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.374352][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.381929][ T4196] Cannot create hsr debugfs directory [ 63.436917][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.443565][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.450410][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.458505][ T4189] Cannot create hsr debugfs directory [ 63.468214][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.475871][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.482465][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.490069][ T4188] Cannot create hsr debugfs directory [ 63.574840][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 63.582880][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.589095][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 63.589115][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.615326][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.760575][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.772067][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.785644][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.803268][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.842689][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.852773][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.869276][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.882354][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.952481][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.965083][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.990261][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.019806][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.029789][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.047812][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.061008][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.072568][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.098576][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.105573][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.132762][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.142926][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.151640][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.161153][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.170240][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.177595][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.188735][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.217350][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.225800][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.235223][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.244040][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.251165][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.260451][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.272410][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.290711][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.302280][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.312551][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.339039][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.349092][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.358343][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.369747][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.380952][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.419419][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.428317][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.438498][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.452211][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.474546][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.487194][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.495835][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.508196][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.522419][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.533210][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.548526][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.557052][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.566732][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.575362][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.616006][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.625213][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.633749][ T1520] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.640867][ T1520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.648987][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.663874][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.673089][ T1520] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.680500][ T1520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.690615][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.699369][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.708771][ T1520] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.715880][ T1520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.724035][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.732412][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.744056][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.757203][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.776330][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.786425][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.797979][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.805140][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.821864][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.857100][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.865014][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.873789][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.885270][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.893637][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.902546][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.911479][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.919637][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.930579][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.941460][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.950559][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.965196][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.989542][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.998664][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.008576][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.016786][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.026451][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.035543][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.043005][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.064922][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.080753][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.096654][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.106661][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.115747][ T1520] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.122825][ T1520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.132706][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.142278][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.151392][ T1520] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.158540][ T1520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.170220][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.181472][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.191493][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.200320][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.209008][ T1520] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.216130][ T1520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.224572][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.233448][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.242273][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.251310][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.260189][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.269000][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.276957][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.328969][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.339234][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.348271][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.359169][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.368603][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.377937][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.391596][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.404154][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.413665][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.423029][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.431649][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.441880][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.450577][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.457662][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.465977][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.474776][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.482993][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.491939][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.501580][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.510544][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.519267][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.527845][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.538694][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.556933][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.574542][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.583322][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.620749][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.651811][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.660098][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 65.669080][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 65.679246][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.700193][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 65.701007][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.720942][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 65.737444][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.750078][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 65.769956][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.792902][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.832695][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.864481][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.871991][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.930170][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.939136][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.947692][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.955791][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.967196][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.980685][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.997350][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.007611][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.017805][ T4190] device veth0_vlan entered promiscuous mode [ 66.030059][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.038410][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.051159][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.059353][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.087230][ T4190] device veth1_vlan entered promiscuous mode [ 66.099129][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.107381][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.116579][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.125435][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.151955][ T4187] device veth0_vlan entered promiscuous mode [ 66.160459][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.169274][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.177048][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.186234][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.203110][ T4188] device veth0_vlan entered promiscuous mode [ 66.217245][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.226755][ T4187] device veth1_vlan entered promiscuous mode [ 66.235397][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.243629][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.252491][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.261125][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.270656][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.279550][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.288055][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.330123][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.341394][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.349685][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.361087][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.371459][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.396014][ T4188] device veth1_vlan entered promiscuous mode [ 66.410913][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.419757][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.428124][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.437914][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.446473][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.455983][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.466229][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.474858][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.483541][ T4189] device veth0_vlan entered promiscuous mode [ 66.505397][ T4196] device veth0_vlan entered promiscuous mode [ 66.513905][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.522687][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.532391][ T4190] device veth0_macvtap entered promiscuous mode [ 66.546906][ T4189] device veth1_vlan entered promiscuous mode [ 66.557095][ T4187] device veth0_macvtap entered promiscuous mode [ 66.567136][ T4187] device veth1_macvtap entered promiscuous mode [ 66.575730][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.583673][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.592173][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.600635][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.608729][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.617447][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.634850][ T4190] device veth1_macvtap entered promiscuous mode [ 66.646519][ T4196] device veth1_vlan entered promiscuous mode [ 66.666292][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.676488][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.684955][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.692925][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.702581][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.723499][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.741656][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.753686][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.766424][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.775033][ T4188] device veth0_macvtap entered promiscuous mode [ 66.782265][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.790868][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.799235][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.807807][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.816904][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.826149][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.844768][ T4196] device veth0_macvtap entered promiscuous mode [ 66.853305][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.870355][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.881219][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.897107][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.904918][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.913433][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.922359][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.931540][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.941959][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.951145][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.960221][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.973547][ T4196] device veth1_macvtap entered promiscuous mode [ 66.981855][ T4188] device veth1_macvtap entered promiscuous mode [ 66.991681][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.001644][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.010781][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.023112][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.036042][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.045763][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.055253][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.063963][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091438][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.099921][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.109469][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.118801][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.129939][ T4189] device veth0_macvtap entered promiscuous mode [ 67.149165][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.160334][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.170537][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.181182][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.193136][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.222418][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.250133][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.261266][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.272720][ T4189] device veth1_macvtap entered promiscuous mode [ 67.280968][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.291588][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.301662][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.312374][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.322819][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.333779][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.346481][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.361760][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.372948][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383526][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.394374][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.405786][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.425262][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.435925][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.448310][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.459415][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.469464][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.480267][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.491543][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.502927][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.514060][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.521536][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.530397][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.539185][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.548132][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.558294][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.567013][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.582842][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.593796][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.603766][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.615064][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.625053][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.635586][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.647132][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.660693][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.672012][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.680876][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.690458][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.704520][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.713341][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.738104][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 67.744209][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.750380][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.762281][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.779698][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.790105][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.801378][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.812159][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.823040][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.823271][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 67.839740][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.850441][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 67.850714][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.867860][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.891736][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.901073][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.910275][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.919423][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.938033][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.946788][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.966547][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.975378][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984085][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.993374][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.007723][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.017523][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.043107][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.111021][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.124148][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.135384][ T1520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.143263][ T1520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.155121][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.166786][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.220008][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.230943][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.246381][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.248330][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.267214][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.278297][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.319769][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.354384][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.400634][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.424619][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.440274][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.485019][ T163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.503884][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.531113][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.574589][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.597620][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.607201][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.630327][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.644909][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.653349][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.692572][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.816878][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.893597][ T4296] loop2: detected capacity change from 0 to 512 [ 68.936773][ T4296] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 68.963840][ T4296] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.10: corrupted in-inode xattr [ 69.040412][ T4296] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.10: couldn't read orphan inode 15 (err -117) [ 69.060292][ T4296] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 69.113253][ T4305] loop3: detected capacity change from 0 to 2048 [ 69.167622][ T4301] device syzkaller0 entered promiscuous mode [ 69.202867][ T4304] device syzkaller0 entered promiscuous mode [ 69.308874][ T4305] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.331009][ T4304] Zero length message leads to an empty skb [ 69.417887][ T4305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 69.438877][ T4305] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 69.451843][ T4305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.451843][ T4305] [ 69.462066][ T4305] EXT4-fs (loop3): Total free blocks count 0 [ 69.472513][ T4305] EXT4-fs (loop3): Free/Dirty block details [ 69.480885][ T4318] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.495215][ T4305] EXT4-fs (loop3): free_blocks=4096 [ 69.500491][ T4305] EXT4-fs (loop3): dirty_blocks=32 [ 69.506568][ T4305] EXT4-fs (loop3): Block reservation details [ 69.512600][ T4305] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 69.521321][ T4318] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.521321][ T4318] [ 69.571221][ T4322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.815649][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 69.826227][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 69.863120][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 69.900501][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 69.942734][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 69.991731][ T4341] loop4: detected capacity change from 0 to 512 [ 70.142629][ T4341] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 70.245508][ T4341] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.23: corrupted in-inode xattr [ 70.334420][ T4341] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.23: couldn't read orphan inode 15 (err -117) [ 70.364733][ T4341] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 70.804836][ T4358] device syzkaller0 entered promiscuous mode [ 70.838389][ T4360] device syzkaller0 entered promiscuous mode [ 71.137354][ T4374] loop4: detected capacity change from 0 to 16 [ 71.217857][ T4377] loop1: detected capacity change from 0 to 256 [ 71.252567][ T4374] erofs: (device loop4): mounted with root inode @ nid 36. [ 71.338006][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344597][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.563699][ T4383] loop4: detected capacity change from 0 to 512 [ 71.640022][ T4386] device syzkaller0 entered promiscuous mode [ 71.665231][ T4383] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 71.716682][ T4383] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.41: corrupted in-inode xattr [ 71.792013][ T4383] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.41: couldn't read orphan inode 15 (err -117) [ 71.884543][ T4383] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 72.016124][ T4397] device syzkaller0 entered promiscuous mode [ 72.194835][ T4402] device syzkaller0 entered promiscuous mode [ 72.281522][ T4334] loop0: detected capacity change from 0 to 131072 [ 72.406774][ T4334] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 72.458010][ T4334] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 72.493008][ T4334] F2FS-fs (loop0): invalid crc value [ 72.647674][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.673790][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.684907][ T4334] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.052134][ T4413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.507671][ T4430] loop2: detected capacity change from 0 to 256 [ 73.522816][ T4428] device syzkaller0 entered promiscuous mode [ 73.660132][ T4430] FAT-fs (loop2): Directory bread(block 64) failed [ 73.677319][ T4430] FAT-fs (loop2): Directory bread(block 65) failed [ 73.683975][ T4430] FAT-fs (loop2): Directory bread(block 66) failed [ 73.698198][ T4430] FAT-fs (loop2): Directory bread(block 67) failed [ 73.709051][ T4430] FAT-fs (loop2): Directory bread(block 68) failed [ 73.719296][ T4430] FAT-fs (loop2): Directory bread(block 69) failed [ 73.752406][ T4430] FAT-fs (loop2): Directory bread(block 70) failed [ 73.764989][ T4430] FAT-fs (loop2): Directory bread(block 71) failed [ 73.798962][ T4436] loop1: detected capacity change from 0 to 512 [ 73.812766][ T4430] FAT-fs (loop2): Directory bread(block 72) failed [ 73.821712][ T4430] FAT-fs (loop2): Directory bread(block 73) failed [ 73.891697][ T4436] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 73.913256][ T4436] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.58: corrupted in-inode xattr [ 73.993120][ T4436] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.58: couldn't read orphan inode 15 (err -117) [ 74.067313][ T4436] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 74.171336][ T4449] device syzkaller0 entered promiscuous mode [ 75.474259][ C0] sched: RT throttling activated [ 77.091902][ T4494] loop4: detected capacity change from 0 to 512 [ 77.160546][ T4477] device syzkaller0 entered promiscuous mode [ 77.285496][ T4494] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.369596][ T4494] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noload,init_itable,,errors=continue. Quota mode: writeback. [ 77.414529][ T4494] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.603118][ T4503] loop3: detected capacity change from 0 to 512 [ 77.634968][ T4494] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.700389][ T4494] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 77.756247][ T4503] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 77.820804][ T4503] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.74: corrupted in-inode xattr [ 77.904454][ T4503] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 77.934026][ T4503] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 78.300839][ T4497] loop2: detected capacity change from 0 to 40427 [ 78.325599][ T4497] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 78.346979][ T4513] device syzkaller0 entered promiscuous mode [ 78.356369][ T4497] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.408213][ T4511] device syzkaller0 entered promiscuous mode [ 78.424591][ T4497] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.542081][ T4497] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.557617][ T4497] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.612997][ T4519] capability: warning: `syz.0.79' uses 32-bit capabilities (legacy support in use) [ 79.604868][ T4531] device syzkaller0 entered promiscuous mode [ 80.224094][ T4540] loop0: detected capacity change from 0 to 256 [ 80.316141][ T4540] exfat: Deprecated parameter 'utf8' [ 80.401814][ T4540] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 80.501694][ T4549] loop4: detected capacity change from 0 to 512 [ 80.556901][ T4549] ======================================================= [ 80.556901][ T4549] WARNING: The mand mount option has been deprecated and [ 80.556901][ T4549] and is ignored by this kernel. Remove the mand [ 80.556901][ T4549] option from the mount to silence this warning. [ 80.556901][ T4549] ======================================================= [ 80.620195][ T4555] device syzkaller0 entered promiscuous mode [ 80.690879][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.727166][ T4557] device syzkaller0 entered promiscuous mode [ 80.744536][ T4549] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.831512][ T4549] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.89: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 80.995529][ T4565] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 81.577677][ T1108] cfg80211: failed to load regulatory.db [ 81.852460][ T4569] loop2: detected capacity change from 0 to 512 [ 82.100985][ T4569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.199683][ T4569] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.547010][ T26] audit: type=1800 audit(1786667572.456:2): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.97" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 83.844178][ T4578] loop4: detected capacity change from 0 to 256 [ 84.573758][ T4594] device syzkaller0 entered promiscuous mode [ 84.995244][ T4616] loop0: detected capacity change from 0 to 512 [ 85.624846][ T4616] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.670591][ T4616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 85.675082][ T4621] loop1: detected capacity change from 0 to 128 [ 85.679905][ T4616] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.697322][ T4616] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.108: attempt to clear invalid blocks 1024 len 1 [ 85.715562][ T4616] EXT4-fs (loop0): Remounting filesystem read-only [ 85.723020][ T4616] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.108: bg 0: block 361: padding at end of block bitmap is not set [ 85.739239][ T4616] EXT4-fs (loop0): Remounting filesystem read-only [ 85.745819][ T4616] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 85.758982][ T4616] EXT4-fs (loop0): Remounting filesystem read-only [ 85.766089][ T4616] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.108: invalid indirect mapped block 1811939328 (level 0) [ 85.781333][ T4616] EXT4-fs (loop0): Remounting filesystem read-only [ 85.787954][ T4616] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.108: invalid indirect mapped block 2185560079 (level 1) [ 85.816469][ T4616] EXT4-fs (loop0): Remounting filesystem read-only [ 85.817113][ T4616] EXT4-fs (loop0): 1 truncate cleaned up [ 85.817136][ T4616] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,journal_dev=0x0000000000001000. Quota mode: none. [ 85.841213][ T4624] device syzkaller0 entered promiscuous mode [ 86.024251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 86.144275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 88.831033][ T4645] loop3: detected capacity change from 0 to 256 [ 88.898104][ T4645] exfat: Deprecated parameter 'namecase' [ 88.929455][ T4645] exfat: Deprecated parameter 'utf8' [ 88.957003][ T4645] exfat: Deprecated parameter 'namecase' [ 88.986081][ T4645] exfat: Deprecated parameter 'namecase' [ 88.992874][ T4648] device syzkaller0 entered promiscuous mode [ 89.042756][ T4645] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 89.287819][ T4652] device syzkaller0 entered promiscuous mode [ 89.292848][ T4656] loop3: detected capacity change from 0 to 128 [ 89.343950][ T4653] loop1: detected capacity change from 0 to 4096 [ 89.420240][ T4656] attempt to access beyond end of device [ 89.420240][ T4656] loop3: rw=2049, want=250, limit=128 [ 89.458798][ T4653] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 89.515136][ T4653] EXT4-fs (loop1): inline encryption not supported [ 89.536183][ T4653] EXT4-fs (loop1): Test dummy encryption mode enabled [ 89.557527][ T4656] attempt to access beyond end of device [ 89.557527][ T4656] loop3: rw=2049, want=146, limit=128 [ 89.612390][ T4656] attempt to access beyond end of device [ 89.612390][ T4656] loop3: rw=2049, want=162, limit=128 [ 89.614108][ T4653] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 89.636342][ T4656] attempt to access beyond end of device [ 89.636342][ T4656] loop3: rw=2049, want=176, limit=128 [ 89.671578][ T4633] loop0: detected capacity change from 0 to 40427 [ 89.679069][ T4653] System zones: 0-5 [ 89.683855][ T4656] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 89.717313][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 89.758304][ T4633] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 89.810177][ T4633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 89.883364][ T4633] F2FS-fs (loop0): invalid crc value [ 89.980618][ T4633] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.467743][ T4689] device syzkaller0 entered promiscuous mode [ 92.241224][ T4699] device syzkaller0 entered promiscuous mode [ 95.178443][ T4721] loop2: detected capacity change from 0 to 256 [ 95.356322][ T4736] device syzkaller0 entered promiscuous mode [ 95.888097][ T4758] device syzkaller0 entered promiscuous mode [ 97.901180][ T4771] loop1: detected capacity change from 0 to 512 [ 98.277435][ T4771] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 98.433083][ T4771] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.153: corrupted in-inode xattr [ 98.610377][ T4774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.649293][ T4771] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.153: couldn't read orphan inode 15 (err -117) [ 98.748683][ T4777] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.809165][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 99.084864][ T2305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.376441][ T4784] device syzkaller0 entered promiscuous mode [ 99.503356][ T4798] Unsupported ieee802154 address type: 0 [ 99.512043][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.554544][ T2305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.566650][ T2305] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 99.586144][ T2305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.636574][ T2305] usb 5-1: config 0 descriptor?? [ 99.693301][ T4800] device syzkaller0 entered promiscuous mode [ 99.846869][ T4796] loop3: detected capacity change from 0 to 32768 [ 99.946447][ T4796] loop3: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 99.955404][ T4796] loop3: p2 size 16775168 extends beyond EOD, [ 100.414169][ T2305] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 100.713004][ T4796] truncated [ 100.749902][ T4796] loop3: p6 size 16775168 extends beyond EOD, truncated [ 100.778339][ T4796] loop3: p8 size 16775168 extends beyond EOD, truncated [ 100.803949][ T4796] loop3: p10 size 16775168 extends beyond EOD, truncated [ 100.852199][ T4796] loop3: p12 size 16775168 extends beyond EOD, truncated [ 100.880262][ T4796] loop3: p14 size 16775168 extends beyond EOD, truncated [ 100.907263][ T4796] loop3: p16 size 16775168 extends beyond EOD, truncated [ 100.943271][ T4796] loop3: p18 size 16775168 extends beyond EOD, truncated [ 100.972974][ T2305] usb 5-1: USB disconnect, device number 2 [ 101.068471][ T4821] loop4: detected capacity change from 0 to 512 [ 101.099012][ T4802] loop2: detected capacity change from 0 to 40427 [ 101.119598][ T4796] loop3: p20 size 16775168 extends beyond EOD, truncated [ 101.129099][ T4796] loop3: p22 size 16775168 extends beyond EOD, truncated [ 101.140554][ T4796] loop3: p24 size 16775168 extends beyond EOD, truncated [ 101.154098][ T4802] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.168690][ T4802] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.176597][ T4796] loop3: p26 size 16775168 extends beyond EOD, truncated [ 101.190523][ T4796] loop3: p28 size 16775168 extends beyond EOD, truncated [ 101.199409][ T4821] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 101.200411][ T4796] loop3: p30 size 16775168 extends beyond EOD, truncated [ 101.217758][ T4796] loop3: p32 size 16775168 extends beyond EOD, truncated [ 101.227539][ T4796] loop3: p34 size 16775168 extends beyond EOD, truncated [ 101.237241][ T4796] loop3: p36 size 16775168 extends beyond EOD, truncated [ 101.247754][ T4796] loop3: p38 size 16775168 extends beyond EOD, truncated [ 101.248523][ T4802] F2FS-fs (loop2): invalid crc value [ 101.259085][ T4796] loop3: p40 size 16775168 extends beyond EOD, truncated [ 101.269961][ T4796] loop3: p42 size 16775168 extends beyond EOD, truncated [ 101.270887][ T4821] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.168: corrupted in-inode xattr [ 101.279869][ T4796] loop3: p44 size 16775168 extends beyond EOD, truncated [ 101.298943][ T4796] loop3: p46 size 16775168 extends beyond EOD, truncated [ 101.307954][ T4796] loop3: p48 size 16775168 extends beyond EOD, truncated [ 101.317074][ T4796] loop3: p50 size 16775168 extends beyond EOD, truncated [ 101.325911][ T4796] loop3: p52 size 16775168 extends beyond EOD, truncated [ 101.334949][ T4796] loop3: p54 size 16775168 extends beyond EOD, truncated [ 101.345033][ T4796] loop3: p56 size 16775168 extends beyond EOD, truncated [ 101.353781][ T4796] loop3: p58 size 16775168 extends beyond EOD, truncated [ 101.363611][ T4796] loop3: p60 size 16775168 extends beyond EOD, truncated [ 101.374173][ T4796] loop3: p62 size 16775168 extends beyond EOD, truncated [ 101.383275][ T4796] loop3: p64 size 16775168 extends beyond EOD, truncated [ 101.384985][ T4802] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.392365][ T4796] loop3: p66 size 16775168 extends beyond EOD, truncated [ 101.413738][ T4821] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.168: couldn't read orphan inode 15 (err -117) [ 101.428390][ T4796] loop3: p68 size 16775168 extends beyond EOD, truncated [ 101.444588][ T4821] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 101.472312][ T4796] loop3: p70 size 16775168 extends beyond EOD, truncated [ 101.491547][ T4796] loop3: p72 size 16775168 extends beyond EOD, truncated [ 101.522175][ T4796] loop3: p74 size 16775168 extends beyond EOD, truncated [ 101.530719][ T4802] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.567130][ T4802] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.575198][ T4796] loop3: p76 size 16775168 extends beyond EOD, truncated [ 101.616295][ T4796] loop3: p78 size 16775168 extends beyond EOD, truncated [ 101.668953][ T4796] loop3: p80 size 16775168 extends beyond EOD, truncated [ 101.710720][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.723626][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.757598][ T4829] loop0: detected capacity change from 0 to 512 [ 101.772664][ T4796] loop3: p82 size 16775168 extends beyond EOD, truncated [ 101.796212][ T4796] loop3: p84 size 16775168 extends beyond EOD, truncated [ 101.842270][ T4829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.862831][ T4796] loop3: p86 size 16775168 extends beyond EOD, truncated [ 101.901276][ T4829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.926130][ T4796] loop3: p88 size 16775168 extends beyond EOD, truncated [ 101.933567][ T4829] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.169: invalid indirect mapped block 32768 (level 2) [ 101.938051][ T4796] loop3: p90 size 16775168 extends beyond EOD, truncated [ 102.223470][ T4796] loop3: p92 size 16775168 extends beyond EOD, truncated [ 102.232470][ T4829] EXT4-fs (loop0): Remounting filesystem read-only [ 102.275191][ T4829] EXT4-fs (loop0): 1 orphan inode deleted [ 102.280964][ T4829] EXT4-fs (loop0): 1 truncate cleaned up [ 102.301114][ T4796] loop3: p94 size 16775168 extends beyond EOD, truncated [ 102.372375][ T4796] loop3: p96 size 16775168 extends beyond EOD, truncated [ 102.380711][ T4829] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,abort,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000004000,max_dir_size_kb=0x0000000000000002,quota,. Quota mode: writeback. [ 102.430037][ T4796] loop3: p98 size 16775168 extends beyond EOD, truncated [ 102.500635][ T4829] EXT4-fs (loop0): shut down requested (2) [ 102.519628][ T4829] overlayfs: failed to resolve './file0/file0': -117 [ 102.520569][ T4796] loop3: p100 size 16775168 extends beyond EOD, truncated [ 102.549230][ T4796] loop3: p102 size 16775168 extends beyond EOD, truncated [ 102.562176][ T4796] loop3: p104 size 16775168 extends beyond EOD, truncated [ 102.581320][ T4796] loop3: p106 size 16775168 extends beyond EOD, truncated [ 102.600403][ T4796] loop3: p108 size 16775168 extends beyond EOD, truncated [ 102.632869][ T4796] loop3: p110 size 16775168 extends beyond EOD, truncated [ 102.655125][ T4796] loop3: p112 size 16775168 extends beyond EOD, truncated [ 102.669773][ T4796] loop3: p114 size 16775168 extends beyond EOD, truncated [ 102.680715][ T4796] loop3: p116 size 16775168 extends beyond EOD, truncated [ 102.714695][ T4796] loop3: p118 size 16775168 extends beyond EOD, truncated [ 102.745317][ T4796] loop3: p120 size 16775168 extends beyond EOD, truncated [ 102.769517][ T4796] loop3: p122 size 16775168 extends beyond EOD, truncated [ 102.822948][ T4796] loop3: p124 size 16775168 extends beyond EOD, truncated [ 102.847003][ T4796] loop3: p126 size 16775168 extends beyond EOD, truncated [ 102.877796][ T4796] loop3: p128 size 16775168 extends beyond EOD, truncated [ 102.912253][ T4796] loop3: p130 size 16775168 extends beyond EOD, truncated [ 102.941198][ T4796] loop3: p132 size 16775168 extends beyond EOD, truncated [ 102.976879][ T4796] loop3: p134 size 16775168 extends beyond EOD, truncated [ 103.015360][ T4796] loop3: p136 size 16775168 extends beyond EOD, truncated [ 103.049745][ T4796] loop3: p138 size 16775168 extends beyond EOD, truncated [ 103.071055][ T4796] loop3: p140 size 16775168 extends beyond EOD, truncated [ 103.099698][ T4796] loop3: p142 size 16775168 extends beyond EOD, truncated [ 103.144457][ T4796] loop3: p144 size 16775168 extends beyond EOD, truncated [ 103.178325][ T4796] loop3: p146 size 16775168 extends beyond EOD, truncated [ 103.204513][ T4796] loop3: p148 size 16775168 extends beyond EOD, truncated [ 103.233444][ T4796] loop3: p150 size 16775168 extends beyond EOD, truncated [ 103.260243][ T4796] loop3: p152 size 16775168 extends beyond EOD, truncated [ 103.289235][ T4796] loop3: p154 size 16775168 extends beyond EOD, truncated [ 103.318549][ T4796] loop3: p156 size 16775168 extends beyond EOD, truncated [ 103.341339][ T4796] loop3: p158 size 16775168 extends beyond EOD, truncated [ 103.399172][ T4796] loop3: p160 size 16775168 extends beyond EOD, truncated [ 103.416917][ T4796] loop3: p162 size 16775168 extends beyond EOD, truncated [ 103.434170][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.438076][ T4796] loop3: p164 size 16775168 extends beyond EOD, truncated [ 103.452116][ T4796] loop3: p166 size 16775168 extends beyond EOD, truncated [ 103.462439][ T4796] loop3: p168 size 16775168 extends beyond EOD, truncated [ 103.483430][ T4796] loop3: p170 size 16775168 extends beyond EOD, truncated [ 103.495014][ T4796] loop3: p172 size 16775168 extends beyond EOD, truncated [ 103.509718][ T4796] loop3: p174 size 16775168 extends beyond EOD, truncated [ 103.522874][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.528381][ T4796] loop3: p176 size 16775168 extends beyond EOD, truncated [ 103.557499][ T4796] loop3: p178 size 16775168 extends beyond EOD, truncated [ 103.581812][ T4796] loop3: p180 size 16775168 extends beyond EOD, truncated [ 103.605250][ T4796] loop3: p182 size 16775168 extends beyond EOD, truncated [ 103.626404][ T4796] loop3: p184 size 16775168 extends beyond EOD, truncated [ 103.644873][ T4796] loop3: p186 size 16775168 extends beyond EOD, truncated [ 103.663861][ T4796] loop3: p188 size 16775168 extends beyond EOD, truncated [ 103.682971][ T4796] loop3: p190 size 16775168 extends beyond EOD, truncated [ 103.703833][ T4796] loop3: p192 size 16775168 extends beyond EOD, truncated [ 103.723179][ T4796] loop3: p194 size 16775168 extends beyond EOD, truncated [ 103.742940][ T4796] loop3: p196 size 16775168 extends beyond EOD, truncated [ 103.761882][ T4796] loop3: p198 size 16775168 extends beyond EOD, truncated [ 103.780952][ T4796] loop3: p200 size 16775168 extends beyond EOD, truncated [ 103.803534][ T4796] loop3: p202 size 16775168 extends beyond EOD, truncated [ 103.822565][ T4796] loop3: p204 size 16775168 extends beyond EOD, truncated [ 103.842005][ T4796] loop3: p206 size 16775168 extends beyond EOD, truncated [ 103.862136][ T4796] loop3: p208 size 16775168 extends beyond EOD, truncated [ 103.881132][ T4796] loop3: p210 size 16775168 extends beyond EOD, truncated [ 103.900996][ T4796] loop3: p212 size 16775168 extends beyond EOD, truncated [ 103.921389][ T4796] loop3: p214 size 16775168 extends beyond EOD, truncated [ 103.940497][ T4796] loop3: p216 size 16775168 extends beyond EOD, truncated [ 103.959799][ T4796] loop3: p218 size 16775168 extends beyond EOD, truncated [ 103.981495][ T4796] loop3: p220 size 16775168 extends beyond EOD, truncated [ 104.000553][ T4796] loop3: p222 size 16775168 extends beyond EOD, truncated [ 104.023721][ T4796] loop3: p224 size 16775168 extends beyond EOD, truncated [ 104.043234][ T4796] loop3: p226 size 16775168 extends beyond EOD, truncated [ 104.061522][ T4796] loop3: p228 size 16775168 extends beyond EOD, truncated [ 104.080300][ T4796] loop3: p230 size 16775168 extends beyond EOD, truncated [ 104.100117][ T4796] loop3: p232 size 16775168 extends beyond EOD, truncated [ 104.120970][ T4796] loop3: p234 size 16775168 extends beyond EOD, truncated [ 104.141780][ T4796] loop3: p236 size 16775168 extends beyond EOD, truncated [ 104.161601][ T4796] loop3: p238 size 16775168 extends beyond EOD, truncated [ 104.179944][ T4796] loop3: p240 size 16775168 extends beyond EOD, truncated [ 104.200724][ T4796] loop3: p242 size 16775168 extends beyond EOD, truncated [ 104.222430][ T4796] loop3: p244 size 16775168 extends beyond EOD, truncated [ 104.242998][ T4796] loop3: p246 size 16775168 extends beyond EOD, truncated [ 104.250497][ T4815] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.259555][ T4815] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.263465][ T4796] loop3: p248 size 16775168 extends beyond EOD, [ 104.268484][ T4815] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.271886][ T4796] truncated [ 104.274866][ T4815] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.312181][ T4796] loop3: p250 size 16775168 extends beyond EOD, truncated [ 104.324103][ T4796] loop3: p252 size 16775168 extends beyond EOD, truncated [ 104.339079][ T4796] loop3: p254 size 16775168 extends beyond EOD, truncated [ 104.554148][ T4815] syz.1.166 (4815) used greatest stack depth: 20496 bytes left [ 104.938099][ T2305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.944058][ T4864] device syzkaller0 entered promiscuous mode [ 105.334640][ T2305] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.386737][ T2305] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 105.561974][ T2305] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.750997][ T2305] usb 2-1: config 220 has no interface number 2 [ 105.872131][ T2305] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.941486][ T2305] usb 2-1: config 220 interface 0 has no altsetting 0 [ 105.958292][ T4860] loop2: detected capacity change from 0 to 40427 [ 105.970367][ T2305] usb 2-1: config 220 interface 76 has no altsetting 0 [ 105.982509][ T2305] usb 2-1: config 220 interface 1 has no altsetting 0 [ 106.048188][ T4860] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 106.084762][ T4860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.252421][ T4860] F2FS-fs (loop2): invalid crc value [ 106.412966][ T4860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.034587][ T2305] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 107.635924][ T4881] loop0: detected capacity change from 0 to 128 [ 107.931704][ T4881] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 108.561478][ T4881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.644498][ T4574] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.771163][ T4881] ext2 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.914554][ T4574] usb 4-1: Using ep0 maxpacket: 8 [ 108.948747][ T2305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.956844][ T2305] usb 2-1: Product: syz [ 108.961011][ T2305] usb 2-1: Manufacturer: syz [ 108.965661][ T2305] usb 2-1: SerialNumber: syz [ 109.004437][ T2305] usb 2-1: can't set config #220, error -71 [ 109.013566][ T2305] usb 2-1: USB disconnect, device number 2 [ 109.044575][ T4574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 109.094869][ T4574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59144, setting to 1024 [ 109.156192][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 109.169311][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 109.204332][ T4574] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.259975][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 109.299151][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory [ 109.343160][ T4574] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 109.411738][ T4574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.461649][ T4896] udevd[4896]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 109.462824][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 109.482313][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory [ 109.482338][ T4897] udevd[4897]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 109.493204][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 109.504475][ T4898] udevd[4898]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 109.547480][ T4574] usb 4-1: config 0 descriptor?? [ 109.561703][ T4906] device syzkaller0 entered promiscuous mode [ 109.564966][ T4880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 109.837346][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 109.867509][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 110.973152][ T4574] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 110.982061][ T4574] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 110.989514][ T4574] wacom 0003:056A:0094.0002: unknown main item tag 0xd [ 110.997177][ T4574] wacom 0003:056A:0094.0002: unknown main item tag 0xd [ 111.004633][ T4574] wacom 0003:056A:0094.0002: Using device in hidraw-only mode [ 111.018766][ T4574] wacom 0003:056A:0094.0002: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 111.211018][ T4192] usb 4-1: USB disconnect, device number 2 [ 111.482890][ T4950] device syzkaller0 entered promiscuous mode [ 112.025294][ T4965] device syzkaller0 entered promiscuous mode [ 112.209083][ T4969] fido_id[4969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 112.539898][ T4976] device syzkaller0 entered promiscuous mode [ 112.717476][ T4970] loop3: detected capacity change from 0 to 40427 [ 112.722723][ T4957] loop0: detected capacity change from 0 to 40427 [ 112.745248][ T4982] device syzkaller0 entered promiscuous mode [ 112.757945][ T4970] F2FS-fs (loop3): invalid crc value [ 112.823974][ T4970] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 112.831027][ T4957] F2FS-fs (loop0): invalid crc value [ 112.890932][ T4957] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.126856][ T4957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.314835][ T4970] F2FS-fs (loop3): Start checkpoint disabled! [ 113.493980][ T4970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e7 [ 113.894343][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.033778][ T5007] device syzkaller0 entered promiscuous mode [ 114.068867][ T5009] loop1: detected capacity change from 0 to 4096 [ 114.169798][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 114.268346][ T4567] attempt to access beyond end of device [ 114.268346][ T4567] loop3: rw=2049, want=45104, limit=40427 [ 114.385377][ T5009] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.392226][ T5009] EXT4-fs (loop1): Ignoring removed orlov option [ 114.453706][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 114.478674][ T1325] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.488197][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.496333][ T1325] usb 5-1: Product: syz [ 114.500643][ T1325] usb 5-1: Manufacturer: syz [ 114.505323][ T1325] usb 5-1: SerialNumber: syz [ 114.761315][ T4998] sd 0:0:1:0: PR command failed: 2 [ 114.783797][ T4998] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 114.796521][ T5009] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 114.814602][ T4998] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 114.938332][ T5059] device syzkaller0 entered promiscuous mode [ 115.014692][ T1325] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.700144][ T1325] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.831283][ T1325] usb 5-1: USB disconnect, device number 3 [ 116.629548][ T5069] device syzkaller0 entered promiscuous mode [ 118.869905][ T5095] loop1: detected capacity change from 0 to 1024 [ 118.930236][ T5095] EXT4-fs (loop1): filesystem is read-only [ 119.047312][ T4896] udevd[4896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.076711][ T5099] loop3: detected capacity change from 0 to 128 [ 119.924250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 119.944238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 119.954240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 119.964240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 119.974238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 119.994244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 120.004238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 120.014241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 122.474628][ T5145] device syzkaller0 entered promiscuous mode [ 122.623411][ T5147] device syzkaller0 entered promiscuous mode [ 122.929457][ T5172] loop2: detected capacity change from 0 to 256 [ 122.964742][ T5174] device syzkaller0 entered promiscuous mode [ 123.015168][ T5172] exfat: Deprecated parameter 'utf8' [ 123.020556][ T5172] exfat: Deprecated parameter 'namecase' [ 123.030071][ T5172] exfat: Deprecated parameter 'namecase' [ 123.036171][ T5172] exfat: Deprecated parameter 'namecase' [ 123.090098][ T5172] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 123.214480][ T4192] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.357548][ T5194] loop2: detected capacity change from 0 to 2048 [ 123.518379][ T5194] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.614456][ T4192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.622631][ T26] audit: type=1800 audit(1786667613.536:3): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.267" name="olock," dev="loop2" ino=18 res=0 errno=0 [ 123.711477][ T5217] device syzkaller0 entered promiscuous mode [ 123.725121][ T4192] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.748983][ T5225] loop4: detected capacity change from 0 to 512 [ 123.834601][ T4192] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.843894][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.869715][ T4192] usb 2-1: SerialNumber: syz [ 123.932590][ T5225] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 123.946153][ T5225] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.978899][ T26] audit: type=1800 audit(1786667613.896:4): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.276" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 124.280466][ T5253] loop2: detected capacity change from 0 to 512 [ 124.847711][ T5253] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.283: inode has both inline data and extents flags [ 125.336540][ T5253] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.283: couldn't read orphan inode 15 (err -117) [ 125.605765][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.634862][ T4192] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 126.230675][ T4192] usb 2-1: USB disconnect, device number 3 [ 128.383738][ T5294] device syzkaller0 entered promiscuous mode [ 128.635093][ T5274] loop1: detected capacity change from 0 to 40427 [ 128.659073][ T5274] F2FS-fs (loop1): invalid crc value [ 128.682448][ T5274] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.793224][ T5274] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 128.928770][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.754312][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 132.045120][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 132.277244][ T4232] usb 4-1: can't read configurations, error -71 [ 132.311870][ T5328] device syzkaller0 entered promiscuous mode [ 132.836643][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848110][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.627031][ T5373] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 133.636689][ T5351] device syzkaller0 entered promiscuous mode [ 133.658727][ T5377] fuse: Bad value for 'fd' [ 133.684603][ T5372] device syzkaller0 entered promiscuous mode [ 137.455776][ T5397] device syzkaller0 entered promiscuous mode [ 138.686872][ T5422] device syzkaller0 entered promiscuous mode [ 139.589323][ T5425] device syzkaller0 entered promiscuous mode [ 140.106019][ T5447] device syzkaller0 entered promiscuous mode [ 140.524406][ T5450] syz.0.331 uses obsolete (PF_INET,SOCK_PACKET) [ 141.931751][ T5459] device syzkaller0 entered promiscuous mode [ 144.804396][ T5497] loop3: detected capacity change from 0 to 512 [ 145.978111][ T5497] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.990493][ T5497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.238076][ T5497] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.341: Invalid block bitmap block 0 in block_group 0 [ 146.256506][ T5497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 146.268396][ T5497] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.341: attempt to clear invalid blocks 983261 len 1 [ 146.284882][ T5497] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.341: Invalid inode table block 0 in block_group 0 [ 146.308383][ T5497] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 146.321700][ T5497] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 146.333389][ T5497] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.341: Invalid inode table block 0 in block_group 0 [ 146.348367][ T5497] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 146.360034][ T5497] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.341: mark_inode_dirty error [ 146.374240][ T5497] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 146.385404][ T5497] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.341: Invalid inode table block 0 in block_group 0 [ 146.405725][ T5497] EXT4-fs (loop3): 1 truncate cleaned up [ 146.411444][ T5497] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 147.497702][ T5519] loop3: detected capacity change from 0 to 256 [ 147.652057][ T5513] device syzkaller0 entered promiscuous mode [ 147.676980][ T26] audit: type=1326 audit(1786667637.586:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc64970d9 code=0x7ffc0000 [ 147.819693][ T26] audit: type=1326 audit(1786667637.656:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfc64970d9 code=0x7ffc0000 [ 148.013684][ T26] audit: type=1326 audit(1786667637.666:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcfc6496e42 code=0x7ffc0000 [ 148.043681][ T26] audit: type=1326 audit(1786667637.676:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfc645790e code=0x7ffc0000 [ 148.073927][ T26] audit: type=1326 audit(1786667637.686:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcfc6496f07 code=0x7ffc0000 [ 150.340347][ T26] audit: type=1326 audit(1786667637.686:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfc645790e code=0x7ffc0000 [ 150.854496][ T26] audit: type=1326 audit(1786667637.696:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc6496d6b code=0x7ffc0000 [ 150.963821][ T26] audit: type=1326 audit(1786667637.706:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc6496d6b code=0x7ffc0000 [ 151.038713][ T5550] device syzkaller0 entered promiscuous mode [ 151.063069][ T26] audit: type=1326 audit(1786667637.706:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc645790e code=0x7ffc0000 [ 151.090392][ T26] audit: type=1326 audit(1786667637.716:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5518 comm="syz.3.346" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfc6496d6b code=0x7ffc0000 [ 153.848125][ T5616] device syzkaller0 entered promiscuous mode [ 154.242763][ T5632] device syzkaller0 entered promiscuous mode [ 154.293383][ T5639] device syzkaller0 entered promiscuous mode [ 154.309979][ T5637] device syzkaller0 entered promiscuous mode [ 154.438295][ T5622] loop4: detected capacity change from 0 to 40427 [ 154.498715][ T5622] F2FS-fs (loop4): Unrecognized mount option "memory=low" or missing value [ 154.549743][ T5622] ------------[ cut here ]------------ [ 154.555253][ T5622] WARNING: CPU: 1 PID: 5622 at kernel/locking/lockdep.c:6325 lockdep_unregister_key+0x4d7/0x520 [ 154.565707][ T5622] Modules linked in: [ 154.569654][ T5622] CPU: 1 PID: 5622 Comm: syz.4.373 Not tainted syzkaller #0 [ 154.577029][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.587106][ T5622] RIP: 0010:lockdep_unregister_key+0x4d7/0x520 [ 154.593274][ T5622] Code: 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 93 62 08 41 f7 c4 00 02 00 00 74 90 fb 84 db 75 8f eb a0 <0f> 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd fe ff ff e8 [ 154.612895][ T5622] RSP: 0018:ffffc900034cf9c0 EFLAGS: 00010002 [ 154.618976][ T5622] RAX: 0000000000000000 RBX: ffff888077399728 RCX: dffffc0000000000 [ 154.626981][ T5622] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900034cf940 [ 154.634941][ T5622] RBP: ffffc900034cfa90 R08: 0000000000000003 R09: 0000000000000004 [ 154.642909][ T5622] R10: dffffc0000000000 R11: fffff52000699f28 R12: 0000000000000203 [ 154.650858][ T5622] R13: ffff888077398000 R14: 0000000000000000 R15: 1ffff92000699f3c [ 154.658814][ T5622] FS: 00007f8c77d266c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 154.667724][ T5622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.674290][ T5622] CR2: 00007fcfc6720dac CR3: 000000007accb000 CR4: 00000000003506e0 [ 154.682246][ T5622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.690198][ T5622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.698153][ T5622] Call Trace: [ 154.701416][ T5622] [ 154.704327][ T5622] ? lockdep_reset_lock+0x300/0x300 [ 154.709515][ T5622] ? kfree+0xef/0x2a0 [ 154.713478][ T5622] ? __phys_addr+0xb6/0x170 [ 154.717968][ T5622] f2fs_fill_super+0x3ce4/0x7050 [ 154.722889][ T5622] ? vsnprintf+0x1b22/0x1c20 [ 154.727477][ T5622] ? kill_f2fs_super+0x3d0/0x3d0 [ 154.732402][ T5622] ? up_write+0x1b6/0x410 [ 154.736711][ T5622] ? set_blocksize+0x1f1/0x360 [ 154.741464][ T5622] ? sb_set_blocksize+0xa5/0xe0 [ 154.746304][ T5622] mount_bdev+0x28a/0x3c0 [ 154.750790][ T5622] ? kill_f2fs_super+0x3d0/0x3d0 [ 154.755705][ T5622] legacy_get_tree+0xe6/0x180 [ 154.760358][ T5622] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 154.766403][ T5622] vfs_get_tree+0x88/0x270 [ 154.770919][ T5622] do_new_mount+0x247/0xa40 [ 154.775421][ T5622] __se_sys_mount+0x2e3/0x3d0 [ 154.780084][ T5622] ? __x64_sys_mount+0xc0/0xc0 [ 154.784827][ T5622] ? lockdep_hardirqs_on+0x94/0x140 [ 154.790006][ T5622] ? __x64_sys_mount+0x1c/0xc0 [ 154.794746][ T5622] do_syscall_64+0x4c/0xa0 [ 154.799227][ T5622] ? clear_bhb_loop+0x30/0x80 [ 154.803890][ T5622] ? clear_bhb_loop+0x30/0x80 [ 154.808542][ T5622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.814431][ T5622] RIP: 0033:0x7f8c79acf34a [ 154.818953][ T5622] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.838556][ T5622] RSP: 002b:00007f8c77d25e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.846958][ T5622] RAX: ffffffffffffffda RBX: 00007f8c77d25ee0 RCX: 00007f8c79acf34a [ 154.854931][ T5622] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 00007f8c77d25ea0 [ 154.862883][ T5622] RBP: 0000200000000140 R08: 00007f8c77d25ee0 R09: 0000000000000000 [ 154.870837][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 154.878803][ T5622] R13: 00007f8c77d25ea0 R14: 0000000000005512 R15: 00002000000003c0 [ 154.886761][ T5622] [ 154.889774][ T5622] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.897028][ T5622] CPU: 1 PID: 5622 Comm: syz.4.373 Not tainted syzkaller #0 [ 154.904286][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.914322][ T5622] Call Trace: [ 154.917583][ T5622] [ 154.920494][ T5622] dump_stack_lvl+0x188/0x250 [ 154.925156][ T5622] ? show_regs_print_info+0x20/0x20 [ 154.930334][ T5622] ? load_image+0x410/0x410 [ 154.934848][ T5622] panic+0x2f8/0x850 [ 154.938742][ T5622] ? bpf_jit_dump+0xd0/0xd0 [ 154.943224][ T5622] ? lockdep_unregister_key+0x4d7/0x520 [ 154.948763][ T5622] __warn+0x248/0x2b0 [ 154.952723][ T5622] ? lockdep_unregister_key+0x4d7/0x520 [ 154.958246][ T5622] report_bug+0x1b9/0x2e0 [ 154.962551][ T5622] handle_bug+0x3a/0x70 [ 154.966701][ T5622] exc_invalid_op+0x16/0x40 [ 154.971187][ T5622] asm_exc_invalid_op+0x16/0x20 [ 154.976012][ T5622] RIP: 0010:lockdep_unregister_key+0x4d7/0x520 [ 154.982256][ T5622] Code: 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 93 62 08 41 f7 c4 00 02 00 00 74 90 fb 84 db 75 8f eb a0 <0f> 0b e9 44 ff ff ff 0f 0b e9 b0 fe ff ff 0f 0b e9 fd fe ff ff e8 [ 155.001870][ T5622] RSP: 0018:ffffc900034cf9c0 EFLAGS: 00010002 [ 155.007932][ T5622] RAX: 0000000000000000 RBX: ffff888077399728 RCX: dffffc0000000000 [ 155.016006][ T5622] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900034cf940 [ 155.023962][ T5622] RBP: ffffc900034cfa90 R08: 0000000000000003 R09: 0000000000000004 [ 155.031939][ T5622] R10: dffffc0000000000 R11: fffff52000699f28 R12: 0000000000000203 [ 155.039891][ T5622] R13: ffff888077398000 R14: 0000000000000000 R15: 1ffff92000699f3c [ 155.047854][ T5622] ? lockdep_reset_lock+0x300/0x300 [ 155.053163][ T5622] ? kfree+0xef/0x2a0 [ 155.057135][ T5622] ? __phys_addr+0xb6/0x170 [ 155.061630][ T5622] f2fs_fill_super+0x3ce4/0x7050 [ 155.066568][ T5622] ? vsnprintf+0x1b22/0x1c20 [ 155.071179][ T5622] ? kill_f2fs_super+0x3d0/0x3d0 [ 155.076136][ T5622] ? up_write+0x1b6/0x410 [ 155.080450][ T5622] ? set_blocksize+0x1f1/0x360 [ 155.085216][ T5622] ? sb_set_blocksize+0xa5/0xe0 [ 155.090047][ T5622] mount_bdev+0x28a/0x3c0 [ 155.094373][ T5622] ? kill_f2fs_super+0x3d0/0x3d0 [ 155.099290][ T5622] legacy_get_tree+0xe6/0x180 [ 155.104139][ T5622] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 155.110227][ T5622] vfs_get_tree+0x88/0x270 [ 155.114655][ T5622] do_new_mount+0x247/0xa40 [ 155.119149][ T5622] __se_sys_mount+0x2e3/0x3d0 [ 155.123811][ T5622] ? __x64_sys_mount+0xc0/0xc0 [ 155.128558][ T5622] ? lockdep_hardirqs_on+0x94/0x140 [ 155.133744][ T5622] ? __x64_sys_mount+0x1c/0xc0 [ 155.138509][ T5622] do_syscall_64+0x4c/0xa0 [ 155.142930][ T5622] ? clear_bhb_loop+0x30/0x80 [ 155.147600][ T5622] ? clear_bhb_loop+0x30/0x80 [ 155.152263][ T5622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.158156][ T5622] RIP: 0033:0x7f8c79acf34a [ 155.162565][ T5622] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.182186][ T5622] RSP: 002b:00007f8c77d25e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.190581][ T5622] RAX: ffffffffffffffda RBX: 00007f8c77d25ee0 RCX: 00007f8c79acf34a [ 155.198534][ T5622] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 00007f8c77d25ea0 [ 155.206485][ T5622] RBP: 0000200000000140 R08: 00007f8c77d25ee0 R09: 0000000000000000 [ 155.214437][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 155.222388][ T5622] R13: 00007f8c77d25ea0 R14: 0000000000005512 R15: 00002000000003c0 [ 155.230373][ T5622] [ 156.330284][ T5622] Shutting down cpus with NMI [ 156.335287][ T5622] Kernel Offset: disabled [ 156.339615][ T5622] Rebooting in 86400 seconds..