last executing test programs: 4.479310982s ago: executing program 0 (id=3879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x727, 0x5, 0x1, 0x5, 0x382, 0x4, 0x1, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c8d1}, 0x48004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x319}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.447472998s ago: executing program 0 (id=3880): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x431329138e1d06c9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x9733, 0xfffb, 0x6}, {0xff, 0x2, 0x3, 0xf252, 0x7, 0xd7a0}, 0x7, 0x6, 0x22e5}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r4, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) 4.191227135s ago: executing program 4 (id=3886): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4004c0d0) socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x8, 0x2, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x1) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b118400000000008510000002000000850000000500000095003300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.816574957s ago: executing program 1 (id=3887): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@journal_checksum}, {@nouser_xattr}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@data_err_ignore}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x3}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, 0x0) chdir(0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x2a0, &(0x7f0000000a40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) close(0x3) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8c2) ioctl$EVIOCSABS20(r6, 0x40044591, 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5f, 0x3}) 3.67995186s ago: executing program 0 (id=3891): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x40, 0x3, 0x4, "d4e81359"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000140)={0x0, 0x6, 0x8, "9af922c15b246b68"}, 0x0, 0x0, 0x0, &(0x7f0000000500)}) 2.704810245s ago: executing program 4 (id=3893): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000440)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r0]) 2.531273377s ago: executing program 3 (id=3895): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 2.531075765s ago: executing program 3 (id=3896): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x3, "852805"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.491878098s ago: executing program 1 (id=3899): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0x0, 0xc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.373664162s ago: executing program 1 (id=3900): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.343691496s ago: executing program 2 (id=3902): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff0000000000000300"/120], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.342739975s ago: executing program 1 (id=3903): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4004c0d0) socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x8, 0x2, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x1) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b118400000000008510000002000000850000000500000095003300000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2.286802455s ago: executing program 2 (id=3904): r0 = socket(0x28, 0x1, 0x0) connect$packet(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff1, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_BASE_RATE64={0xc}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 2.162303866s ago: executing program 2 (id=3905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x8001}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 2.046957919s ago: executing program 4 (id=3906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0x0, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="07ddfad8b45bc251e43d3d86", 0xc}], 0x1}, 0x20004014) 2.010502428s ago: executing program 3 (id=3907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 1.481253473s ago: executing program 2 (id=3908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.466880065s ago: executing program 3 (id=3909): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x2) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000040)) 1.457612054s ago: executing program 1 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0x0, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x4011) 1.398486338s ago: executing program 3 (id=3911): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0x0, 0xc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 817.569295ms ago: executing program 2 (id=3912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 786.791474ms ago: executing program 4 (id=3913): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc95779", 0x1b}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9", 0xaa}], 0x2}}], 0x1, 0x42054) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 750.902405ms ago: executing program 4 (id=3914): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x3, &(0x7f00000000c0)=0x2) 749.831334ms ago: executing program 0 (id=3915): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 724.124047ms ago: executing program 4 (id=3916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r1, &(0x7f0000000080)=""/60, 0x3c, 0x180, 0x0, 0xffffffffffffff69) 723.822465ms ago: executing program 1 (id=3917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback={0x9f8}, @loopback}}}}}}, 0x66) 710.263304ms ago: executing program 0 (id=3918): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000380)=r2}, 0x20) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 132.614988ms ago: executing program 0 (id=3919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x8001}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 84.875465ms ago: executing program 3 (id=3920): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4004c0d0) socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x8, 0x2, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x1) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b118400000000008510000002000000850000000500000095003300000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 2 (id=3921): socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x10000, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r6, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) kernel console output (not intermixed with test programs): C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.804065][ T4723] Bluetooth: hci5: command tx timeout [ 280.315205][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 280.328314][T12880] syzkaller0: entered promiscuous mode [ 280.329442][T12880] syzkaller0: entered allmulticast mode [ 280.349096][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 280.370673][T12896] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 280.384884][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.384947][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.384982][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.385004][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.401892][T12900] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2714'. [ 280.518551][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.561111][ T5195] hsr_slave_0: left promiscuous mode [ 280.566492][ T5195] hsr_slave_1: left promiscuous mode [ 280.566941][ T5195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.566968][ T5195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.571114][ T5195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.572688][ T5195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.581354][ T5195] veth1_macvtap: left promiscuous mode [ 280.583090][ T5195] veth0_macvtap: left promiscuous mode [ 280.583227][ T5195] veth1_vlan: left promiscuous mode [ 280.583328][ T5195] veth0_vlan: left promiscuous mode [ 280.595935][T12922] loop4: detected capacity change from 0 to 4096 [ 280.597605][T12922] ext4: Unknown parameter 'nouser_xattr' [ 280.815739][T12929] loop4: detected capacity change from 0 to 512 [ 281.493547][ T5195] team0 (unregistering): Port device team_slave_1 removed [ 281.500727][ T5195] team0 (unregistering): Port device team_slave_0 removed [ 281.536780][T12932] netlink: 'syz.2.2724': attribute type 1 has an invalid length. [ 281.573148][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.597921][T12718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.597960][T12718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.613466][T12928] tipc: Enabling of bearer rejected, failed to enable media [ 281.622852][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.622908][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.623472][ T1254] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.623504][ T1254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.666628][T12932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.672253][T12941] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 281.686411][T12931] macvlan0: entered promiscuous mode [ 281.687478][T12931] macvlan0: entered allmulticast mode [ 281.689322][T12931] bond4: entered promiscuous mode [ 281.691793][T12931] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 281.694742][T12931] bond4: left promiscuous mode [ 281.757241][T12939] syzkaller0: entered promiscuous mode [ 281.757279][T12939] syzkaller0: entered allmulticast mode [ 281.767696][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2728'. [ 281.767734][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2728'. [ 281.833151][ T4723] Bluetooth: hci5: command tx timeout [ 281.900019][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.943030][T12718] veth0_vlan: entered promiscuous mode [ 281.963649][T12718] veth1_vlan: entered promiscuous mode [ 281.974233][T12718] veth0_macvtap: entered promiscuous mode [ 281.975389][T12718] veth1_macvtap: entered promiscuous mode [ 281.982626][T12718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.984482][T12718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.035910][ T1254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.039504][ T1254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.041279][ T1254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.042899][ T1254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.050670][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.050696][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.068434][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.068462][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.213201][T12989] loop4: detected capacity change from 0 to 512 [ 282.843926][T12988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.864590][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 282.905840][T12991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'. [ 282.940612][T12995] syzkaller0: entered promiscuous mode [ 282.941758][T12995] syzkaller0: entered allmulticast mode [ 283.040857][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 283.042719][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 283.369254][T13032] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 283.441490][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2756'. [ 283.501725][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2756'. [ 283.629613][T13041] loop4: detected capacity change from 0 to 512 [ 283.913241][ T4723] Bluetooth: hci5: command tx timeout [ 284.408664][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 284.410426][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 284.571253][T13059] tipc: Enabling of bearer rejected, failed to enable media [ 284.601542][T13060] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 284.620843][T13067] netlink: 'syz.3.2766': attribute type 1 has an invalid length. [ 284.651597][T13067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.665454][T13067] macvlan2: entered promiscuous mode [ 284.665491][T13067] macvlan2: entered allmulticast mode [ 284.665920][T13067] bond6: entered promiscuous mode [ 284.666108][T13067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.685341][T13067] bond6: left promiscuous mode [ 285.766834][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.769165][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.770978][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.772434][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.775169][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.152253][T13086] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.152294][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.152370][T13086] bridge_slave_0: entered allmulticast mode [ 286.152826][T13086] bridge_slave_0: entered promiscuous mode [ 286.153724][T13086] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.153748][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.153848][T13086] bridge_slave_1: entered allmulticast mode [ 286.154248][T13086] bridge_slave_1: entered promiscuous mode [ 286.161437][T13086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.162373][T13086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.170950][T13086] team0: Port device team_slave_0 added [ 286.171801][T13086] team0: Port device team_slave_1 added [ 286.179006][T13086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.179034][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.179049][T13086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.179627][T13086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.179633][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.179644][T13086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.193949][T13086] hsr_slave_0: entered promiscuous mode [ 286.194281][T13086] hsr_slave_1: entered promiscuous mode [ 286.261152][T13086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.261195][T13086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.334006][T13086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.334046][T13086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.396008][T13103] syzkaller0: entered promiscuous mode [ 286.396037][T13103] syzkaller0: entered allmulticast mode [ 286.422555][T13086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.422601][T13086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.493378][T13086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.493421][T13086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.878569][T13107] __nla_validate_parse: 1 callbacks suppressed [ 286.878608][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2775'. [ 286.878621][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2775'. [ 286.990057][T13109] loop1: detected capacity change from 0 to 4096 [ 286.991670][T13109] ext4: Unknown parameter 'nouser_xattr' [ 287.687958][T13062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.843367][T13086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.844858][ T4723] Bluetooth: hci2: command tx timeout [ 287.857835][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.858227][T13086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.882252][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.893305][T13086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.905904][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.906236][T13086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.910096][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.960661][T13115] loop4: detected capacity change from 0 to 4096 [ 287.985495][T13115] ext4: Unknown parameter 'nouser_xattr' [ 288.063288][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.067015][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.069223][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.069273][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.074279][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.074319][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.079839][T13086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.089846][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 288.229856][T13146] loop4: detected capacity change from 0 to 512 [ 288.493676][T13146] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2777: inode has both inline data and extents flags [ 288.493724][T13146] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.496795][T13146] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2777: couldn't read orphan inode 15 (err -117) [ 288.496828][T13146] loop4: lost filesystem error report for type 5 error -117 [ 288.501284][T13146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 288.516251][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.544963][T13158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2785'. [ 288.546637][T13158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2785'. [ 288.620539][T13086] veth0_vlan: entered promiscuous mode [ 288.641547][T13086] veth1_vlan: entered promiscuous mode [ 288.704178][T13086] veth0_macvtap: entered promiscuous mode [ 288.716710][T13086] veth1_macvtap: entered promiscuous mode [ 288.747892][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.765545][T13086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.783874][ T5193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.783929][ T5193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.783963][ T5193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.783985][ T5193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.870824][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 288.916569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.916608][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.950839][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.952572][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.166654][T13189] netlink: 'syz.0.2798': attribute type 2 has an invalid length. [ 289.166692][T13189] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2798'. [ 289.206295][T13190] syzkaller0: entered promiscuous mode [ 289.206336][T13190] syzkaller0: entered allmulticast mode [ 289.409367][T13200] loop0: detected capacity change from 0 to 512 [ 289.422590][T13200] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 289.424922][T13200] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2800: corrupted in-inode xattr: e_value size too large [ 289.435161][T13200] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.443102][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 289.443133][ C1] EXT4-fs (loop0): initial error at time 289: ext4_iget_extra_inode:5128: inode 15 [ 289.443172][ C1] EXT4-fs (loop0): last error at time 289: ext4_iget_extra_inode:5128: inode 15 [ 289.450276][T13200] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2800: couldn't read orphan inode 15 (err -117) [ 289.450313][T13200] loop0: lost filesystem error report for type 5 error -117 [ 289.490113][T13200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.633029][T13207] loop4: detected capacity change from 0 to 4096 [ 289.635031][T13207] ext4: Unknown parameter 'nouser_xattr' [ 289.669970][T13209] syzkaller0: entered promiscuous mode [ 289.670011][T13209] syzkaller0: entered allmulticast mode [ 289.869964][T13211] loop4: detected capacity change from 0 to 512 [ 289.914337][ T4723] Bluetooth: hci2: command tx timeout [ 290.750080][T13227] netlink: 'syz.3.2811': attribute type 4 has an invalid length. [ 290.787084][T13227] netlink: 'syz.3.2811': attribute type 4 has an invalid length. [ 290.939612][T13235] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 290.942592][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2815'. [ 290.948476][T13235] macvlan2: entered promiscuous mode [ 290.948507][T13235] macvlan2: entered allmulticast mode [ 291.042467][T13237] syzkaller0: entered promiscuous mode [ 291.042501][T13237] syzkaller0: entered allmulticast mode [ 291.442130][ T5210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.605284][T13263] loop1: detected capacity change from 0 to 4096 [ 291.605825][T13263] ext4: Unknown parameter 'nouser_xattr' [ 291.679380][T13263] loop1: detected capacity change from 0 to 512 [ 291.695568][T13263] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2825: inode has both inline data and extents flags [ 291.695613][T13263] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.695756][T13263] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2825: couldn't read orphan inode 15 (err -117) [ 291.695790][T13263] loop1: lost filesystem error report for type 5 error -117 [ 291.699064][T13263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 291.745134][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 291.863547][T13270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2827'. [ 291.929786][T13241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.930178][T13251] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2821'. [ 291.990053][T13281] loop3: detected capacity change from 0 to 512 [ 291.994236][ T4723] Bluetooth: hci2: command tx timeout [ 291.994439][T13279] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 291.997674][T13281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 292.010636][T13276] tipc: Enabling of bearer rejected, failed to enable media [ 292.020195][T13281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.151750][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.203970][T13305] syzkaller0: entered promiscuous mode [ 292.205218][T13305] syzkaller0: entered allmulticast mode [ 292.375669][T13320] syzkaller0: entered promiscuous mode [ 292.376974][T13320] syzkaller0: entered allmulticast mode [ 292.379678][T13320] tipc: Started in network mode [ 292.380777][T13320] tipc: Node identity 2a5dbe1f76d, cluster identity 4711 [ 292.382352][T13320] tipc: Enabled bearer , priority 0 [ 292.388390][T13319] tipc: Resetting bearer [ 292.396044][T13319] tipc: Disabling bearer [ 292.518785][T13333] syzkaller0: entered promiscuous mode [ 292.518816][T13333] syzkaller0: entered allmulticast mode [ 292.612416][T13341] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 292.614966][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 292.728211][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.730134][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.731311][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.731680][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.731916][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.932597][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.985498][T13367] syzkaller0: entered promiscuous mode [ 292.986660][T13367] syzkaller0: entered allmulticast mode [ 292.997129][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.998478][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.998592][T13347] bridge_slave_0: entered allmulticast mode [ 292.999078][T13347] bridge_slave_0: entered promiscuous mode [ 292.999830][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.999868][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.999939][T13347] bridge_slave_1: entered allmulticast mode [ 293.002464][T13347] bridge_slave_1: entered promiscuous mode [ 293.011699][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.013416][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.027541][T13347] team0: Port device team_slave_0 added [ 293.028579][T13347] team0: Port device team_slave_1 added [ 293.051308][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.059841][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.059866][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.059879][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.060407][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.060415][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.060430][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.072725][T13347] hsr_slave_0: entered promiscuous mode [ 293.073325][T13347] hsr_slave_1: entered promiscuous mode [ 293.073671][T13347] debugfs: 'hsr0' already exists in 'hsr' [ 293.073685][T13347] Cannot create hsr debugfs directory [ 293.132728][T13383] syzkaller0: entered promiscuous mode [ 293.132778][T13383] syzkaller0: entered allmulticast mode [ 293.147588][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.176899][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.325312][ T39] bridge_slave_1: left allmulticast mode [ 293.325345][ T39] bridge_slave_1: left promiscuous mode [ 293.325441][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.329378][ T39] bridge_slave_0: left allmulticast mode [ 293.329410][ T39] bridge_slave_0: left promiscuous mode [ 293.329492][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.389176][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 293.399278][ T39] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 293.496112][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.524204][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.534302][ T39] bond0 (unregistering): Released all slaves [ 293.538368][ T39] bond1 (unregistering): Released all slaves [ 293.542346][ T39] bond2 (unregistering): Released all slaves [ 293.546418][ T39] bond3 (unregistering): Released all slaves [ 293.550451][ T39] bond4 (unregistering): Released all slaves [ 293.778169][ T39] hsr_slave_0: left promiscuous mode [ 293.779529][ T39] hsr_slave_1: left promiscuous mode [ 293.779820][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.782191][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.827592][ T39] team0 (unregistering): Port device team_slave_1 removed [ 293.831315][ T39] team0 (unregistering): Port device team_slave_0 removed [ 293.835718][T13374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.936734][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'. [ 294.054910][T13400] syzkaller0: entered promiscuous mode [ 294.056195][T13400] syzkaller0: entered allmulticast mode [ 294.061222][T13400] tipc: Enabled bearer , priority 0 [ 294.063492][T13400] tipc: Resetting bearer [ 294.073168][ T4723] Bluetooth: hci2: command tx timeout [ 294.082613][T13400] tipc: Disabling bearer [ 294.180445][T13347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.238042][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.238511][T13347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.249373][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.249950][T13347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.276484][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.276959][T13347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.280240][T13347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.318193][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 294.340053][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.348301][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.359830][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.359878][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.370438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.370487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.386723][T13347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.386760][T13347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.592140][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.618622][T13347] veth0_vlan: entered promiscuous mode [ 294.625101][T13347] veth1_vlan: entered promiscuous mode [ 294.650104][T13347] veth0_macvtap: entered promiscuous mode [ 294.655413][T13347] veth1_macvtap: entered promiscuous mode [ 294.666467][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.669001][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.675510][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.677109][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.679820][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.679905][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.787138][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2887'. [ 294.803192][ T4723] Bluetooth: hci3: command tx timeout [ 295.235079][T13439] Set syz1 is full, maxelem 65536 reached [ 295.383572][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2892'. [ 295.469189][T13491] syzkaller0: entered promiscuous mode [ 295.470921][T13491] syzkaller0: entered allmulticast mode [ 295.583895][T13493] syzkaller0: entered promiscuous mode [ 295.583929][T13493] syzkaller0: entered allmulticast mode [ 295.720678][T13495] xt_bpf: check failed: parse error [ 295.794191][T13498] syzkaller0: entered promiscuous mode [ 295.794221][T13498] syzkaller0: entered allmulticast mode [ 296.873277][ T4723] Bluetooth: hci3: command tx timeout [ 297.313959][T13438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.342336][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.345457][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.373188][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.373229][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.409212][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2901'. [ 297.411317][T13506] 8021q: VLANs not supported on ip_vti0 [ 297.470138][T13514] syzkaller0: entered promiscuous mode [ 297.470180][T13514] syzkaller0: entered allmulticast mode [ 297.539014][T13513] loop0: detected capacity change from 0 to 512 [ 297.551541][T13513] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 297.554790][T13513] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2904: corrupted in-inode xattr: e_value size too large [ 297.554846][T13513] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.555075][T13513] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2904: couldn't read orphan inode 15 (err -117) [ 297.555096][T13513] loop0: lost filesystem error report for type 5 error -117 [ 297.563110][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 297.563157][ C1] EXT4-fs (loop0): initial error at time 297: ext4_iget_extra_inode:5128: inode 15 [ 297.563194][ C1] EXT4-fs (loop0): last error at time 297: ext4_orphan_get:1402 [ 297.573645][T13513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.619654][ T5210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.670088][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2902'. [ 297.750075][T13535] syzkaller0: entered promiscuous mode [ 297.751228][T13535] syzkaller0: entered allmulticast mode [ 298.081292][T13544] syzkaller0: entered promiscuous mode [ 298.082404][T13544] syzkaller0: entered allmulticast mode [ 298.571470][T13569] syzkaller0: entered promiscuous mode [ 298.571503][T13569] syzkaller0: entered allmulticast mode [ 298.797398][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'. [ 298.829111][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2929'. [ 298.953173][ T4723] Bluetooth: hci3: command tx timeout [ 299.714748][T13592] syzkaller0: entered promiscuous mode [ 299.714780][T13592] syzkaller0: entered allmulticast mode [ 299.719454][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2934'. [ 299.719489][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2934'. [ 299.860868][T13596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2936'. [ 299.989255][T13602] syzkaller0: entered promiscuous mode [ 299.989303][T13602] syzkaller0: entered allmulticast mode [ 300.180065][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2942'. [ 300.711429][T13530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.826308][T13618] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 300.832581][T13618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.842766][T13618] macvlan2: entered promiscuous mode [ 300.842800][T13618] macvlan2: entered allmulticast mode [ 300.843804][T13618] bond4: entered promiscuous mode [ 300.844067][T13618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.865507][T13618] bond4: left promiscuous mode [ 301.036193][ T4723] Bluetooth: hci3: command tx timeout [ 301.572281][T13647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2956'. [ 301.695758][T13653] loop0: detected capacity change from 0 to 4096 [ 301.696217][T13653] ext4: Unknown parameter 'nouser_xattr' [ 301.876175][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'. [ 301.877498][T13662] loop0: detected capacity change from 0 to 512 [ 302.931192][T13684] syzkaller0: entered promiscuous mode [ 302.932436][T13684] syzkaller0: entered allmulticast mode [ 303.564318][T13704] syzkaller0: entered promiscuous mode [ 303.564349][T13704] syzkaller0: entered allmulticast mode [ 304.122299][T13710] netlink: 'syz.3.2978': attribute type 4 has an invalid length. [ 304.123935][T13710] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2978'. [ 304.129379][T13710] netlink: zone id is out of range [ 304.130348][T13710] netlink: set zone limit has 8 unknown bytes [ 304.229121][T13721] syzkaller0: entered promiscuous mode [ 304.229159][T13721] syzkaller0: entered allmulticast mode [ 304.278956][T13724] loop3: detected capacity change from 0 to 4096 [ 304.279339][T13724] ext4: Unknown parameter 'nouser_xattr' [ 304.315928][T13726] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2983'. [ 304.417078][T13637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.485816][T13732] loop3: detected capacity change from 0 to 512 [ 305.296300][T13747] syzkaller0: entered promiscuous mode [ 305.296334][T13747] syzkaller0: entered allmulticast mode [ 305.324566][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 305.339425][T13757] syzkaller0: entered promiscuous mode [ 305.340552][T13757] syzkaller0: entered allmulticast mode [ 305.436745][T13766] syzkaller0: entered promiscuous mode [ 305.436786][T13766] syzkaller0: entered allmulticast mode [ 305.467149][T13774] netlink: 'syz.3.2999': attribute type 1 has an invalid length. [ 305.510852][T13774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.561481][T13774] bond1: (slave veth3): Enslaving as an active interface with a down link [ 305.634189][T13774] bond1: (slave dummy0): making interface the new active one [ 305.636336][T13774] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 305.648208][T13774] netlink: 'syz.3.2999': attribute type 10 has an invalid length. [ 305.649733][T13774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2999'. [ 305.668123][T13774] dummy0: entered promiscuous mode [ 305.673631][T13774] bond1: (slave dummy0): Releasing active interface [ 305.718484][T13794] syzkaller0: entered promiscuous mode [ 305.718528][T13794] syzkaller0: entered allmulticast mode [ 305.819714][T13813] tipc: Enabling of bearer rejected, failed to enable media [ 305.955921][T13839] netlink: 'syz.1.3019': attribute type 1 has an invalid length. [ 305.973537][T13839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.975583][T13837] syzkaller0: entered promiscuous mode [ 305.980026][T13837] syzkaller0: entered allmulticast mode [ 306.010481][T13839] macvlan2: entered promiscuous mode [ 306.011691][T13839] macvlan2: entered allmulticast mode [ 306.016159][T13839] bond1: entered promiscuous mode [ 306.016511][T13839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.043900][T13839] bond1: left promiscuous mode [ 306.069826][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'. [ 306.166710][T13858] tipc: Enabled bearer , priority 0 [ 306.167201][T13854] syzkaller0: entered promiscuous mode [ 306.167213][T13854] syzkaller0: entered allmulticast mode [ 306.176282][T13854] tipc: Resetting bearer [ 306.179048][T13853] tipc: Resetting bearer [ 306.184576][T13853] tipc: Disabling bearer [ 306.187791][T13860] syzkaller0: entered promiscuous mode [ 306.188042][T13860] syzkaller0: entered allmulticast mode [ 306.252853][T13869] syzkaller0: entered promiscuous mode [ 306.257593][T13869] syzkaller0: entered allmulticast mode [ 306.261738][T13869] tipc: Enabled bearer , priority 0 [ 306.274765][T13868] tipc: Resetting bearer [ 306.287973][T13868] tipc: Disabling bearer [ 306.408762][T13881] loop2: detected capacity change from 0 to 512 [ 306.417870][T13881] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 306.420434][T13881] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3030: corrupted in-inode xattr: e_value size too large [ 306.420487][T13881] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.420666][T13881] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3030: couldn't read orphan inode 15 (err -117) [ 306.420691][T13881] loop2: lost filesystem error report for type 5 error -117 [ 306.423513][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 306.423528][ C1] EXT4-fs (loop2): initial error at time 306: ext4_iget_extra_inode:5128: inode 15 [ 306.423545][ C1] EXT4-fs (loop2): last error at time 306: ext4_orphan_get:1402 [ 306.424080][T13881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.458414][T13888] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3032'. [ 306.481510][T13889] syzkaller0: entered promiscuous mode [ 306.481550][T13889] syzkaller0: entered allmulticast mode [ 306.506994][T13893] syzkaller0: entered promiscuous mode [ 306.508174][T13893] syzkaller0: entered allmulticast mode [ 306.590912][T13900] syzkaller0: entered promiscuous mode [ 306.590953][T13900] syzkaller0: entered allmulticast mode [ 307.167659][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.723672][T13956] loop3: detected capacity change from 0 to 256 [ 307.724001][T13956] vfat: Bad value for 'shortname' [ 308.384782][T13977] loop4: detected capacity change from 0 to 512 [ 308.407626][T13977] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 308.410404][T13977] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3052: corrupted in-inode xattr: e_value size too large [ 308.410459][T13977] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 308.413093][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 308.413124][ C1] EXT4-fs (loop4): initial error at time 308: ext4_iget_extra_inode:5128: inode 15 [ 308.413163][ C1] EXT4-fs (loop4): last error at time 308: ext4_iget_extra_inode:5128: inode 15 [ 308.424752][T13977] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3052: couldn't read orphan inode 15 (err -117) [ 308.424793][T13977] loop4: lost filesystem error report for type 5 error -117 [ 308.427936][T13977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.931639][T14016] pimreg: entered allmulticast mode [ 308.935972][T14016] pimreg: left allmulticast mode [ 309.140998][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.335282][T14052] loop0: detected capacity change from 0 to 512 [ 309.338161][T14052] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 309.338473][T14052] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3081: corrupted in-inode xattr: e_value size too large [ 309.338504][T14052] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.338782][T14052] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3081: couldn't read orphan inode 15 (err -117) [ 309.338807][T14052] loop0: lost filesystem error report for type 5 error -117 [ 309.339520][T14052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.478524][T14065] loop2: detected capacity change from 0 to 512 [ 309.481444][T14065] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 309.481580][T14065] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3085: corrupted in-inode xattr: e_value size too large [ 309.481616][T14065] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.481759][T14065] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3085: couldn't read orphan inode 15 (err -117) [ 309.481781][T14065] loop2: lost filesystem error report for type 5 error -117 [ 309.482308][T14065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.591799][T14077] syzkaller0: entered promiscuous mode [ 309.596129][T14077] syzkaller0: entered allmulticast mode [ 309.607452][T14077] tipc: Enabled bearer , priority 0 [ 309.615126][T14076] tipc: Resetting bearer [ 309.626477][T14076] tipc: Disabling bearer [ 309.706888][T14088] tipc: Enabling of bearer rejected, failed to enable media [ 309.817529][T14102] syzkaller0: entered promiscuous mode [ 309.818792][T14102] syzkaller0: entered allmulticast mode [ 310.041065][T14121] syzkaller0: entered promiscuous mode [ 310.043256][T14121] syzkaller0: entered allmulticast mode [ 310.084342][ T5210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.114092][T14125] syzkaller0: entered promiscuous mode [ 310.116380][T14125] syzkaller0: entered allmulticast mode [ 310.228982][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.243552][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.654898][T14151] syzkaller0: entered promiscuous mode [ 310.654937][T14151] syzkaller0: entered allmulticast mode [ 310.802513][T14159] syzkaller0: entered promiscuous mode [ 310.803827][T14159] syzkaller0: entered allmulticast mode [ 310.844016][T14161] loop3: detected capacity change from 0 to 4096 [ 310.844827][T14161] ext4: Unknown parameter 'nouser_xattr' [ 310.911547][T14165] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 310.937932][T14167] netlink: 'syz.4.3127': attribute type 4 has an invalid length. [ 310.939484][T14167] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3127'. [ 310.962628][T14164] loop3: detected capacity change from 0 to 512 [ 310.964752][T14168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3126'. [ 310.975852][T14164] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3125: inode has both inline data and extents flags [ 310.975886][T14164] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.976009][T14164] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3125: couldn't read orphan inode 15 (err -117) [ 310.976027][T14164] loop3: lost filesystem error report for type 5 error -117 [ 310.976537][T14164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 311.048390][T14178] netlink: zone id is out of range [ 311.048419][T14178] netlink: set zone limit has 8 unknown bytes [ 311.477507][T14165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.483962][T14174] macvlan2: entered promiscuous mode [ 311.483998][T14174] macvlan2: entered allmulticast mode [ 311.484429][T14174] bond1: entered promiscuous mode [ 311.484605][T14174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.517886][T14174] bond1: left promiscuous mode [ 311.573869][ T5194] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 311.579986][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.581242][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.584337][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.584745][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.584971][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.662079][T14195] loop2: detected capacity change from 0 to 4096 [ 311.671991][T14195] ext4: Unknown parameter 'nouser_xattr' [ 311.707117][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 311.744984][T14198] syzkaller0: entered promiscuous mode [ 311.745026][T14198] syzkaller0: entered allmulticast mode [ 311.820613][T14186] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.864076][T14186] bridge_slave_0 (unregistering): left allmulticast mode [ 311.864116][T14186] bridge_slave_0 (unregistering): left promiscuous mode [ 311.864153][T14186] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.898947][T14205] loop2: detected capacity change from 0 to 512 [ 311.908751][T14205] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3131: inode has both inline data and extents flags [ 311.908785][T14205] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.908890][T14205] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3131: couldn't read orphan inode 15 (err -117) [ 311.908904][T14205] loop2: lost filesystem error report for type 5 error -117 [ 311.909432][T14205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 312.130390][T14191] macvtap1: entered allmulticast mode [ 312.130424][T14191] dummy0: entered allmulticast mode [ 312.130501][T14191] dummy0: entered promiscuous mode [ 312.134739][T14191] dummy0: left allmulticast mode [ 312.206218][ T4714] dummy0: left promiscuous mode [ 312.224848][T14220] syzkaller0: entered promiscuous mode [ 312.224888][T14220] syzkaller0: entered allmulticast mode [ 312.409417][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.411562][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.411677][T14187] bridge_slave_0: entered allmulticast mode [ 312.413154][T14187] bridge_slave_0: entered promiscuous mode [ 312.416066][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.416207][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.416307][T14187] bridge_slave_1: entered allmulticast mode [ 312.417930][T14187] bridge_slave_1: entered promiscuous mode [ 312.438971][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.441336][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.457704][T14187] team0: Port device team_slave_0 added [ 312.460058][T14187] team0: Port device team_slave_1 added [ 312.477915][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.477952][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.477969][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.478501][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.478508][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.478524][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.045442][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 313.112322][T14256] loop2: detected capacity change from 0 to 4096 [ 313.112742][T14256] ext4: Unknown parameter 'nouser_xattr' [ 313.242364][T14257] loop2: detected capacity change from 0 to 512 [ 313.255928][T14257] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3142: inode has both inline data and extents flags [ 313.255974][T14257] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.258448][T14257] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3142: couldn't read orphan inode 15 (err -117) [ 313.258493][T14257] loop2: lost filesystem error report for type 5 error -117 [ 313.263091][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 313.263109][ C0] EXT4-fs (loop2): initial error at time 313: ext4_orphan_get:1397: inode 15 [ 313.263128][ C0] EXT4-fs (loop2): last error at time 313: ext4_orphan_get:1402 [ 313.279050][T14257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 313.406747][T14187] hsr_slave_0: entered promiscuous mode [ 313.408394][T14187] hsr_slave_1: entered promiscuous mode [ 313.408649][T14187] debugfs: 'hsr0' already exists in 'hsr' [ 313.408661][T14187] Cannot create hsr debugfs directory [ 313.419804][T14235] syzkaller0: entered promiscuous mode [ 313.419889][T14235] syzkaller0: entered allmulticast mode [ 313.593832][ T4720] Bluetooth: hci1: command tx timeout [ 313.963706][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 313.998559][T14269] syzkaller0: entered promiscuous mode [ 313.998599][T14269] syzkaller0: entered allmulticast mode [ 314.007150][T14276] syzkaller0: entered promiscuous mode [ 314.007186][T14276] syzkaller0: entered allmulticast mode [ 314.534498][T14286] syzkaller0: entered promiscuous mode [ 314.534535][T14286] syzkaller0: entered allmulticast mode [ 315.455190][T14306] loop3: detected capacity change from 0 to 4096 [ 315.456938][T14306] ext4: Unknown parameter 'nouser_xattr' [ 315.630886][T14308] loop3: detected capacity change from 0 to 512 [ 315.666682][T14308] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3150: inode has both inline data and extents flags [ 315.666721][T14308] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 315.667955][T14308] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3150: couldn't read orphan inode 15 (err -117) [ 315.667981][T14308] loop3: lost filesystem error report for type 5 error -117 [ 315.674197][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 315.674208][ C1] EXT4-fs (loop3): initial error at time 315: ext4_orphan_get:1397: inode 15 [ 315.674223][ C1] EXT4-fs (loop3): last error at time 315: ext4_orphan_get:1397: inode 15 [ 315.680426][T14308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 315.683196][ T4720] Bluetooth: hci1: command tx timeout [ 316.245323][T14187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.260994][T14314] tipc: Started in network mode [ 316.261037][T14314] tipc: Node identity c699c6e1e247, cluster identity 4711 [ 316.261107][T14314] tipc: Enabled bearer , priority 0 [ 316.261731][T14314] syzkaller0: entered promiscuous mode [ 316.261753][T14314] syzkaller0: entered allmulticast mode [ 316.286037][T14314] tipc: Resetting bearer [ 316.312102][T14313] tipc: Resetting bearer [ 316.324049][T14313] tipc: Disabling bearer [ 316.357935][T14187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.465790][T14187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.544099][T14338] syzkaller0: entered promiscuous mode [ 316.544158][T14338] syzkaller0: entered allmulticast mode [ 316.549584][T14340] tipc: Started in network mode [ 316.549840][T14340] tipc: Node identity 6a17295882a1, cluster identity 4711 [ 316.549905][T14340] tipc: Enabled bearer , priority 0 [ 316.550507][T14340] syzkaller0: entered promiscuous mode [ 316.550519][T14340] syzkaller0: entered allmulticast mode [ 316.558740][T14340] tipc: Resetting bearer [ 316.713546][T14339] tipc: Resetting bearer [ 316.724053][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 316.751866][T14339] tipc: Disabling bearer [ 316.790347][T14187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.841466][T14342] syzkaller0: entered promiscuous mode [ 316.842645][T14342] syzkaller0: entered allmulticast mode [ 316.846097][T14347] syzkaller0: entered promiscuous mode [ 316.847308][T14347] syzkaller0: entered allmulticast mode [ 317.763142][ T4720] Bluetooth: hci1: command tx timeout [ 317.818565][T14355] tipc: Started in network mode [ 317.818611][T14355] tipc: Node identity aa2e77ecff16, cluster identity 4711 [ 317.818682][T14355] tipc: Enabled bearer , priority 0 [ 317.819393][T14356] syzkaller0: entered promiscuous mode [ 317.819404][T14356] syzkaller0: entered allmulticast mode [ 317.831125][T14363] tipc: Resetting bearer [ 317.837259][T14352] tipc: Resetting bearer [ 317.843758][T14352] tipc: Disabling bearer [ 317.867616][T14187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.884992][T14187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.885321][T14187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.893717][T14187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.896618][T14187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.904951][T14187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.905408][T14187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.909198][T14187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.958876][T14376] tipc: Enabled bearer , priority 0 [ 317.992037][T14389] loop2: detected capacity change from 0 to 4096 [ 317.993961][T14389] ext4: Unknown parameter 'nouser_xattr' [ 317.995823][T14375] tipc: Disabling bearer [ 318.069563][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.098717][T14187] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.234567][T14398] loop2: detected capacity change from 0 to 512 [ 319.066796][T14187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.071036][T14187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.074983][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.075031][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.075580][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.075619][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.394592][T14398] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3171: inode has both inline data and extents flags [ 319.394632][T14398] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.397055][T14398] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3171: couldn't read orphan inode 15 (err -117) [ 319.397070][T14398] loop2: lost filesystem error report for type 5 error -117 [ 319.414889][T14398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 319.617599][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 319.835997][ T4720] Bluetooth: hci1: command tx timeout [ 320.249966][T14187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.279213][T14438] syzkaller0: entered promiscuous mode [ 320.279248][T14438] syzkaller0: entered allmulticast mode [ 320.280890][T14438] tipc: Enabled bearer , priority 0 [ 320.283754][T14436] tipc: Resetting bearer [ 320.385155][T14444] loop1: detected capacity change from 0 to 512 [ 320.876963][T14436] tipc: Disabling bearer [ 321.236889][T14444] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 321.236948][T14444] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.3180: corrupted in-inode xattr: e_value size too large [ 321.236975][T14444] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.241494][T14444] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3180: couldn't read orphan inode 15 (err -117) [ 321.241529][T14444] loop1: lost filesystem error report for type 5 error -117 [ 321.243193][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 321.243208][ C1] EXT4-fs (loop1): initial error at time 321: ext4_iget_extra_inode:5128: inode 15 [ 321.243224][ C1] EXT4-fs (loop1): last error at time 321: ext4_orphan_get:1402 [ 321.253334][T14444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.321759][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3184'. [ 321.385446][T14187] veth0_vlan: entered promiscuous mode [ 321.397130][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.414512][T14187] veth1_vlan: entered promiscuous mode [ 321.948942][T14187] veth0_macvtap: entered promiscuous mode [ 321.950677][T14466] tipc: Enabled bearer , priority 0 [ 321.952162][T14187] veth1_macvtap: entered promiscuous mode [ 321.957003][T14187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.958061][T14187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.959696][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.961512][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.966782][T14475] tipc: Resetting bearer [ 321.975068][T14465] tipc: Disabling bearer [ 321.989016][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.989071][ T1169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.010638][T14477] syzkaller0: entered promiscuous mode [ 322.010671][T14477] syzkaller0: entered allmulticast mode [ 322.044978][T14479] syzkaller0: entered promiscuous mode [ 322.045019][T14479] syzkaller0: entered allmulticast mode [ 322.057028][T14479] tipc: Enabled bearer , priority 0 [ 322.061071][T14478] tipc: Resetting bearer [ 322.070181][T14478] tipc: Disabling bearer [ 322.077291][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.077309][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.095146][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.095179][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.403184][T14507] loop4: detected capacity change from 0 to 512 [ 322.552893][T14507] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 322.558318][T14507] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3197: corrupted in-inode xattr: e_value size too large [ 322.558382][T14507] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 322.563110][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 322.563136][ C1] EXT4-fs (loop4): initial error at time 322: ext4_iget_extra_inode:5128: inode 15 [ 322.563172][ C1] EXT4-fs (loop4): last error at time 322: ext4_iget_extra_inode:5128: inode 15 [ 322.573843][T14507] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3197: couldn't read orphan inode 15 (err -117) [ 322.573906][T14507] loop4: lost filesystem error report for type 5 error -117 [ 322.589187][T14507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.190094][T14510] syzkaller0: entered promiscuous mode [ 323.190132][T14510] syzkaller0: entered allmulticast mode [ 323.209756][T14519] syzkaller0: entered promiscuous mode [ 323.212061][T14519] syzkaller0: entered allmulticast mode [ 323.232308][T14514] tipc: Enabled bearer , priority 0 [ 323.261082][T14484] tipc: Resetting bearer [ 323.263306][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.300671][T14484] tipc: Disabling bearer [ 323.348434][T14528] syzkaller0: entered promiscuous mode [ 323.348475][T14528] syzkaller0: entered allmulticast mode [ 323.352890][T14528] tipc: Enabled bearer , priority 0 [ 323.363645][T14526] tipc: Resetting bearer [ 323.409237][T14526] tipc: Disabling bearer [ 323.508266][T14550] syzkaller0: entered promiscuous mode [ 323.508303][T14550] syzkaller0: entered allmulticast mode [ 323.708208][T14561] loop3: detected capacity change from 0 to 512 [ 324.008802][T14561] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 324.022291][T14561] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.3211: corrupted in-inode xattr: e_value size too large [ 324.022372][T14561] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.025670][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 324.025687][ C1] EXT4-fs (loop3): initial error at time 324: ext4_iget_extra_inode:5128: inode 15 [ 324.025704][ C1] EXT4-fs (loop3): last error at time 324: ext4_iget_extra_inode:5128: inode 15 [ 324.044233][T14561] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3211: couldn't read orphan inode 15 (err -117) [ 324.044309][T14561] loop3: lost filesystem error report for type 5 error -117 [ 324.058029][T14561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.644029][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.692245][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3216'. [ 324.709383][T14566] tipc: Started in network mode [ 324.709422][T14566] tipc: Node identity 7660cc52d91d, cluster identity 4711 [ 324.709502][T14566] tipc: Enabled bearer , priority 0 [ 324.712103][T14567] syzkaller0: entered promiscuous mode [ 324.712121][T14567] syzkaller0: entered allmulticast mode [ 324.730959][T14560] tipc: Resetting bearer [ 324.737258][T14559] tipc: Resetting bearer [ 324.750365][T14559] tipc: Disabling bearer [ 324.770560][T14578] syzkaller0: entered promiscuous mode [ 324.771663][T14578] syzkaller0: entered allmulticast mode [ 324.828129][T14585] syzkaller0: entered promiscuous mode [ 324.828170][T14585] syzkaller0: entered allmulticast mode [ 324.831224][T14580] tipc: Enabled bearer , priority 0 [ 324.832409][T14585] tipc: Enabled bearer , priority 0 [ 324.837499][T14579] tipc: Disabling bearer [ 324.839681][T14583] tipc: Resetting bearer [ 324.854588][T14583] tipc: Disabling bearer [ 325.020936][T14590] loop4: detected capacity change from 0 to 512 [ 326.047207][T14590] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3222: inode has both inline data and extents flags [ 326.047366][T14590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.052405][T14590] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3222: couldn't read orphan inode 15 (err -117) [ 326.052503][T14590] loop4: lost filesystem error report for type 5 error -117 [ 326.053108][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 326.053130][ C1] EXT4-fs (loop4): initial error at time 326: ext4_orphan_get:1397: inode 15 [ 326.053171][ C1] EXT4-fs (loop4): last error at time 326: ext4_orphan_get:1402 [ 326.060330][T14590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 326.770500][T14617] loop3: detected capacity change from 0 to 512 [ 326.802137][T14617] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 326.809470][T14617] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.3227: corrupted in-inode xattr: e_value size too large [ 326.809551][T14617] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.813099][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 326.813125][ C1] EXT4-fs (loop3): initial error at time 326: ext4_iget_extra_inode:5128: inode 15 [ 326.813154][ C1] EXT4-fs (loop3): last error at time 326: ext4_iget_extra_inode:5128: inode 15 [ 326.823173][T14617] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3227: couldn't read orphan inode 15 (err -117) [ 326.823233][T14617] loop3: lost filesystem error report for type 5 error -117 [ 327.180228][T14617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.314153][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 327.395954][T14627] loop1: detected capacity change from 0 to 1024 [ 327.399495][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3230'. [ 327.403496][T14627] EXT4-fs: Ignoring removed bh option [ 327.403547][T14627] EXT4-fs: Ignoring removed bh option [ 327.429490][T14627] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 327.500398][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.503451][T14627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.122991][T14656] syzkaller0: refused to change device tx_queue_len [ 328.140484][T14665] syzkaller0: entered promiscuous mode [ 328.141057][T14665] syzkaller0: entered allmulticast mode [ 328.321256][T14684] netlink: 'syz.0.3250': attribute type 8 has an invalid length. [ 328.321292][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3250'. [ 328.323761][T14684] veth1_to_team: entered promiscuous mode [ 328.324394][T14684] gretap0: entered promiscuous mode [ 328.325139][T14684] veth1_to_team: left promiscuous mode [ 328.326270][T14684] gretap0: left promiscuous mode [ 328.473871][T14691] loop2: detected capacity change from 0 to 512 [ 329.355791][T14691] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 329.358162][T14691] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3247: corrupted in-inode xattr: e_value size too large [ 329.358230][T14691] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.361471][T14691] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3247: couldn't read orphan inode 15 (err -117) [ 329.361529][T14691] loop2: lost filesystem error report for type 5 error -117 [ 329.363439][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 329.363454][ C1] EXT4-fs (loop2): initial error at time 329: ext4_iget_extra_inode:5128: inode 15 [ 329.363470][ C1] EXT4-fs (loop2): last error at time 329: ext4_orphan_get:1402 [ 329.376912][T14691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.567513][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.575555][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.598615][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3258'. [ 329.623552][T14707] syzkaller0: entered promiscuous mode [ 329.623595][T14707] syzkaller0: entered allmulticast mode [ 329.654053][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3259'. [ 329.738944][T14723] loop1: detected capacity change from 0 to 256 [ 329.740551][T14723] vfat: Bad value for 'shortname' [ 330.369175][T14730] syzkaller0: entered promiscuous mode [ 330.369217][T14730] syzkaller0: entered allmulticast mode [ 330.370103][T14737] tipc: Enabled bearer , priority 0 [ 330.376387][T14735] syzkaller0: entered promiscuous mode [ 330.376418][T14735] syzkaller0: entered allmulticast mode [ 330.379072][T14713] tipc: Resetting bearer [ 330.386880][T14713] tipc: Disabling bearer [ 330.502787][T14751] loop3: detected capacity change from 0 to 1024 [ 330.504800][T14751] EXT4-fs: Ignoring removed bh option [ 330.504828][T14751] EXT4-fs: Ignoring removed bh option [ 330.506179][T14751] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 331.495445][T14751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.119985][T14749] loop2: detected capacity change from 0 to 512 [ 332.187378][T14749] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 332.190302][T14749] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3266: corrupted in-inode xattr: e_value size too large [ 332.190358][T14749] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.190690][T14749] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3266: couldn't read orphan inode 15 (err -117) [ 332.190708][T14749] loop2: lost filesystem error report for type 5 error -117 [ 332.191219][T14749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.341683][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.743331][T14770] bridge_slave_1: left allmulticast mode [ 332.744776][T14770] bridge_slave_1: left promiscuous mode [ 332.745983][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.761344][T14770] bridge_slave_0: left allmulticast mode [ 332.763510][T14770] bridge_slave_0: left promiscuous mode [ 332.763633][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.778736][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 332.811229][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.860875][T14779] syzkaller0: entered promiscuous mode [ 332.869021][T14779] syzkaller0: entered allmulticast mode [ 332.873410][T14781] syzkaller0: entered promiscuous mode [ 332.873446][T14781] syzkaller0: entered allmulticast mode [ 333.105776][T14797] loop1: detected capacity change from 0 to 512 [ 333.282876][T14797] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 333.288248][T14797] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.3280: corrupted in-inode xattr: e_value size too large [ 333.288312][T14797] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.293101][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 333.293137][ C1] EXT4-fs (loop1): initial error at time 333: ext4_iget_extra_inode:5128: inode 15 [ 333.293178][ C1] EXT4-fs (loop1): last error at time 333: ext4_iget_extra_inode:5128: inode 15 [ 333.300499][T14797] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3280: couldn't read orphan inode 15 (err -117) [ 333.300558][T14797] loop1: lost filesystem error report for type 5 error -117 [ 333.311834][T14797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.941180][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.344989][T14817] geneve2: entered promiscuous mode [ 334.451252][T14826] syzkaller0: entered promiscuous mode [ 334.451289][T14826] syzkaller0: entered allmulticast mode [ 334.454637][T14828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3288'. [ 334.458760][T14830] loop3: detected capacity change from 0 to 512 [ 334.461030][T14833] tipc: Enabling of bearer rejected, failed to enable media [ 334.468135][T14830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 334.496293][T14830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.534748][T14839] tipc: Enabled bearer , priority 0 [ 334.541751][T14837] tipc: Disabling bearer [ 334.684872][T14848] loop2: detected capacity change from 0 to 512 [ 334.714995][T14848] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 334.717218][T14848] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3293: corrupted in-inode xattr: e_value size too large [ 334.717278][T14848] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 334.722561][T14848] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3293: couldn't read orphan inode 15 (err -117) [ 334.722624][T14848] loop2: lost filesystem error report for type 5 error -117 [ 334.724549][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 334.724564][ C1] EXT4-fs (loop2): initial error at time 334: ext4_iget_extra_inode:5128: inode 15 [ 334.724589][ C1] EXT4-fs (loop2): last error at time 334: ext4_orphan_get:1402 [ 334.741032][T14848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.417134][T14852] tipc: Enabled bearer , priority 0 [ 335.420245][T14852] syzkaller0: entered promiscuous mode [ 335.421653][T14852] syzkaller0: entered allmulticast mode [ 335.441082][T14853] syzkaller0: entered promiscuous mode [ 335.442423][T14853] syzkaller0: entered allmulticast mode [ 335.447831][T14852] tipc: Resetting bearer [ 335.451343][T14851] tipc: Resetting bearer [ 335.458843][T14851] tipc: Disabling bearer [ 335.484747][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.566054][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.097692][T14857] tipc: Enabled bearer , priority 17 [ 336.105588][T14866] syzkaller0: entered promiscuous mode [ 336.105618][T14866] syzkaller0: entered allmulticast mode [ 336.173966][T14891] syzkaller0: entered promiscuous mode [ 336.173998][T14891] syzkaller0: entered allmulticast mode [ 336.194337][T14896] netlink: 'syz.2.3306': attribute type 8 has an invalid length. [ 336.195751][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 336.289203][T14900] tipc: Enabled bearer , priority 0 [ 336.298482][T14899] tipc: Disabling bearer [ 336.300847][T14902] syzkaller0: entered promiscuous mode [ 336.300878][T14902] syzkaller0: entered allmulticast mode [ 336.336365][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3311'. [ 336.489485][T14918] loop0: detected capacity change from 0 to 512 [ 336.507804][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 336.674308][T14918] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 336.680700][T14918] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3310: corrupted in-inode xattr: e_value size too large [ 336.680772][T14918] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.683677][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 336.683688][ C1] EXT4-fs (loop0): initial error at time 336: ext4_iget_extra_inode:5128: inode 15 [ 336.683704][ C1] EXT4-fs (loop0): last error at time 336: ext4_iget_extra_inode:5128: inode 15 [ 336.698959][T14918] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3310: couldn't read orphan inode 15 (err -117) [ 336.699023][T14918] loop0: lost filesystem error report for type 5 error -117 [ 336.711921][T14918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.241305][ T4688] tipc: Node number set to 1552793119 [ 337.263328][T14925] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.338806][ T5210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.374606][T14931] netlink: 'syz.4.3318': attribute type 8 has an invalid length. [ 337.374642][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 337.464083][T14945] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 337.471411][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 337.600436][T14955] tipc: Enabled bearer , priority 0 [ 337.612200][T14957] syzkaller0: entered promiscuous mode [ 337.613378][T14957] syzkaller0: entered allmulticast mode [ 337.626806][T14958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 337.634230][T14948] tipc: Disabling bearer [ 337.757116][T14969] loop4: detected capacity change from 0 to 4096 [ 337.758905][T14969] ext4: Unknown parameter 'nouser_xattr' [ 337.895606][T14971] loop1: detected capacity change from 0 to 512 [ 338.080285][T14971] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 338.086242][T14971] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.3330: corrupted in-inode xattr: e_value size too large [ 338.086307][T14971] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 338.092230][T14971] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3330: couldn't read orphan inode 15 (err -117) [ 338.092290][T14971] loop1: lost filesystem error report for type 5 error -117 [ 338.094272][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 338.094286][ C1] EXT4-fs (loop1): initial error at time 338: ext4_iget_extra_inode:5128: inode 15 [ 338.094308][ C1] EXT4-fs (loop1): last error at time 338: ext4_orphan_get:1402 [ 338.115196][T14971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.746143][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.752320][T14974] loop4: detected capacity change from 0 to 512 [ 338.783651][T14974] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3332: inode has both inline data and extents flags [ 338.783690][T14974] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 338.786811][T14974] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3332: couldn't read orphan inode 15 (err -117) [ 338.790211][T14974] loop4: lost filesystem error report for type 5 error -117 [ 338.792678][T14974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 339.239705][T14988] syzkaller0: entered promiscuous mode [ 339.239800][T14988] syzkaller0: entered allmulticast mode [ 339.241125][T14983] syzkaller0: entered promiscuous mode [ 339.241255][T14983] syzkaller0: entered allmulticast mode [ 339.242050][T14986] tipc: Enabled bearer , priority 0 [ 339.249952][T14975] tipc: Resetting bearer [ 339.270760][T14975] tipc: Disabling bearer [ 339.864954][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 339.951085][T15029] netlink: 'syz.4.3340': attribute type 1 has an invalid length. [ 340.073838][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 340.082754][T15029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.087526][T15030] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 340.089408][T15031] macvlan2: entered promiscuous mode [ 340.089576][T15031] macvlan2: entered allmulticast mode [ 340.199391][T15044] syzkaller0: entered promiscuous mode [ 340.199438][T15044] syzkaller0: entered allmulticast mode [ 340.244177][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3347'. [ 340.346310][T15048] loop2: detected capacity change from 0 to 512 [ 340.534545][T15048] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 340.541204][T15048] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3343: corrupted in-inode xattr: e_value size too large [ 340.541278][T15048] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 340.544336][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 340.544350][ C1] EXT4-fs (loop2): initial error at time 340: ext4_iget_extra_inode:5128: inode 15 [ 340.544368][ C1] EXT4-fs (loop2): last error at time 340: ext4_iget_extra_inode:5128: inode 15 [ 340.555832][T15048] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3343: couldn't read orphan inode 15 (err -117) [ 340.555893][T15048] loop2: lost filesystem error report for type 5 error -117 [ 340.567567][T15048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.181886][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.747125][T15079] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3352'. [ 341.752137][T15080] netlink: 'syz.3.3353': attribute type 1 has an invalid length. [ 341.761948][T15074] loop0: detected capacity change from 0 to 4096 [ 341.762361][T15074] ext4: Unknown parameter 'nouser_xattr' [ 341.770796][T15080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.804331][T15080] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 341.825346][T15085] syzkaller0: entered promiscuous mode [ 341.831602][T15085] syzkaller0: entered allmulticast mode [ 341.856586][T15080] macvlan2: entered promiscuous mode [ 341.856621][T15080] macvlan2: entered allmulticast mode [ 342.076436][T15106] loop4: detected capacity change from 0 to 512 [ 342.937728][T15101] loop0: detected capacity change from 0 to 512 [ 342.944038][T15106] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 342.946159][T15106] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3358: corrupted in-inode xattr: e_value size too large [ 342.946203][T15106] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.948729][T15106] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3358: couldn't read orphan inode 15 (err -117) [ 342.948760][T15106] loop4: lost filesystem error report for type 5 error -117 [ 342.950840][T15106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.966337][T15101] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.3350: inode has both inline data and extents flags [ 342.966377][T15101] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.966869][T15101] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3350: couldn't read orphan inode 15 (err -117) [ 342.966893][T15101] loop0: lost filesystem error report for type 5 error -117 [ 342.967526][T15101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 343.100049][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.201548][ T5210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 343.708094][T15150] loop3: detected capacity change from 0 to 1024 [ 343.711476][T15150] EXT4-fs: Ignoring removed bh option [ 343.712544][T15150] EXT4-fs: Ignoring removed bh option [ 343.714928][T15150] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 343.718286][T15149] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 343.719756][T15148] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 343.722421][T15148] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.750226][T15149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.754681][T15150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.760626][T15151] syzkaller0: entered promiscuous mode [ 343.760657][T15151] syzkaller0: entered allmulticast mode [ 343.767724][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 343.781496][T15158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3373'. [ 343.788132][T15149] bond1: (slave veth0_to_bond): Releasing backup interface [ 343.806441][T15149] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 343.816133][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 343.973844][T15149] macvlan3: entered promiscuous mode [ 343.973873][T15149] macvlan3: entered allmulticast mode [ 343.974123][T15167] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3376'. [ 344.024356][T15169] syzkaller0: entered promiscuous mode [ 344.024393][T15169] syzkaller0: entered allmulticast mode [ 344.061353][T15175] syzkaller0: entered promiscuous mode [ 344.061394][T15175] syzkaller0: entered allmulticast mode [ 344.484472][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.211640][T15202] syzkaller0: entered promiscuous mode [ 345.211677][T15202] syzkaller0: entered allmulticast mode [ 345.222634][T15209] syzkaller0: entered promiscuous mode [ 345.222664][T15209] syzkaller0: entered allmulticast mode [ 345.232853][T15209] tipc: Enabled bearer , priority 0 [ 345.236328][T15208] tipc: Resetting bearer [ 345.247349][T15208] tipc: Disabling bearer [ 345.306097][T15213] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 345.325180][T15213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.357909][T15213] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 345.378066][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 345.379994][T15213] macvlan2: entered promiscuous mode [ 345.380023][T15213] macvlan2: entered allmulticast mode [ 345.445613][T15231] syzkaller0: entered promiscuous mode [ 345.445658][T15231] syzkaller0: entered allmulticast mode [ 345.449695][T15224] syzkaller0: entered promiscuous mode [ 345.454752][T15224] syzkaller0: entered allmulticast mode [ 345.495762][T15235] syzkaller0: entered promiscuous mode [ 345.500295][T15235] syzkaller0: entered allmulticast mode [ 345.502097][T15233] tipc: Enabling of bearer rejected, failed to enable media [ 346.676259][T15271] tipc: Enabling of bearer rejected, failed to enable media [ 346.851742][T15294] syzkaller0: entered promiscuous mode [ 346.851775][T15294] syzkaller0: entered allmulticast mode [ 346.855184][T15297] syzkaller0: entered promiscuous mode [ 346.856472][T15297] syzkaller0: entered allmulticast mode [ 347.747728][T15328] syzkaller0: entered promiscuous mode [ 347.748965][T15328] syzkaller0: entered allmulticast mode [ 347.751428][T15328] tipc: Enabled bearer , priority 0 [ 347.754758][T15327] tipc: Resetting bearer [ 347.767869][T15327] tipc: Disabling bearer [ 348.129778][T15363] loop3: detected capacity change from 0 to 512 [ 348.348707][T15363] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 348.356693][T15363] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.3429: corrupted in-inode xattr: e_value size too large [ 348.356758][T15363] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.363114][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 348.363142][ C1] EXT4-fs (loop3): initial error at time 348: ext4_iget_extra_inode:5128: inode 15 [ 348.363181][ C1] EXT4-fs (loop3): last error at time 348: ext4_iget_extra_inode:5128: inode 15 [ 348.370396][T15363] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3429: couldn't read orphan inode 15 (err -117) [ 348.370459][T15363] loop3: lost filesystem error report for type 5 error -117 [ 348.382719][T15363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.852174][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3435'. [ 348.952337][T15372] syzkaller0: entered promiscuous mode [ 348.953657][T15372] syzkaller0: entered allmulticast mode [ 348.974990][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.081678][T15385] tipc: Enabled bearer , priority 0 [ 349.084596][T15384] tipc: Disabling bearer [ 349.095372][T15390] syzkaller0: entered promiscuous mode [ 349.096528][T15390] syzkaller0: entered allmulticast mode [ 349.775707][T15402] tipc: Enabled bearer , priority 0 [ 349.798918][T15401] tipc: Disabling bearer [ 349.945962][T15419] tipc: Enabled bearer , priority 0 [ 349.948561][T15418] tipc: Disabling bearer [ 350.007292][T15420] loop0: detected capacity change from 0 to 512 [ 350.065954][T15420] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 350.066123][T15420] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3450: corrupted in-inode xattr: e_value size too large [ 350.066143][T15420] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 350.066335][T15420] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3450: couldn't read orphan inode 15 (err -117) [ 350.066358][T15420] loop0: lost filesystem error report for type 5 error -117 [ 350.066926][T15420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.670306][T15425] netlink: 'syz.4.3458': attribute type 1 has an invalid length. [ 350.703163][T15425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.732365][T15425] bond2: (slave veth0_to_bond): Releasing backup interface [ 350.775472][T15425] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 350.794156][T15431] macvlan4: entered promiscuous mode [ 350.794191][T15431] macvlan4: entered allmulticast mode [ 350.850238][ T5210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.868025][T15434] syzkaller0: entered promiscuous mode [ 350.868044][T15434] syzkaller0: entered allmulticast mode [ 350.949774][T15441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3464'. [ 351.568157][T15458] syzkaller0: entered promiscuous mode [ 351.569654][T15458] syzkaller0: entered allmulticast mode [ 351.921277][T15491] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 352.214099][T15488] syzkaller0: entered promiscuous mode [ 352.214132][T15488] syzkaller0: entered allmulticast mode [ 352.220216][T15491] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.221001][T15492] tipc: Enabled bearer , priority 0 [ 352.222839][T15493] bond1: (slave veth0_to_bond): Releasing backup interface [ 352.247601][T15493] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 352.249410][T15494] macvlan2: entered promiscuous mode [ 352.249442][T15494] macvlan2: entered allmulticast mode [ 352.252476][T15474] tipc: Resetting bearer [ 352.271239][T15474] tipc: Disabling bearer [ 352.327483][T15502] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3475'. [ 352.473183][T15510] loop1: detected capacity change from 0 to 512 [ 352.493304][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3477'. [ 352.724653][T15510] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 352.730844][T15510] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.3474: corrupted in-inode xattr: e_value size too large [ 352.730908][T15510] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 352.733641][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 352.733654][ C1] EXT4-fs (loop1): initial error at time 352: ext4_iget_extra_inode:5128: inode 15 [ 352.733670][ C1] EXT4-fs (loop1): last error at time 352: ext4_iget_extra_inode:5128: inode 15 [ 352.739503][T15510] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3474: couldn't read orphan inode 15 (err -117) [ 352.739539][T15510] loop1: lost filesystem error report for type 5 error -117 [ 352.746925][T15510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.294778][T15519] syzkaller0: entered promiscuous mode [ 353.294818][T15519] syzkaller0: entered allmulticast mode [ 353.307679][T15521] syzkaller0: entered promiscuous mode [ 353.308765][T15521] syzkaller0: entered allmulticast mode [ 353.346520][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.503346][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 353.663226][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 353.666489][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 353.666536][ T24] usb 1-1: config 0 has no interface number 0 [ 353.671074][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 353.671105][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.671132][ T24] usb 1-1: Product: syz [ 353.671147][ T24] usb 1-1: Manufacturer: syz [ 353.671161][ T24] usb 1-1: SerialNumber: syz [ 353.680165][ T24] usb 1-1: config 0 descriptor?? [ 353.685594][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 353.893323][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 353.896417][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 354.004202][T15545] syzkaller0: entered promiscuous mode [ 354.005433][T15545] syzkaller0: entered allmulticast mode [ 354.099724][T15559] netlink: 'syz.2.3486': attribute type 1 has an invalid length. [ 354.295313][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 354.297235][ T24] usb 1-1: USB disconnect, device number 12 [ 354.307731][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 354.318435][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 354.321638][ T24] quatech2 1-1:0.51: device disconnected [ 354.629861][T15559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.633482][T15564] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 354.637067][T15567] macvlan2: entered promiscuous mode [ 354.637091][T15567] macvlan2: entered allmulticast mode [ 354.645437][T15570] syzkaller0: entered promiscuous mode [ 354.646536][T15570] syzkaller0: entered allmulticast mode [ 355.411814][T15619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 355.411840][T15619] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 355.415372][T15619] vhci_hcd vhci_hcd.0: Device attached [ 355.456852][T15623] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 355.466957][T15623] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.471155][T15625] syzkaller0: entered promiscuous mode [ 355.471187][T15625] syzkaller0: entered allmulticast mode [ 355.476616][T15620] vhci_hcd: connection closed [ 355.477624][ T5193] vhci_hcd vhci_hcd.4: stop threads [ 355.477655][ T5193] vhci_hcd vhci_hcd.4: release socket [ 355.477674][ T5193] vhci_hcd vhci_hcd.4: disconnect device [ 355.480781][T15623] bond5: (slave veth0_to_bond): Releasing backup interface [ 355.500027][T15629] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 355.516226][T15623] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 355.555057][T15623] macvlan3: entered promiscuous mode [ 355.556099][T15623] macvlan3: entered allmulticast mode [ 355.611541][T15637] loop0: detected capacity change from 0 to 4096 [ 355.614881][T15637] ext4: Unknown parameter 'nouser_xattr' [ 355.808461][T15645] loop0: detected capacity change from 0 to 512 [ 356.538317][T15649] syzkaller0: entered promiscuous mode [ 356.544548][T15649] syzkaller0: entered allmulticast mode [ 356.732930][T15663] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 356.801503][T15663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.806133][T15660] bond3: (slave veth0_to_bond): Releasing backup interface [ 356.838836][T15660] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 356.863682][T15660] macvlan5: entered promiscuous mode [ 356.863719][T15660] macvlan5: entered allmulticast mode [ 356.874776][T15672] syzkaller0: entered promiscuous mode [ 356.875991][T15672] syzkaller0: entered allmulticast mode [ 356.986771][T15684] syzkaller0: entered promiscuous mode [ 356.986809][T15684] syzkaller0: entered allmulticast mode [ 356.987454][T15684] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 357.018033][T15686] loop0: detected capacity change from 0 to 4096 [ 357.019787][T15686] ext4: Unknown parameter 'nouser_xattr' [ 357.079518][T15688] syzkaller0: entered promiscuous mode [ 357.079554][T15688] syzkaller0: entered allmulticast mode [ 357.228526][T15694] loop0: detected capacity change from 0 to 512 [ 357.929419][T15700] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3530'. [ 358.027697][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3533'. [ 358.132055][T15710] syzkaller0: entered promiscuous mode [ 358.133469][T15710] syzkaller0: entered allmulticast mode [ 358.140071][T15714] syzkaller0: entered promiscuous mode [ 358.140101][T15714] syzkaller0: entered allmulticast mode [ 358.156356][T15716] tipc: Enabled bearer , priority 0 [ 358.165541][T15715] tipc: Disabling bearer [ 358.231537][T15727] syzkaller0: entered promiscuous mode [ 358.232556][T15727] syzkaller0: entered allmulticast mode [ 358.412411][T15745] syzkaller0: entered promiscuous mode [ 358.412455][T15745] syzkaller0: entered allmulticast mode [ 358.416709][T15749] tipc: Enabled bearer , priority 0 [ 358.418684][T15748] tipc: Disabling bearer [ 358.485519][T15759] syzkaller0: entered promiscuous mode [ 358.486612][T15759] syzkaller0: entered allmulticast mode [ 358.495189][T15757] usb usb7: usbfs: process 15757 (syz.3.3555) did not claim interface 0 before use [ 358.689623][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.691372][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.819368][T15809] syzkaller0: entered promiscuous mode [ 358.819411][T15809] syzkaller0: entered allmulticast mode [ 358.916291][T15821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.918862][T15821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.989458][T15827] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 358.995845][T15829] syzkaller0: entered promiscuous mode [ 358.997210][T15829] syzkaller0: entered allmulticast mode [ 358.999929][T15829] tipc: Enabled bearer , priority 0 [ 359.002060][T15828] tipc: Resetting bearer [ 359.015216][T15828] tipc: Disabling bearer [ 359.086882][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.090712][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.098445][T15839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3590'. [ 359.216933][T15851] syzkaller0: entered promiscuous mode [ 359.216967][T15851] syzkaller0: entered allmulticast mode [ 359.448929][T15859] syzkaller0: entered promiscuous mode [ 359.448961][T15859] syzkaller0: entered allmulticast mode [ 359.715999][T15861] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 359.991384][T15846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.041255][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3600'. [ 360.108238][T15861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.112007][T15866] veth1_to_team: entered promiscuous mode [ 360.112950][T15866] gretap0: entered promiscuous mode [ 360.115684][T15866] hsr1: entered promiscuous mode [ 360.120994][T15868] syzkaller0: entered promiscuous mode [ 360.121028][T15868] syzkaller0: entered allmulticast mode [ 360.210899][T15880] syzkaller0: entered promiscuous mode [ 360.210935][T15880] syzkaller0: entered allmulticast mode [ 360.363485][T15897] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 360.370422][T15897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.425263][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.428416][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.446627][T15907] syzkaller0: entered promiscuous mode [ 360.447806][T15907] syzkaller0: entered allmulticast mode [ 360.597438][T15914] syzkaller0: entered promiscuous mode [ 360.597473][T15914] syzkaller0: entered allmulticast mode [ 360.975219][T15918] syzkaller0: entered promiscuous mode [ 360.975252][T15918] syzkaller0: entered allmulticast mode [ 361.075748][T15924] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 361.095103][T15886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.099669][T15924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.143561][T15927] syzkaller0: entered promiscuous mode [ 361.143598][T15927] syzkaller0: entered allmulticast mode [ 361.208357][T15935] syzkaller0: entered promiscuous mode [ 361.209453][T15935] syzkaller0: entered allmulticast mode [ 361.211058][T15939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.211739][T15939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.253484][T15941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3632'. [ 361.351191][T15947] syzkaller0: entered promiscuous mode [ 361.353274][T15947] syzkaller0: entered allmulticast mode [ 361.379183][T15958] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 361.451269][T15966] syzkaller0: entered promiscuous mode [ 361.451300][T15966] syzkaller0: entered allmulticast mode [ 361.457772][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.457995][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.568064][T15970] syzkaller0: entered promiscuous mode [ 361.568098][T15970] syzkaller0: entered allmulticast mode [ 362.159254][T15951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.241622][T15978] syzkaller0: entered promiscuous mode [ 362.241653][T15978] syzkaller0: entered allmulticast mode [ 362.418325][T16006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.419618][T16006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.421005][T16006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.421430][T16006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.421724][T16006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.598890][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.684191][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.721479][T16037] syzkaller0: entered promiscuous mode [ 362.721514][T16037] syzkaller0: entered allmulticast mode [ 362.788580][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.817545][T16003] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.817650][T16003] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.817718][T16003] bridge_slave_0: entered allmulticast mode [ 362.818244][T16003] bridge_slave_0: entered promiscuous mode [ 362.819206][T16003] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.819254][T16003] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.819314][T16003] bridge_slave_1: entered allmulticast mode [ 362.819741][T16003] bridge_slave_1: entered promiscuous mode [ 362.829464][T16003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.830457][T16003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.835044][T16042] Bluetooth: MGMT ver 1.23 [ 362.839473][T16042] Cannot find set identified by id 0 to match [ 362.840510][T16003] team0: Port device team_slave_0 added [ 362.841303][T16003] team0: Port device team_slave_1 added [ 362.849025][T16003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.851307][T16003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.851338][T16003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.859247][T16003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.860646][T16003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.866064][T16003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.883240][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.892960][T16003] hsr_slave_0: entered promiscuous mode [ 362.896059][T16003] hsr_slave_1: entered promiscuous mode [ 362.897833][T16003] debugfs: 'hsr0' already exists in 'hsr' [ 362.899255][T16003] Cannot create hsr debugfs directory [ 363.153254][ T40] bridge_slave_1: left allmulticast mode [ 363.153291][ T40] bridge_slave_1: left promiscuous mode [ 363.153397][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.259926][ T40] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 363.278967][T16012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.331108][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.335517][T16062] loop3: detected capacity change from 0 to 1024 [ 363.337203][T16062] EXT4-fs: Ignoring removed bh option [ 363.338263][T16062] EXT4-fs: Ignoring removed bh option [ 363.342986][T16062] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 363.355970][ T40] bond0 (unregistering): (slave c): Releasing backup interface [ 363.357300][T16062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.394386][ T40] bond0 (unregistering): Released all slaves [ 363.397124][ T40] bond1 (unregistering): Released all slaves [ 363.402119][ T40] bond2 (unregistering): Released all slaves [ 363.409675][ T40] bond3 (unregistering): Released all slaves [ 363.414822][ T40] bond4 (unregistering): Released all slaves [ 363.421899][ T40] bond5 (unregistering): Released all slaves [ 363.430116][ T40] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 363.465239][ T40] bond6 (unregistering): Released all slaves [ 363.588159][ T40] tipc: Left network mode [ 363.741741][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 363.768666][T16104] syzkaller0: entered promiscuous mode [ 363.769789][T16104] syzkaller0: entered allmulticast mode [ 363.772653][T16102] syzkaller0: entered promiscuous mode [ 363.772689][T16102] syzkaller0: entered allmulticast mode [ 364.014832][ T40] hsr_slave_0: left promiscuous mode [ 364.016161][ T40] hsr_slave_1: left promiscuous mode [ 364.017575][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.019011][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.020756][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.022180][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.027027][ T40] veth1_macvtap: left promiscuous mode [ 364.027082][ T40] veth0_macvtap: left promiscuous mode [ 364.027120][ T40] veth1_vlan: left promiscuous mode [ 364.027148][ T40] veth0_vlan: left promiscuous mode [ 364.098459][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.140087][T16140] loop3: detected capacity change from 0 to 4096 [ 364.141651][T16140] ext4: Unknown parameter 'nouser_xattr' [ 364.434076][T16145] loop3: detected capacity change from 0 to 512 [ 364.474352][T16006] Bluetooth: hci4: command tx timeout [ 364.997695][ T40] team0 (unregistering): Port device team_slave_1 removed [ 365.017751][ T40] team0 (unregistering): Port device team_slave_0 removed [ 365.094003][T16128] tipc: Enabling of bearer rejected, failed to enable media [ 365.116283][T16131] syzkaller0: entered promiscuous mode [ 365.118593][T16131] syzkaller0: entered allmulticast mode [ 365.936641][T16003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.954884][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.964177][T16185] syzkaller0: entered promiscuous mode [ 365.965228][T16185] syzkaller0: entered allmulticast mode [ 365.981298][T16003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.988896][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.995109][T16003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.999530][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.001358][T16003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.007951][T16003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.009743][T16183] syzkaller0: entered promiscuous mode [ 366.010267][T16183] syzkaller0: entered allmulticast mode [ 366.183617][T16213] loop1: detected capacity change from 0 to 4096 [ 366.184212][T16213] ext4: Unknown parameter 'nouser_xattr' [ 366.239399][T16003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.263763][T16003] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.278860][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.278908][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.292339][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.292388][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.307467][T16003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.307511][T16003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.413700][T16225] loop1: detected capacity change from 0 to 512 [ 366.553162][T16006] Bluetooth: hci4: command tx timeout [ 367.058043][T16227] syzkaller0: entered promiscuous mode [ 367.061484][T16227] syzkaller0: entered allmulticast mode [ 367.226024][T16003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.922361][T16263] tipc: Enabling of bearer rejected, failed to enable media [ 367.933248][T16271] syzkaller0: entered promiscuous mode [ 367.933279][T16271] syzkaller0: entered allmulticast mode [ 367.939611][T16284] syzkaller0: entered promiscuous mode [ 367.939651][T16284] syzkaller0: entered allmulticast mode [ 368.643256][T16006] Bluetooth: hci4: command tx timeout [ 369.275507][T16387] syzkaller0: entered promiscuous mode [ 369.276621][T16387] syzkaller0: entered allmulticast mode [ 369.281978][T16003] veth0_vlan: entered promiscuous mode [ 369.286652][T16003] veth1_vlan: entered promiscuous mode [ 369.297139][T16003] veth0_macvtap: entered promiscuous mode [ 369.299357][T16003] veth1_macvtap: entered promiscuous mode [ 369.386882][T16403] loop4: detected capacity change from 0 to 4096 [ 369.388515][T16403] ext4: Unknown parameter 'nouser_xattr' [ 369.597146][T16410] loop4: detected capacity change from 0 to 512 [ 370.723115][T16006] Bluetooth: hci4: command tx timeout [ 370.900613][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 370.905914][T16416] syzkaller1: entered promiscuous mode [ 370.906934][T16416] syzkaller1: entered allmulticast mode [ 370.916628][T16003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.917814][T16003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.922077][ T3050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.922157][ T3050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.922189][ T3050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.922206][ T3050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.989620][T16423] tipc: Enabling of bearer rejected, failed to enable media [ 370.992826][T16421] syzkaller0: entered promiscuous mode [ 370.995509][T16421] syzkaller0: entered allmulticast mode [ 371.014720][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.014750][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.066179][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.066215][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.119168][T16437] loop3: detected capacity change from 0 to 512 [ 371.131619][T16437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 371.149834][T16437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.175142][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3714'. [ 371.177047][T16447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3714'. [ 371.269430][T16451] syzkaller0: entered promiscuous mode [ 371.271032][T16451] syzkaller0: entered allmulticast mode [ 371.477363][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 371.568870][T16482] syzkaller0: entered promiscuous mode [ 371.568909][T16482] syzkaller0: entered allmulticast mode [ 371.577870][T16484] tipc: Enabled bearer , priority 0 [ 371.578370][T16484] syzkaller0: entered promiscuous mode [ 371.578383][T16484] syzkaller0: entered allmulticast mode [ 371.581081][T16484] tipc: Resetting bearer [ 371.583052][T16483] tipc: Resetting bearer [ 371.590213][T16483] tipc: Disabling bearer [ 371.673524][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.714889][T16492] syzkaller0: entered promiscuous mode [ 371.714924][T16492] syzkaller0: entered allmulticast mode [ 371.931583][T16500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.933352][T16500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.965225][T13086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.986897][T16502] syzkaller0: entered promiscuous mode [ 371.986938][T16502] syzkaller0: entered allmulticast mode [ 371.989154][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 372.002185][T16502] tipc: Enabled bearer , priority 0 [ 372.004789][T16501] tipc: Resetting bearer [ 372.011282][T16501] tipc: Disabling bearer [ 372.046319][T16506] syzkaller0: entered promiscuous mode [ 372.047488][T16506] syzkaller0: entered allmulticast mode [ 372.074135][ T4821] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 372.080217][T16510] tipc: Enabled bearer , priority 0 [ 372.082275][T16509] tipc: Disabling bearer [ 372.135166][T16512] syzkaller0: entered promiscuous mode [ 372.136262][T16512] syzkaller0: entered allmulticast mode [ 372.234709][ T4821] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.234747][ T4821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 372.234775][ T4821] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 372.234792][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.236800][ T4821] usb 1-1: config 0 descriptor?? [ 372.240186][T16517] syzkaller0: entered promiscuous mode [ 372.240200][T16517] syzkaller0: entered allmulticast mode [ 372.312475][T16521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.315301][T16521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.460887][T16523] loop4: detected capacity change from 0 to 512 [ 372.463762][T16523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 372.485232][T16523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.645567][ T4821] usbhid 1-1:0.0: can't add hid device: -71 [ 372.645654][ T4821] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 372.646933][ T4821] usb 1-1: USB disconnect, device number 14 [ 372.839293][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'. [ 372.920316][T16534] netlink: 'syz.2.3746': attribute type 1 has an invalid length. [ 372.947832][T16538] syzkaller0: entered promiscuous mode [ 372.948882][T16538] syzkaller0: entered allmulticast mode [ 373.022774][T16540] syzkaller0: entered promiscuous mode [ 373.022804][T16540] syzkaller0: entered allmulticast mode [ 373.207191][T16556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.207398][T16556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.339994][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.412285][T16565] netlink: 'syz.4.3758': attribute type 1 has an invalid length. [ 373.429610][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3757'. [ 373.492717][T16568] Cannot find set identified by id 0 to match [ 373.528999][T16572] syzkaller0: entered promiscuous mode [ 373.529042][T16572] syzkaller0: entered allmulticast mode [ 373.769594][T16591] loop2: detected capacity change from 0 to 512 [ 373.779724][T16591] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 373.791790][T16591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.814423][T16596] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3767'. [ 373.998065][T16615] syzkaller0: entered promiscuous mode [ 373.999328][T16615] syzkaller0: entered allmulticast mode [ 374.336988][T16648] syzkaller0: entered promiscuous mode [ 374.338229][T16648] syzkaller0: entered allmulticast mode [ 374.468450][T16654] syzkaller0: entered promiscuous mode [ 374.468487][T16654] syzkaller0: entered allmulticast mode [ 374.516690][T16660] tipc: Enabling of bearer rejected, failed to enable media [ 374.677041][T13347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.992524][T16690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3799'. [ 375.060021][T16694] syzkaller0: entered promiscuous mode [ 375.060054][T16694] syzkaller0: entered allmulticast mode [ 375.143454][T16696] syzkaller0: entered promiscuous mode [ 375.143494][T16696] syzkaller0: entered allmulticast mode [ 375.245042][T16703] loop1: detected capacity change from 0 to 512 [ 375.246598][T16703] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 375.258056][T16703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.325383][T16709] syzkaller0: entered promiscuous mode [ 375.325420][T16709] syzkaller0: entered allmulticast mode [ 376.115216][T16727] syzkaller0: entered promiscuous mode [ 376.116385][T16727] syzkaller0: entered allmulticast mode [ 376.117413][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.170682][T16733] syzkaller0: entered promiscuous mode [ 376.171837][T16733] syzkaller0: entered allmulticast mode [ 376.176178][T16731] syzkaller0: entered promiscuous mode [ 376.177160][T16731] syzkaller0: entered allmulticast mode [ 376.241855][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.244288][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.324282][T16744] tipc: Enabled bearer , priority 0 [ 376.351591][T16743] tipc: Disabling bearer [ 376.383973][T16746] syzkaller0: entered promiscuous mode [ 376.385064][T16746] syzkaller0: entered allmulticast mode [ 377.363185][T16767] tipc: Enabled bearer , priority 0 [ 377.366117][T16764] tipc: Disabling bearer [ 377.480219][T16774] syzkaller0: entered promiscuous mode [ 377.480256][T16774] syzkaller0: entered allmulticast mode [ 378.345694][T16836] loop1: detected capacity change from 0 to 1024 [ 378.346117][T16836] EXT4-fs: Ignoring removed bh option [ 378.346144][T16836] EXT4-fs: Ignoring removed bh option [ 378.347695][T16836] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 378.359492][T16836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.431050][T16845] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 378.454563][T16845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 378.467232][T16845] bond2: (slave veth0_to_bond): Releasing backup interface [ 378.497895][T16845] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 378.506412][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'. [ 378.784568][T16877] Cannot find set identified by id 0 to match [ 379.030544][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.106567][T16898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3862'. [ 379.432345][T16939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.432539][T16939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.435786][T16941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.435970][T16941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.485171][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.487796][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.748147][T16961] tipc: Started in network mode [ 379.749087][T16961] tipc: Node identity 76f1bcc8b695, cluster identity 4711 [ 379.750928][T16961] tipc: Enabled bearer , priority 0 [ 379.758016][T16960] tipc: Disabling bearer [ 379.822552][T16970] syzkaller0: entered promiscuous mode [ 379.822594][T16970] syzkaller0: entered allmulticast mode [ 379.887519][T16979] sch_tbf: peakrate 55200 is lower than or equals to rate 4833251989064058569 ! [ 379.895552][T16979] syzkaller0: entered promiscuous mode [ 379.895580][T16979] syzkaller0: entered allmulticast mode [ 379.991503][T16981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.994660][T16981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.041149][T16987] binder: 16986:16987 got transaction to invalid handle, 1 [ 380.041186][T16987] binder: 16986:16987 cannot find target node [ 380.041502][T16987] binder: 16986:16987 transaction async to 0:0 failed 18/29201/-22, code 0 size 0--444 line 3236 [ 380.041774][ T4688] binder: undelivered TRANSACTION_ERROR: 29201 [ 380.545383][T17001] loop1: detected capacity change from 0 to 4096 [ 380.547229][T17001] ext4: Unknown parameter 'nouser_xattr' [ 380.769850][T17015] loop1: detected capacity change from 0 to 512 [ 380.929660][T17015] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.3887: inode has both inline data and extents flags [ 380.929740][T17015] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 380.933084][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 380.933107][ C1] EXT4-fs (loop1): initial error at time 380: ext4_orphan_get:1397: inode 15 [ 380.933145][ C1] EXT4-fs (loop1): last error at time 380: ext4_orphan_get:1397: inode 15 [ 380.933310][T17015] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3887: couldn't read orphan inode 15 (err -117) [ 380.933371][T17015] loop1: lost filesystem error report for type 5 error -117 [ 380.982115][T17015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 381.661010][T17020] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3892'. [ 381.663990][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.664187][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.793312][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.793803][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.826251][T12661] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 381.840056][T12718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 381.860627][T17035] syzkaller0: entered promiscuous mode [ 381.860667][T17035] syzkaller0: entered allmulticast mode [ 381.869568][T17037] syzkaller0: entered promiscuous mode [ 381.974182][T12661] usb 1-1: Using ep0 maxpacket: 32 [ 381.976871][T12661] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 381.976902][T12661] usb 1-1: config 0 has no interface number 0 [ 381.981827][T17043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3902'. [ 381.985717][T12661] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.985749][T12661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.985759][T12661] usb 1-1: Product: syz [ 381.985768][T12661] usb 1-1: Manufacturer: syz [ 381.985776][T12661] usb 1-1: SerialNumber: syz [ 381.997600][T12661] usb 1-1: config 0 descriptor?? [ 382.008018][T17043] veth1_to_team: entered promiscuous mode [ 382.008630][T17043] gretap0: entered promiscuous mode [ 382.009404][T17043] debugfs: 'hsr1' already exists in 'hsr' [ 382.009641][T17043] Cannot create hsr debugfs directory [ 382.009848][T17043] hsr1: entered promiscuous mode [ 382.049099][T17047] syzkaller0: entered promiscuous mode [ 382.049151][T17047] syzkaller0: entered allmulticast mode [ 382.179110][T17052] syzkaller0: entered promiscuous mode [ 382.179144][T17052] syzkaller0: entered allmulticast mode [ 382.805942][T17064] syzkaller0: entered promiscuous mode [ 382.805973][T17064] syzkaller0: entered allmulticast mode [ 383.024733][T12661] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 383.024770][T12661] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 383.033437][T12661] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 383.035379][T12661] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 383.040828][T12661] usb 1-1: USB disconnect, device number 15 [ 383.510002][T17090] syzkaller0: entered promiscuous mode [ 384.175734][T17112] syzkaller0: entered promiscuous mode [ 384.178712][T17112] syzkaller0: entered allmulticast mode [ 384.213342][T17122] syzkaller0: entered promiscuous mode [ 384.213376][T17122] syzkaller0: entered allmulticast mode [ 384.343049][T17127] ------------[ cut here ]------------ [ 384.343067][T17127] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#1: syz.2.3921/17127 [ 384.345681][T17127] Modules linked in: [ 384.346356][T17127] CPU: 1 UID: 0 PID: 17127 Comm: syz.2.3921 Tainted: G L syzkaller #0 PREEMPT [ 384.348114][T17127] Tainted: [L]=SOFTLOCKUP [ 384.348783][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 384.350450][T17127] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 384.351752][T17127] pc : path_noexec+0x1a4/0x1d4 [ 384.352504][T17127] lr : path_noexec+0x1a4/0x1d4 [ 384.353234][T17127] sp : ffff800090f67a50 [ 384.353940][T17127] x29: ffff800090f67a50 x28: dfff800000000000 x27: ffff0000dc8aeac0 [ 384.355327][T17127] x26: 0000000000000012 x25: 000000000200000b x24: 0000000000000000 [ 384.356751][T17127] x23: 1fffe0001b5a08b1 x22: 1fffe0001b5a08b8 x21: dfff800000000000 [ 384.358198][T17127] x20: 0000000000000000 x19: ffff0000dad045c0 x18: 0000000000000000 [ 384.359604][T17127] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 384.360928][T17127] x14: 0000000000000003 x13: 0000000000000004 x12: 0000000000000000 [ 384.362306][T17127] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000105 [ 384.363624][T17127] x8 : ffff80009bbcf000 x7 : 0000000000000000 x6 : 0000000000000000 [ 384.365047][T17127] x5 : 0000000000000073 x4 : 0000000000000008 x3 : ffff800080c7ce88 [ 384.366374][T17127] x2 : 0000000000000000 x1 : ffff0000dbc43a00 x0 : 0000000000000001 [ 384.367597][T17127] Call trace: [ 384.368158][T17127] path_noexec+0x1a4/0x1d4 (P) [ 384.368942][T17127] do_mmap+0x874/0xf0c [ 384.369637][T17127] vm_mmap_pgoff+0x298/0x46c [ 384.370372][T17127] ksys_mmap_pgoff+0x364/0x5b4 [ 384.371140][T17127] __arm64_sys_mmap+0x108/0x120 [ 384.372028][T17127] invoke_syscall+0x98/0x244 [ 384.372792][T17127] el0_svc_common+0x19c/0x23c [ 384.373605][T17127] do_el0_svc+0x4c/0x5c [ 384.374272][T17127] el0_svc+0x64/0x260 [ 384.374912][T17127] el0t_64_sync_handler+0x48/0x148 [ 384.375810][T17127] el0t_64_sync+0x198/0x19c [ 384.376543][T17127] irq event stamp: 354 [ 384.377156][T17127] hardirqs last enabled at (353): [] el0_svc+0x54/0x260 [ 384.378566][T17127] hardirqs last disabled at (354): [] el1_brk64+0x20/0x54 [ 384.379960][T17127] softirqs last enabled at (348): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 384.381782][T17127] softirqs last disabled at (346): [] fpsimd_restore_current_state+0x44/0x9c8 [ 384.383554][T17127] ---[ end trace 0000000000000000 ]---