last executing test programs: 17.412033099s ago: executing program 0 (id=3644): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3000408, 0x0, 0x3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x28, 0x805, 0x0) listen(r2, 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) syz_open_procfs(0x0, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000006,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=iso8859-15,fmask=0000000000000000000,iocharset=koi8-u,namecase=1,umask=00000000000000000000165,errors=continue,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$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") syz_mount_image$ext4(0x0, &(0x7f00000006c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2110410, 0x0, 0x0, 0x0, &(0x7f0000000000)) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) fcntl$getflags(r6, 0x401) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) getuid() sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 12.282137443s ago: executing program 0 (id=3649): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000240)={[{@norecovery}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@resgid}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") syz_emit_ethernet(0x32, &(0x7f0000001ec0)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0xa, 0x24, 0x65, 0x0, 0x10, 0x21, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, '\tch', 0x3, "53d825"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 8.847906052s ago: executing program 0 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x26361, 0x7, 0xfffffffd, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 8.549241027s ago: executing program 3 (id=3665): r0 = socket(0x80000000000000a, 0x2, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x6, 0x4a, {{0x5, 0x4, 0x3, 0x14, 0x14, 0x65, 0x0, 0xc0, 0x2f, 0x0, @loopback, @local}}}}) 8.272024451s ago: executing program 0 (id=3668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@mcast2}, {0x0, 0x0, 0x0, 0x401, 0x0, 0x7f}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}}, 0x80) 8.09623021s ago: executing program 3 (id=3670): socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x1, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r4], 0x14) 8.051055922s ago: executing program 0 (id=3671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000084090000000400000001000000010000000061615f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 8.020526463s ago: executing program 3 (id=3672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x200080, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0xea12, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x2, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xffffc33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x3, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f05805000000", 0x6}], 0x2}, 0x5) 7.861088531s ago: executing program 2 (id=3674): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040050) 7.559877616s ago: executing program 3 (id=3675): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[@hopopts={0x33, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}]}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f00000c1000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000002b80)=""/4096, 0x1000}, &(0x7f0000000300)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000000000040000000000000000002000"/36], 0x24, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.244219241s ago: executing program 2 (id=3678): r0 = userfaultfd(0x801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x480, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80002009}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000300)={0x200f}) 4.677865348s ago: executing program 2 (id=3680): socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x1, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r4], 0x14) 4.677557629s ago: executing program 3 (id=3681): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x0, 0xd, 0x9, 0x0, 0xffffffffffffffff, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1014, &(0x7f0000001880)=""/4116, 0x41000, 0xf}, 0x94) 4.388087513s ago: executing program 3 (id=3682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 4.161856564s ago: executing program 0 (id=3684): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e00000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_request={0xf, 0x0, 0x0, 0x2, 0x9}}}}}, 0x0) futex(0xfffffffffffffffc, 0x2, 0x1, 0x0, 0x0, 0x200015) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.110241056s ago: executing program 1 (id=3685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xfffffc6d}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="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", 0xbe8}, {&(0x7f0000000580)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000440)=0x40) 3.853373659s ago: executing program 1 (id=3686): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@nobh}, {@user_xattr}, {@nodiscard}, {@mblk_io_submit}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003ec0)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b52, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fstat(r3, 0x0) sendfile(r3, r3, &(0x7f00000000c0)=0x7, 0x6fecb1) 2.313322526s ago: executing program 1 (id=3687): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@nobh}, {@user_xattr}, {@nodiscard}, {@mblk_io_submit}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x4b52, &(0x7f0000000000)) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, 0x0, 0x0) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) 708.206675ms ago: executing program 2 (id=3688): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x4, @any, 0x0, 0x1}, 0xe) 533.293334ms ago: executing program 1 (id=3689): r0 = userfaultfd(0x801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x480, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80002009}) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r5 = dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000300)={0x200f}) 445.476548ms ago: executing program 2 (id=3690): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="3c01000019000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000040000000000000000000000000000000000000abc636f5bbd667cf9c0aa5c661ab786d88ed9990e5fa9bb133ffa95185ec72214f27"], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 245.389818ms ago: executing program 1 (id=3691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000840)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff3fff}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 218.21789ms ago: executing program 2 (id=3692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "31aabf06"}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=3693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x200080, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0xea12, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x2, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xffffc33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x3, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f", 0x7}], 0x2}, 0x5) kernel console output (not intermixed with test programs): eth0_macvtap: entered promiscuous mode [ 414.826275][T13192] veth1_macvtap: entered promiscuous mode [ 414.928558][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.963548][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.978008][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.998446][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.019887][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.060140][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.076912][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.088348][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.098738][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.109683][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.129248][T13192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.198472][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.212143][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.233155][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.273315][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.294190][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.333098][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.345723][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.374334][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.394270][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.412021][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.424526][T13192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.515785][T13192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.527434][T13192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.537719][T13192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.563158][T13192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.844062][ T5778] Bluetooth: hci1: command tx timeout [ 415.914120][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.925591][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.013635][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.031180][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.706337][T13419] syzkaller0: entered promiscuous mode [ 416.711968][T13419] syzkaller0: entered allmulticast mode [ 417.879282][ T1095] net_ratelimit: 30 callbacks suppressed [ 417.879300][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 417.900340][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 417.914905][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 417.929289][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 417.963246][ T5778] Bluetooth: hci1: command tx timeout [ 418.462154][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 418.476785][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 418.495388][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 418.510762][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 419.039428][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 419.054628][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 420.710696][T13589] xt_hashlimit: size too large, truncated to 1048576 [ 421.567293][T13616] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2671'. [ 422.967619][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 270 seconds [ 422.978772][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 270 seconds [ 422.992446][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 270 seconds [ 423.003629][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 270 seconds [ 423.299670][ T992] net_ratelimit: 30 callbacks suppressed [ 423.299688][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 423.320445][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 423.334992][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 423.349483][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 423.643828][ T5814] IPVS: starting estimator thread 0... [ 423.763273][T13690] IPVS: using max 18 ests per chain, 43200 per kthread [ 423.953694][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 423.968443][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 423.983140][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 423.997893][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 424.612452][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 424.627355][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 424.917660][T13732] syzkaller0: entered promiscuous mode [ 424.930767][T13732] syzkaller0: entered allmulticast mode [ 425.200642][T13745] tipc: Enabled bearer , priority 0 [ 425.248973][T13745] syzkaller0: entered promiscuous mode [ 425.265116][T13745] syzkaller0: entered allmulticast mode [ 425.334053][T13745] tipc: Resetting bearer [ 425.360310][T13744] tipc: Resetting bearer [ 425.425472][T13744] tipc: Disabling bearer [ 425.456321][T13755] netlink: 49 bytes leftover after parsing attributes in process `syz.1.2709'. [ 425.641380][T13757] syzkaller0: entered promiscuous mode [ 425.651021][T13757] syzkaller0: entered allmulticast mode [ 425.666603][T13763] tipc: Started in network mode [ 425.671536][T13763] tipc: Node identity deb74bc12cb2, cluster identity 4711 [ 425.698103][T13763] tipc: Enabled bearer , priority 0 [ 428.011150][T13788] syzkaller0: entered promiscuous mode [ 428.039962][T13788] syzkaller0: entered allmulticast mode [ 428.067624][T13759] tipc: Disabling bearer [ 428.117221][ T23] tipc: Node number set to 4060433345 [ 428.379297][T13809] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2719'. [ 428.400036][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 428.780144][ T992] net_ratelimit: 30 callbacks suppressed [ 428.780159][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 428.800299][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 428.814695][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 428.829208][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 429.390682][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 429.405151][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 429.419761][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 429.434258][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 429.958657][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 429.973916][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 430.617143][T13819] tipc: Enabling of bearer rejected, failed to enable media [ 430.975923][T13835] syzkaller0: entered promiscuous mode [ 430.981553][T13835] syzkaller0: entered allmulticast mode [ 432.968027][T13847] tipc: Enabling of bearer rejected, failed to enable media [ 433.165405][T13860] batadv_slave_0: entered promiscuous mode [ 433.186680][T13859] batadv_slave_0: left promiscuous mode [ 433.277097][T13864] syzkaller0: entered promiscuous mode [ 433.282655][T13864] syzkaller0: entered allmulticast mode [ 433.409389][T13869] tipc: Started in network mode [ 433.414556][T13869] tipc: Node identity d2f9466efd82, cluster identity 4711 [ 433.421893][T13869] tipc: Enabled bearer , priority 0 [ 433.430270][T13869] syzkaller0: entered promiscuous mode [ 433.436151][T13869] syzkaller0: entered allmulticast mode [ 433.457516][T13869] tipc: Resetting bearer [ 433.475865][T13868] tipc: Resetting bearer [ 433.504759][T13868] tipc: Disabling bearer [ 433.839848][T13881] tipc: Enabled bearer , priority 0 [ 433.905196][T13880] tipc: Disabling bearer [ 434.103824][ T6373] net_ratelimit: 30 callbacks suppressed [ 434.103840][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 434.124325][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 434.138800][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 434.153286][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 434.177490][T13893] syzkaller0: entered promiscuous mode [ 434.203195][T13893] syzkaller0: entered allmulticast mode [ 434.451347][T13904] tipc: Enabled bearer , priority 0 [ 434.465131][T13904] syzkaller0: entered promiscuous mode [ 434.470676][T13904] syzkaller0: entered allmulticast mode [ 434.534341][T13904] tipc: Resetting bearer [ 434.543685][T13903] tipc: Resetting bearer [ 434.578974][T13903] tipc: Disabling bearer [ 434.679406][T13914] syzkaller0: entered promiscuous mode [ 434.685858][T13914] syzkaller0: entered allmulticast mode [ 434.750592][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 434.765490][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 434.780270][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 434.795377][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 435.163496][T13925] tipc: Enabled bearer , priority 0 [ 435.347181][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 435.361915][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 435.486335][T13924] tipc: Disabling bearer [ 435.686502][T13949] tipc: Started in network mode [ 435.697945][T13949] tipc: Node identity 8a3c9faad662, cluster identity 4711 [ 435.710181][T13949] tipc: Enabled bearer , priority 0 [ 435.722432][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 435.724580][T13949] syzkaller0: entered promiscuous mode [ 435.742105][T13949] syzkaller0: entered allmulticast mode [ 435.804534][T13949] tipc: Resetting bearer [ 435.842050][T13954] syzkaller0: entered promiscuous mode [ 435.851483][T13954] syzkaller0: entered allmulticast mode [ 435.879715][T13946] tipc: Resetting bearer [ 435.924152][T13946] tipc: Disabling bearer [ 436.356644][T13972] syzkaller0: entered promiscuous mode [ 436.362171][T13972] syzkaller0: entered allmulticast mode [ 436.415772][T13976] tipc: Enabled bearer , priority 0 [ 436.725403][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 436.928416][T13989] xt_l2tp: missing protocol rule (udp|l2tpip) [ 438.823555][T13973] tipc: Disabling bearer [ 438.986445][T14010] batman_adv: batadv0: Adding interface: gretap1 [ 438.992852][T14010] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.042543][T14010] batman_adv: batadv0: Interface activated: gretap1 [ 439.438125][T14031] tipc: Enabled bearer , priority 0 [ 439.454182][T14031] syzkaller0: entered promiscuous mode [ 439.459722][T14031] syzkaller0: entered allmulticast mode [ 439.541769][T14031] tipc: Resetting bearer [ 439.557488][ T11] net_ratelimit: 30 callbacks suppressed [ 439.557505][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 439.567160][T14036] tipc: Enabled bearer , priority 0 [ 439.577887][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 439.577916][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 439.577939][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 439.639711][T14030] tipc: Resetting bearer [ 439.666770][T14030] tipc: Disabling bearer [ 439.712795][T14033] syzkaller0: entered promiscuous mode [ 439.718339][T14033] syzkaller0: entered allmulticast mode [ 439.742496][T14035] tipc: Disabling bearer [ 440.114993][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 440.129546][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 440.144013][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 440.158337][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 440.252482][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.258970][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.353912][T14055] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 440.709454][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 442.580873][T14055] lo speed is unknown, defaulting to 1000 [ 442.594962][T14078] tipc: Enabled bearer , priority 0 [ 442.603824][T14079] tipc: Resetting bearer [ 442.609885][T14055] lo speed is unknown, defaulting to 1000 [ 442.622107][T14055] lo speed is unknown, defaulting to 1000 [ 442.635737][T14075] tipc: Disabling bearer [ 442.653630][T14055] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 442.694112][T14055] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 442.824527][T14055] lo speed is unknown, defaulting to 1000 [ 442.844934][T14055] lo speed is unknown, defaulting to 1000 [ 442.854469][T14055] lo speed is unknown, defaulting to 1000 [ 442.929055][T14055] lo speed is unknown, defaulting to 1000 [ 442.939628][T14055] lo speed is unknown, defaulting to 1000 [ 442.964260][T14055] lo speed is unknown, defaulting to 1000 [ 442.971700][T14055] lo speed is unknown, defaulting to 1000 [ 443.358222][T14105] syzkaller0: entered promiscuous mode [ 443.377108][T14105] syzkaller0: entered allmulticast mode [ 444.848265][ T6373] net_ratelimit: 31 callbacks suppressed [ 444.848285][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 444.868686][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 444.883141][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 444.897478][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 445.416786][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 445.433577][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 445.448332][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 445.463323][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 445.996540][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 446.011799][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 446.204806][T14147] tipc: Enabled bearer , priority 0 [ 446.225935][T14147] tipc: Resetting bearer [ 446.266235][T14146] tipc: Disabling bearer [ 446.992351][T14174] syzkaller0: entered promiscuous mode [ 447.006252][T14174] syzkaller0: entered allmulticast mode [ 449.697723][T14203] tipc: Enabling of bearer rejected, failed to enable media [ 450.196509][ T1095] net_ratelimit: 30 callbacks suppressed [ 450.196527][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 450.216778][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 450.231235][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 450.245804][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 450.321119][T14236] syzkaller0: entered promiscuous mode [ 450.327976][T14236] syzkaller0: entered allmulticast mode [ 450.735308][T14257] tipc: Enabled bearer , priority 0 [ 450.743213][T14257] syzkaller0: entered promiscuous mode [ 450.748804][T14257] syzkaller0: entered allmulticast mode [ 450.780747][T14256] tipc: Resetting bearer [ 450.821207][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 450.835898][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 450.850269][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 450.865325][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 450.888538][T14256] tipc: Disabling bearer [ 451.072772][T14265] syzkaller0: entered promiscuous mode [ 451.079269][T14265] syzkaller0: entered allmulticast mode [ 451.389585][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 451.404576][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 451.671611][T14274] syzkaller0: entered promiscuous mode [ 451.695517][T14274] syzkaller0: entered allmulticast mode [ 453.053334][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 300 seconds [ 453.064514][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 300 seconds [ 453.078574][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 300 seconds [ 453.090207][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 300 seconds [ 453.937349][T14289] syzkaller0: entered promiscuous mode [ 453.942863][T14289] syzkaller0: entered allmulticast mode [ 454.000438][T14283] syzkaller0: entered promiscuous mode [ 454.008980][T14283] syzkaller0: entered allmulticast mode [ 454.036907][T14295] tipc: Enabling of bearer rejected, failed to enable media [ 454.722124][ T5136] udevd[5136]: worker [5779] /devices/virtual/block/nbd0 timeout; kill it [ 454.732784][ T5136] udevd[5136]: seq 11205 '/devices/virtual/block/nbd0' killed [ 455.548256][ T1095] net_ratelimit: 30 callbacks suppressed [ 455.548276][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 455.568653][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 455.583432][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 455.597940][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 456.194603][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 456.209162][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 456.223723][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 456.238088][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 456.765903][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 456.780435][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 458.564712][T14335] syzkaller0: entered promiscuous mode [ 458.570333][T14335] syzkaller0: entered allmulticast mode [ 460.572495][T14344] syzkaller0: entered promiscuous mode [ 460.578265][T14344] syzkaller0: entered allmulticast mode [ 460.823817][T14354] tipc: Enabled bearer , priority 0 [ 460.851266][T14354] syzkaller0: entered promiscuous mode [ 460.872166][T14354] syzkaller0: entered allmulticast mode [ 460.923264][ T1095] net_ratelimit: 30 callbacks suppressed [ 460.923280][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 460.925120][T14354] tipc: Resetting bearer [ 460.928979][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 460.963930][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 460.978422][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 461.096743][T14353] tipc: Resetting bearer [ 461.134569][T14353] tipc: Disabling bearer [ 461.444780][T14373] syzkaller0: entered promiscuous mode [ 461.450492][T14373] syzkaller0: entered allmulticast mode [ 461.460917][T14377] syzkaller0: entered promiscuous mode [ 461.467742][T14377] syzkaller0: entered allmulticast mode [ 461.519492][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 461.534427][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 461.548880][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 461.563270][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 462.099178][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 462.113763][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 464.642648][T14404] tipc: Enabled bearer , priority 0 [ 464.658909][T14407] syzkaller0: entered promiscuous mode [ 464.674451][T14407] syzkaller0: entered allmulticast mode [ 464.795417][T14422] tipc: Resetting bearer [ 464.864701][T14422] tipc: Disabling bearer [ 465.019187][T14432] syzkaller0: entered promiscuous mode [ 465.031901][T14432] syzkaller0: entered allmulticast mode [ 465.044514][T14436] syzkaller0: entered promiscuous mode [ 465.052021][T14436] syzkaller0: entered allmulticast mode [ 465.405092][T14442] syzkaller0: entered promiscuous mode [ 465.410642][T14442] syzkaller0: entered allmulticast mode [ 466.296123][ T1095] net_ratelimit: 30 callbacks suppressed [ 466.296141][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 466.316570][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 466.331622][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 466.346359][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.876713][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 466.891297][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 466.905862][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 466.920258][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.452675][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 467.467707][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 467.799337][T14452] tipc: Enabled bearer , priority 0 [ 467.821525][T14453] syzkaller0: entered promiscuous mode [ 467.828145][T14453] syzkaller0: entered allmulticast mode [ 467.938018][T14468] tipc: Resetting bearer [ 468.025564][T14468] tipc: Disabling bearer [ 468.173958][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 468.204417][T14481] bridge_slave_1: left allmulticast mode [ 468.223243][T14481] bridge_slave_1: left promiscuous mode [ 468.229179][T14481] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.240045][T14481] bridge_slave_0: left allmulticast mode [ 468.246886][T14481] bridge_slave_0: left promiscuous mode [ 468.252931][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.805779][T14497] syzkaller0: entered promiscuous mode [ 468.821556][T14497] syzkaller0: entered allmulticast mode [ 471.623754][ T1095] net_ratelimit: 30 callbacks suppressed [ 471.623773][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 471.644355][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 471.659045][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 471.673572][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.216299][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 472.230804][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 472.246791][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 472.261397][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.800811][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 472.815331][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 473.081956][T14514] syzkaller0: entered promiscuous mode [ 473.088031][T14514] syzkaller0: entered allmulticast mode [ 475.469689][T14548] tipc: Enabling of bearer rejected, failed to enable media [ 475.561475][T14575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2911'. [ 475.834428][T14583] syzkaller0: entered promiscuous mode [ 475.863092][T14583] syzkaller0: entered allmulticast mode [ 476.162150][T14593] syzkaller0: entered promiscuous mode [ 476.169210][T14593] syzkaller0: entered allmulticast mode [ 476.951400][ T59] net_ratelimit: 30 callbacks suppressed [ 476.951418][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 476.971726][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 476.986470][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.000922][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.553212][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 477.567691][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 477.582053][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.597057][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.128549][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 478.143068][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 478.166676][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 478.588896][T14595] tipc: Enabled bearer , priority 0 [ 478.612779][T14594] tipc: Disabling bearer [ 478.954130][T14633] syzkaller0: entered promiscuous mode [ 478.959673][T14633] syzkaller0: entered allmulticast mode [ 479.122961][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 479.333518][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 479.357033][T14651] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.366221][T14651] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.375203][T14651] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.384024][T14651] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.464315][T14649] syzkaller0: entered promiscuous mode [ 479.469860][T14649] syzkaller0: entered allmulticast mode [ 481.745458][T14657] hsr0: entered promiscuous mode [ 481.752656][T14657] hsr0: left promiscuous mode [ 481.972316][T14661] tipc: Enabling of bearer rejected, failed to enable media [ 482.283397][ T6377] net_ratelimit: 30 callbacks suppressed [ 482.283415][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 482.304168][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 482.318568][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 482.332968][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.868560][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 482.882966][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 482.897560][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 482.912324][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.135288][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 330 seconds [ 483.146539][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 330 seconds [ 483.157877][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 330 seconds [ 483.169168][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 330 seconds [ 483.467614][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 483.482185][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 484.532854][T14689] netlink: 'syz.0.2943': attribute type 10 has an invalid length. [ 484.541614][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.549338][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.591696][T14689] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.598984][T14689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.606589][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.613826][T14689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.658608][T14689] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 484.907471][T14715] syzkaller0: entered promiscuous mode [ 484.913306][T14715] syzkaller0: entered allmulticast mode [ 486.926394][T14720] tipc: Enabled bearer , priority 0 [ 487.045985][T14716] tipc: Disabling bearer [ 487.093713][T14733] tipc: Enabled bearer , priority 0 [ 487.110344][T14733] syzkaller0: entered promiscuous mode [ 487.122355][T14733] syzkaller0: entered allmulticast mode [ 487.157563][T14733] tipc: Resetting bearer [ 487.188803][T14732] tipc: Resetting bearer [ 487.254339][T14732] tipc: Disabling bearer [ 487.401209][T14742] netlink: 'syz.2.2956': attribute type 10 has an invalid length. [ 487.622507][ T6371] net_ratelimit: 30 callbacks suppressed [ 487.622523][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 487.643643][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 487.658066][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 487.672611][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 487.690832][T14744] syzkaller0: entered promiscuous mode [ 487.698426][T14744] syzkaller0: entered allmulticast mode [ 487.871214][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067678000: rx timeout, send abort [ 488.278320][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 488.292711][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 488.307269][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 488.321686][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.371364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802645a800: rx timeout, send abort [ 488.383464][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067678000: abort rx timeout. Force session deactivation [ 488.844311][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 488.861018][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 488.879755][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802645a800: abort rx timeout. Force session deactivation [ 490.097554][T14755] syzkaller0: entered promiscuous mode [ 490.103353][T14755] syzkaller0: entered allmulticast mode [ 490.951616][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880257d2c00: rx timeout, send abort [ 491.446860][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067675c00: rx timeout, send abort [ 491.459939][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880257d2c00: abort rx timeout. Force session deactivation [ 491.955210][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067675c00: abort rx timeout. Force session deactivation [ 492.973288][ T59] net_ratelimit: 30 callbacks suppressed [ 492.973307][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 492.993667][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 493.008062][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.022501][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.523582][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 493.598440][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 493.612854][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 493.627379][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.641747][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.227974][T14882] syzkaller0: entered promiscuous mode [ 494.239568][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 494.253811][T14882] syzkaller0: entered allmulticast mode [ 494.259738][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 494.560807][T14885] syzkaller0: entered promiscuous mode [ 494.573423][T14885] syzkaller0: entered allmulticast mode [ 497.541129][T14953] sock: sock_timestamping_bind_phc: sock not bind to device [ 498.427470][ T6377] net_ratelimit: 30 callbacks suppressed [ 498.427484][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 498.447790][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 498.462248][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.476597][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.004212][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 499.018603][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 499.033189][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.047817][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.598362][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 499.613892][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 500.190534][T14957] tipc: Enabled bearer , priority 0 [ 500.211393][T14962] syzkaller0: entered promiscuous mode [ 500.217250][T14962] syzkaller0: entered allmulticast mode [ 500.295787][T14975] tipc: Resetting bearer [ 500.418360][T14975] tipc: Disabling bearer [ 500.484794][T15006] syzkaller0: entered promiscuous mode [ 500.515038][T15006] syzkaller0: entered allmulticast mode [ 500.638693][T15013] syzkaller0: entered promiscuous mode [ 500.645945][T15013] syzkaller0: entered allmulticast mode [ 500.917554][T15028] syzkaller0: entered promiscuous mode [ 500.923372][T15028] syzkaller0: entered allmulticast mode [ 501.012596][T15030] syzkaller0: entered promiscuous mode [ 501.019396][T15030] syzkaller0: entered allmulticast mode [ 501.424549][T15040] syzkaller0: entered promiscuous mode [ 501.430092][T15040] syzkaller0: entered allmulticast mode [ 501.694531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.700963][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.775777][T15052] syzkaller0: entered promiscuous mode [ 501.781313][T15052] syzkaller0: entered allmulticast mode [ 501.849392][T15054] syzkaller0: entered promiscuous mode [ 501.860527][T15054] syzkaller0: entered allmulticast mode [ 502.001231][T15058] syzkaller0: entered promiscuous mode [ 502.009587][T15058] syzkaller0: entered allmulticast mode [ 502.371871][T15072] syzkaller0: entered promiscuous mode [ 502.378716][T15072] syzkaller0: entered allmulticast mode [ 502.772240][T15084] syzkaller0: entered promiscuous mode [ 502.796741][T15084] syzkaller0: entered allmulticast mode [ 502.923115][T15090] syzkaller0: entered promiscuous mode [ 502.928661][T15090] syzkaller0: entered allmulticast mode [ 503.382259][T15107] syzkaller0: entered promiscuous mode [ 503.400276][T15107] syzkaller0: entered allmulticast mode [ 503.626156][T15115] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 503.640358][T15115] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.647687][T15115] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.696463][T15119] syzkaller0: entered promiscuous mode [ 503.718216][T15119] syzkaller0: entered allmulticast mode [ 503.823368][ T992] net_ratelimit: 30 callbacks suppressed [ 503.823384][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 503.843819][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 503.858143][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 503.872484][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.226846][T15138] syzkaller0: entered promiscuous mode [ 504.238413][T15138] syzkaller0: entered allmulticast mode [ 504.384653][T15144] netlink: 'syz.3.3065': attribute type 10 has an invalid length. [ 504.395953][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.403747][T15144] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.407515][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 504.425955][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 504.440460][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 504.454842][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.474316][T15144] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.481564][T15144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.489216][T15144] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.496508][T15144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.547816][T15144] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 505.014375][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 505.028911][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 505.359325][T15169] syzkaller0: entered promiscuous mode [ 505.383317][T15169] syzkaller0: entered allmulticast mode [ 505.405843][T15172] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 505.425577][T15172] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.432856][T15172] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.635288][T15198] syzkaller0: entered promiscuous mode [ 506.661154][T15198] syzkaller0: entered allmulticast mode [ 506.778798][T15205] tipc: Enabled bearer , priority 0 [ 506.872755][T15205] syzkaller0: entered promiscuous mode [ 506.893086][T15205] syzkaller0: entered allmulticast mode [ 506.948627][T15205] tipc: Resetting bearer [ 506.989121][T15204] tipc: Resetting bearer [ 507.035107][T15204] tipc: Disabling bearer [ 507.244096][T15224] syzkaller0: entered promiscuous mode [ 507.249646][T15224] syzkaller0: entered allmulticast mode [ 507.655627][T15241] syzkaller0: entered promiscuous mode [ 507.661341][T15241] syzkaller0: entered allmulticast mode [ 508.490076][T15243] syzkaller0: entered promiscuous mode [ 508.495686][T15243] syzkaller0: entered allmulticast mode [ 508.736266][T15248] syzkaller0: entered promiscuous mode [ 508.741816][T15248] syzkaller0: entered allmulticast mode [ 509.187988][ T6377] net_ratelimit: 30 callbacks suppressed [ 509.188002][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 509.208423][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 509.222754][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 509.237667][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 509.756204][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 509.770670][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 509.785058][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 509.799391][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 509.874518][T15209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.074218][T15252] syzkaller0: entered promiscuous mode [ 510.079786][T15252] syzkaller0: entered allmulticast mode [ 510.186914][T15255] pimreg1: tun_chr_ioctl cmd 1074025677 [ 510.192833][T15255] pimreg1: linktype set to 1 [ 510.262250][T15262] syzkaller0: entered promiscuous mode [ 510.268053][T15262] syzkaller0: entered allmulticast mode [ 510.340095][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 510.354871][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 510.648228][T15277] tipc: Enabled bearer , priority 0 [ 510.670671][T15277] syzkaller0: entered promiscuous mode [ 510.677950][T15277] syzkaller0: entered allmulticast mode [ 510.714143][T15277] tipc: Resetting bearer [ 510.724370][T15276] tipc: Resetting bearer [ 510.749285][T15276] tipc: Disabling bearer [ 510.759874][T15285] syzkaller0: entered promiscuous mode [ 510.767050][T15285] syzkaller0: entered allmulticast mode [ 511.154050][T15297] syzkaller0: entered promiscuous mode [ 511.159667][T15297] syzkaller0: entered allmulticast mode [ 511.394982][T15309] syzkaller0: entered promiscuous mode [ 511.401060][T15309] syzkaller0: entered allmulticast mode [ 513.203857][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 360 seconds [ 513.214845][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 360 seconds [ 513.226436][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 360 seconds [ 513.237654][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 360 seconds [ 513.583889][T15278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.059416][T15327] syzkaller0: entered promiscuous mode [ 514.083073][T15327] syzkaller0: entered allmulticast mode [ 514.407858][T15345] syzkaller0: entered promiscuous mode [ 514.413653][T15345] syzkaller0: entered allmulticast mode [ 514.424585][T15346] syzkaller0: entered promiscuous mode [ 514.430190][T15346] syzkaller0: entered allmulticast mode [ 514.487080][ T59] net_ratelimit: 30 callbacks suppressed [ 514.487093][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 514.507321][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 514.522026][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 514.536518][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 514.826250][T15352] syzkaller0: entered promiscuous mode [ 514.831809][T15352] syzkaller0: entered allmulticast mode [ 515.057488][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 515.072370][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 515.086809][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 515.101303][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 515.626614][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 515.641132][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 516.807794][T15354] syzkaller0: entered promiscuous mode [ 516.815206][T15354] syzkaller0: entered allmulticast mode [ 517.282535][T15337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.600506][T15366] syzkaller0: entered promiscuous mode [ 517.629619][T15366] syzkaller0: entered allmulticast mode [ 518.028663][T15382] syzkaller0: entered promiscuous mode [ 518.034731][T15382] syzkaller0: entered allmulticast mode [ 518.242915][T15386] tipc: Enabled bearer , priority 0 [ 518.252220][T15386] syzkaller0: entered promiscuous mode [ 518.259964][T15386] syzkaller0: entered allmulticast mode [ 518.311975][T15386] tipc: Resetting bearer [ 518.330977][T15385] tipc: Resetting bearer [ 518.360173][T15385] tipc: Disabling bearer [ 518.688304][T15403] syzkaller0: entered promiscuous mode [ 518.703095][T15403] syzkaller0: entered allmulticast mode [ 518.962932][T15415] syzkaller0: entered promiscuous mode [ 518.969760][T15415] syzkaller0: entered allmulticast mode [ 519.745006][ T11] net_ratelimit: 30 callbacks suppressed [ 519.745023][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 519.765324][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 519.780424][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 519.795019][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.313171][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 520.327815][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 520.342238][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 520.356568][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.873262][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 520.888121][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 521.330696][T15388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.814683][T15432] syzkaller0: entered promiscuous mode [ 521.820224][T15432] syzkaller0: entered allmulticast mode [ 522.254112][T15451] loop3: detected capacity change from 0 to 128 [ 522.281447][T15449] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$ [ 522.402050][T15453] syzkaller0: entered promiscuous mode [ 522.408217][T15453] syzkaller0: entered allmulticast mode [ 522.739484][T15464] syzkaller0: entered promiscuous mode [ 522.750564][T15464] syzkaller0: entered allmulticast mode [ 522.767847][T15466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 523.039497][T15476] syzkaller0: entered promiscuous mode [ 523.046397][T15476] syzkaller0: entered allmulticast mode [ 525.017493][ T11] net_ratelimit: 30 callbacks suppressed [ 525.017507][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 525.037745][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 525.052696][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 525.067209][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 525.087029][T15442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.265071][T15493] syzkaller0: entered promiscuous mode [ 525.270692][T15493] syzkaller0: entered allmulticast mode [ 525.358391][T15495] syzkaller0: entered promiscuous mode [ 525.372213][T15495] syzkaller0: entered allmulticast mode [ 525.584664][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 525.599077][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 525.613905][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 525.628964][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 525.756256][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3203'. [ 526.179755][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 526.194929][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 526.627225][T15537] syzkaller0: entered promiscuous mode [ 526.632860][T15537] syzkaller0: entered allmulticast mode [ 526.801382][T15544] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.253212][T15573] syzkaller0: entered promiscuous mode [ 528.258717][T15573] syzkaller0: entered allmulticast mode [ 529.162564][T15519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.364594][T15558] Bluetooth: hci2: command 0x0406 tx timeout [ 529.400469][T15578] syzkaller0: entered promiscuous mode [ 529.411945][T15578] syzkaller0: entered allmulticast mode [ 529.572717][T15588] loop2: detected capacity change from 0 to 256 [ 529.652176][ T27] audit: type=1804 audit(1774119330.030:2): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3228" name="/newroot/258/file0/bus" dev="loop2" ino=1048605 res=1 errno=0 [ 530.346498][ T6377] net_ratelimit: 30 callbacks suppressed [ 530.346517][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 530.366829][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 530.381299][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 530.395808][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 530.545221][T15604] syzkaller0: entered promiscuous mode [ 530.550773][T15604] syzkaller0: entered allmulticast mode [ 530.703379][T15608] syzkaller0: entered promiscuous mode [ 530.708922][T15608] syzkaller0: entered allmulticast mode [ 530.958246][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 530.972892][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 530.987507][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 531.001875][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 531.526607][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 531.541016][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 531.659283][ T27] audit: type=1326 audit(1774119332.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.0.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5b19c799 code=0x7fc00000 [ 531.731608][T15615] syzkaller0: entered promiscuous mode [ 531.737722][T15615] syzkaller0: entered allmulticast mode [ 532.948423][T15596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.208712][T15632] syzkaller0: entered promiscuous mode [ 533.223447][T15632] syzkaller0: entered allmulticast mode [ 533.376627][T15638] syzkaller0: entered promiscuous mode [ 533.382184][T15638] syzkaller0: entered allmulticast mode [ 533.749424][T15655] syzkaller0: entered promiscuous mode [ 533.757437][T15655] syzkaller0: entered allmulticast mode [ 534.041982][T15664] syzkaller0: entered promiscuous mode [ 534.047921][T15664] syzkaller0: entered allmulticast mode [ 534.217452][T15668] syzkaller0: entered promiscuous mode [ 534.223315][T15668] syzkaller0: entered allmulticast mode [ 534.235661][T15669] syzkaller0: entered promiscuous mode [ 534.241173][T15669] syzkaller0: entered allmulticast mode [ 534.389450][T15671] mmap: syz.0.3259 (15671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 534.470098][T15673] loop0: detected capacity change from 0 to 164 [ 534.484355][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 535.697338][ T6360] net_ratelimit: 30 callbacks suppressed [ 535.697351][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 535.717792][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 535.732156][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 535.746482][ T6360] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 536.263748][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 536.278591][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 536.293074][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 536.307403][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 536.639272][T15650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.836049][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 536.850591][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 536.996755][T15687] syzkaller0: entered promiscuous mode [ 537.007998][T15687] syzkaller0: entered allmulticast mode [ 537.117456][T15691] syzkaller0: entered promiscuous mode [ 537.123144][T15691] syzkaller0: entered allmulticast mode [ 537.348362][T15698] tmpfs: Bad value for 'mpol' [ 537.664759][ T6377] nci: nci_rsp_packet: unknown rsp opcode 0x9 [ 538.020163][T15716] syzkaller0: entered promiscuous mode [ 538.026325][T15716] syzkaller0: entered allmulticast mode [ 539.038686][T15737] syzkaller0: entered promiscuous mode [ 539.053491][T15737] syzkaller0: entered allmulticast mode [ 540.399736][T15760] syzkaller0: entered promiscuous mode [ 540.423171][T15760] syzkaller0: entered allmulticast mode [ 540.591426][T15703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.857538][T15762] syzkaller0: entered promiscuous mode [ 540.879441][T15762] syzkaller0: entered allmulticast mode [ 541.035780][ T6377] net_ratelimit: 30 callbacks suppressed [ 541.035800][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 541.056106][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 541.070500][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 541.085747][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 541.159288][T15770] syzkaller0: entered promiscuous mode [ 541.166381][T15770] syzkaller0: entered allmulticast mode [ 541.471370][T15786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3307'. [ 541.549238][T15777] syzkaller0: entered promiscuous mode [ 541.568745][T15777] syzkaller0: entered allmulticast mode [ 541.632489][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 541.647225][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 541.661841][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 541.676351][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 541.884495][T15799] loop3: detected capacity change from 0 to 256 [ 541.895733][T15799] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.955031][T15799] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 542.226616][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 542.241127][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 543.297026][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 390 seconds [ 543.307993][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 390 seconds [ 543.319243][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 390 seconds [ 543.330797][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 390 seconds [ 544.204340][T15810] syzkaller0: entered promiscuous mode [ 544.209937][T15810] syzkaller0: entered allmulticast mode [ 544.371430][T15819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3318'. [ 545.116700][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 545.300767][T15851] syzkaller0: entered promiscuous mode [ 545.307148][T15851] syzkaller0: entered allmulticast mode [ 545.881589][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 545.962494][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 546.057035][T15872] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 546.236468][T15877] syzkaller0: entered promiscuous mode [ 546.241975][T15877] syzkaller0: entered allmulticast mode [ 546.373439][ T59] net_ratelimit: 30 callbacks suppressed [ 546.373457][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 546.394092][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 546.410194][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 546.424816][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 546.610538][T15883] process 'syz.0.3348' launched './file0' with NULL argv: empty string added [ 546.841609][T15895] syzkaller0: entered promiscuous mode [ 546.853186][T15895] syzkaller0: entered allmulticast mode [ 546.965561][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 546.980101][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 546.994744][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 547.009062][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 547.321051][T15904] syzkaller0: entered promiscuous mode [ 547.327886][T15904] syzkaller0: entered allmulticast mode [ 547.540107][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 547.554721][ T1095] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 547.848408][T15837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.599981][T15923] syzkaller0: entered promiscuous mode [ 548.619348][T15923] syzkaller0: entered allmulticast mode [ 548.762658][T15925] capability: warning: `syz.2.3366' uses deprecated v2 capabilities in a way that may be insecure [ 551.434533][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3369'. [ 551.445679][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 551.463431][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 551.478388][ T11] net_ratelimit: 26 callbacks suppressed [ 551.478403][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 551.498765][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 551.513274][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 551.528261][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.054299][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 552.068912][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 552.083653][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 552.098168][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.476907][T15972] syzkaller0: entered promiscuous mode [ 552.482596][T15972] syzkaller0: entered allmulticast mode [ 552.625986][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 552.640470][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 552.698461][T15945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.638123][T16015] syzkaller0: entered promiscuous mode [ 553.663227][T16015] syzkaller0: entered allmulticast mode [ 556.482237][T16003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.678958][T16049] netlink: 'syz.3.3411': attribute type 16 has an invalid length. [ 556.728834][T16049] netlink: 'syz.3.3411': attribute type 17 has an invalid length. [ 556.757841][ T11] net_ratelimit: 30 callbacks suppressed [ 556.757857][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 556.778546][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 556.793191][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 556.808347][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 556.826820][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.834055][T16049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.841650][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.848883][T16049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.877963][T16049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.380914][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 557.395682][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 557.410142][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 557.424614][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 557.729800][T16077] syzkaller0: entered promiscuous mode [ 557.735417][T16077] syzkaller0: entered allmulticast mode [ 557.986584][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 558.420778][T16091] loop2: detected capacity change from 0 to 128 [ 558.431417][T16091] FAT-fs (loop2): Directory bread(block 524322) failed [ 558.439212][T16091] FAT-fs (loop2): Directory bread(block 524323) failed [ 558.448627][T16091] FAT-fs (loop2): Directory bread(block 524324) failed [ 558.456081][T16091] FAT-fs (loop2): Directory bread(block 524325) failed [ 558.468973][T16091] FAT-fs (loop2): Directory bread(block 524326) failed [ 558.478401][T16091] FAT-fs (loop2): Directory bread(block 524327) failed [ 558.501909][T16091] FAT-fs (loop2): Directory bread(block 524328) failed [ 558.510803][T16091] FAT-fs (loop2): Directory bread(block 524329) failed [ 558.541472][T16091] FAT-fs (loop2): Directory bread(block 524322) failed [ 558.558949][T16091] FAT-fs (loop2): Directory bread(block 524323) failed [ 560.152587][T16064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.575218][T16119] syzkaller0: entered promiscuous mode [ 560.580786][T16119] syzkaller0: entered allmulticast mode [ 561.701885][T16157] syzkaller0: entered promiscuous mode [ 561.708317][T16157] syzkaller0: entered allmulticast mode [ 562.126544][ T6377] net_ratelimit: 31 callbacks suppressed [ 562.126561][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 562.146985][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 562.161418][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 562.176774][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 562.724232][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 562.739024][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 562.753644][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 562.768221][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 562.773509][T16172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 562.924473][T16175] syzkaller0: entered promiscuous mode [ 562.930111][T16175] syzkaller0: entered allmulticast mode [ 563.127214][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.134252][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293182][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 563.308110][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 563.918956][T16130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.540421][T16205] syzkaller0: entered promiscuous mode [ 564.553150][T16205] syzkaller0: entered allmulticast mode [ 567.427812][ T992] net_ratelimit: 30 callbacks suppressed [ 567.427827][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 567.448317][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 567.462740][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 567.477083][ T992] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.654860][T16209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.886334][T16276] loop0: detected capacity change from 0 to 128 [ 567.912854][T16276] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 567.985612][ T5769] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 568.015629][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 568.030179][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 568.044680][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 568.059072][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 568.593508][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 568.611824][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 569.723129][ T27] audit: type=1800 audit(1774119370.100:4): pid=16309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3521" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 569.914031][T16317] loop0: detected capacity change from 0 to 512 [ 569.955814][T16317] FAT-fs (loop0): bogus number of FAT sectors [ 569.961965][T16317] FAT-fs (loop0): Can't find a valid FAT filesystem [ 570.217387][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 570.413161][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 570.430672][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.461689][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.498773][ T5814] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 570.516477][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.550796][ T5814] usb 4-1: config 0 descriptor?? [ 570.790112][T16332] loop0: detected capacity change from 0 to 1024 [ 570.834991][T16332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.849243][T16333] syzkaller0: entered promiscuous mode [ 570.862578][T16333] syzkaller0: entered allmulticast mode [ 570.905866][T16332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.960113][T16332] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 571.080098][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.103463][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.110752][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.118198][T12324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.159049][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.172022][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.188723][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.197978][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.216278][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.227436][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.238839][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.249230][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.259668][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.272658][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.283103][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.298018][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.306694][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.324356][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.331680][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.339662][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.354785][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.361969][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x5 [ 571.370162][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.378551][ T5814] chicony 0003:04F2:1123.0001: unknown main item tag 0x0 [ 571.385833][ T5814] chicony 0003:04F2:1123.0001: item fetching failed at offset 38/42 [ 571.397905][ T5814] chicony 0003:04F2:1123.0001: Chicony hid parse failed: -22 [ 571.405593][ T5814] chicony: probe of 0003:04F2:1123.0001 failed with error -22 [ 571.439918][ T5814] usb 4-1: USB disconnect, device number 2 [ 571.679982][T16301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.962150][T16354] binder: 16353:16354 ioctl 80186e84 0 returned -22 [ 571.979627][T16354] binder: 16353:16354 ioctl c00c6211 0 returned -14 [ 572.205326][T16360] loop0: detected capacity change from 0 to 1024 [ 572.237098][T16360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 572.250334][T16360] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 572.284896][T16360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 572.311712][T16360] System zones: 0-1, 3-36 [ 572.356227][T16360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.761144][ T59] net_ratelimit: 30 callbacks suppressed [ 572.761164][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 572.781560][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 572.796272][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 572.810697][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 573.139478][T16356] loop2: detected capacity change from 0 to 40427 [ 573.184094][T16356] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 573.220939][T16356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 573.236197][T16366] loop3: detected capacity change from 0 to 256 [ 573.267519][T16356] F2FS-fs (loop2): invalid crc value [ 573.281661][T16366] exfat: Deprecated parameter 'utf8' [ 573.318321][T16366] exfat: Deprecated parameter 'utf8' [ 573.356357][T16366] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acb235, utbl_chksum : 0xe619d30d) [ 573.379230][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 420 seconds [ 573.390882][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 420 seconds [ 573.396911][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 573.405411][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 420 seconds [ 573.417046][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 573.427773][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 420 seconds [ 573.442287][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 573.468206][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 573.655191][T16356] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 573.662657][T16356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 573.815160][T12047] syz-executor: attempt to access beyond end of device [ 573.815160][T12047] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 573.835018][T12324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.869813][T12047] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 574.120660][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 574.135420][ T6377] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 575.058316][T16391] syzkaller0: entered promiscuous mode [ 575.067712][T16391] syzkaller0: entered allmulticast mode [ 575.486003][T16398] syzkaller0: entered promiscuous mode [ 575.491538][T16398] syzkaller0: entered allmulticast mode [ 575.637177][T16402] loop2: detected capacity change from 0 to 256 [ 576.052556][T16400] loop1: detected capacity change from 0 to 40427 [ 576.061986][T16400] ======================================================= [ 576.061986][T16400] WARNING: The mand mount option has been deprecated and [ 576.061986][T16400] and is ignored by this kernel. Remove the mand [ 576.061986][T16400] option from the mount to silence this warning. [ 576.061986][T16400] ======================================================= [ 576.118837][T16400] F2FS-fs (loop1): invalid crc value [ 576.134130][T16400] F2FS-fs (loop1): Found nat_bits in checkpoint [ 576.232494][T16400] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 576.560665][T16412] syzkaller0: entered promiscuous mode [ 576.567080][T16412] syzkaller0: entered allmulticast mode [ 576.595064][T16371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.715726][T16414] loop0: detected capacity change from 0 to 16 [ 576.786896][T16414] erofs: (device loop0): mounted with root inode @ nid 36. [ 577.058922][T16427] netlink: 'syz.2.3563': attribute type 4 has an invalid length. [ 577.185581][T16431] loop3: detected capacity change from 0 to 512 [ 577.196126][T16431] EXT4-fs: Ignoring removed oldalloc option [ 577.206494][T16431] EXT4-fs: inline encryption not supported [ 577.233224][T16431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 577.284261][T16431] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.3565: iget: bad i_size value: -3674898675588399094 [ 577.343392][T16431] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.3565: couldn't read orphan inode 15 (err -117) [ 577.386825][T16431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.464764][T16438] syzkaller0: entered promiscuous mode [ 577.491449][T16438] syzkaller0: entered allmulticast mode [ 577.502250][T16434] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 577.574753][T12981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.796604][ T6373] net_ratelimit: 26 callbacks suppressed [ 577.796622][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 577.816768][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 577.831169][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 577.846076][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 577.906047][T16443] syzkaller0: entered promiscuous mode [ 577.911579][T16443] syzkaller0: entered allmulticast mode [ 577.959764][T16445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3569'. [ 578.060948][T16447] syzkaller0: entered promiscuous mode [ 578.073169][T16447] syzkaller0: entered allmulticast mode [ 578.251331][T16436] loop2: detected capacity change from 0 to 40427 [ 578.276939][T16436] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 578.295931][T16436] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 578.327010][T16436] F2FS-fs (loop2): invalid crc value [ 578.377219][T16436] F2FS-fs (loop2): Found nat_bits in checkpoint [ 578.436945][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 578.451509][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 578.466456][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 578.480854][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 578.529153][T16436] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 578.544857][T16436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 578.664843][ T27] audit: type=1800 audit(1774119379.050:5): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3566" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 578.711217][ T27] audit: type=1804 audit(1774119379.080:6): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3566" name="/newroot/341/file7/bus" dev="loop2" ino=10 res=1 errno=0 [ 579.040062][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 579.057099][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 579.670352][T16473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3580'. [ 579.729756][T16475] syzkaller0: entered promiscuous mode [ 579.735675][T16475] syzkaller0: entered allmulticast mode [ 579.821983][T16477] syzkaller0: entered promiscuous mode [ 579.829381][T16477] syzkaller0: entered allmulticast mode [ 580.504277][T16480] loop0: detected capacity change from 0 to 40427 [ 580.512461][T16480] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 580.553041][T16480] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 580.591635][T16480] F2FS-fs (loop0): invalid crc value [ 580.612219][T16480] F2FS-fs (loop0): Found nat_bits in checkpoint [ 580.710429][T16480] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 580.723431][T16480] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 580.891546][T16507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3591'. [ 581.122163][T16512] syzkaller0: entered promiscuous mode [ 581.148251][T16512] syzkaller0: entered allmulticast mode [ 581.270719][T16514] syzkaller0: entered promiscuous mode [ 581.348973][T16514] syzkaller0: entered allmulticast mode [ 581.517487][T16520] loop1: detected capacity change from 0 to 512 [ 581.533819][T16520] EXT4-fs: Ignoring removed nobh option [ 582.334794][T16520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.393252][T16520] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.510257][T13192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.748519][T16537] loop3: detected capacity change from 0 to 128 [ 582.760643][T16537] EXT4-fs: Ignoring removed nobh option [ 582.778932][T16537] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 582.797899][T16537] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 582.823114][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 582.951949][T16539] tipc: Enabled bearer , priority 0 [ 582.962147][T16539] overlayfs: missing 'lowerdir' [ 583.013181][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 583.022292][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 583.031999][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.046079][ T5814] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 583.055549][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.064421][ T5814] usb 1-1: Product: syz [ 583.068849][ T5814] usb 1-1: Manufacturer: syz [ 583.073645][ T5814] usb 1-1: SerialNumber: syz [ 583.233194][ T11] net_ratelimit: 26 callbacks suppressed [ 583.233212][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 583.253676][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 583.268370][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 583.282878][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.317002][ T5814] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 583.333817][ T5814] usb 1-1: USB disconnect, device number 2 [ 583.440065][T16541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3602'. [ 583.601000][T16545] syzkaller0: entered promiscuous mode [ 583.612194][T16545] syzkaller0: entered allmulticast mode [ 583.728831][T12981] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 583.813527][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 583.828079][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 583.842447][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 583.857169][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.953122][ T5814] tipc: Node number set to 1549705130 [ 584.094019][T16553] syzkaller0: entered promiscuous mode [ 584.099569][T16553] syzkaller0: entered allmulticast mode [ 584.151673][T16549] loop2: detected capacity change from 0 to 8192 [ 584.692242][T16564] 9pnet_fd: Insufficient options for proto=fd [ 585.105435][T16562] xt_CT: No such helper "snmp_trap" [ 585.114154][ T27] audit: type=1326 audit(1774119385.360:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.159490][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 585.174038][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 585.286754][ T27] audit: type=1326 audit(1774119385.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.353056][ T27] audit: type=1326 audit(1774119385.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.379364][ T27] audit: type=1326 audit(1774119385.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.401980][ T27] audit: type=1326 audit(1774119385.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.502201][ T27] audit: type=1326 audit(1774119385.610:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.565714][ T27] audit: type=1326 audit(1774119385.610:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16561 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5b19c799 code=0x7ffc0000 [ 585.603260][T16569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3613'. [ 585.780027][T16572] syzkaller0: entered promiscuous mode [ 585.820528][T16572] syzkaller0: entered allmulticast mode [ 586.693668][T16549] loop2: detected capacity change from 8192 to 0 [ 586.923425][T12047] syz-executor: attempt to access beyond end of device [ 586.923425][T12047] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 586.942106][T12047] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 587.625750][T16600] loop3: detected capacity change from 0 to 256 [ 587.643655][T16600] exfat: Deprecated parameter 'utf8' [ 587.649786][T16600] exfat: Deprecated parameter 'namecase' [ 587.752814][T16600] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 588.770920][ T11] net_ratelimit: 10 callbacks suppressed [ 588.770936][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 588.791428][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 588.806185][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 588.820685][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 588.885748][T16598] syzkaller0: entered promiscuous mode [ 588.913945][T16598] syzkaller0: entered allmulticast mode [ 589.134392][T16605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3623'. [ 589.669334][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 589.683999][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 589.698483][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 589.713056][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 590.298179][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 590.313024][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 592.084930][T16617] ip6gre1: entered promiscuous mode [ 592.090209][T16617] ip6gre1: entered allmulticast mode [ 592.249723][T16633] loop1: detected capacity change from 0 to 512 [ 592.293783][T16633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.317479][T16633] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 592.336638][T16633] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 592.348132][T16633] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 592.360388][T16633] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 592.369610][T16633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 592.386834][T16633] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3630: bg 0: block 34: padding at end of block bitmap is not set [ 592.419367][T16633] Quota error (device loop1): write_blk: dquota write failed [ 592.455913][T16633] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 592.494665][ T5814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 592.519277][T16633] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.3630: Failed to acquire dquot type 1 [ 592.536301][T16639] syzkaller0: entered promiscuous mode [ 592.548632][T16639] syzkaller0: entered allmulticast mode [ 592.574717][T16633] EXT4-fs (loop1): 1 truncate cleaned up [ 592.592103][T16633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 592.725884][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 592.754970][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.786382][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.805103][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.824922][ T5814] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.841409][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.861951][ T5814] usb 1-1: config 0 descriptor?? [ 592.999405][T16643] loop2: detected capacity change from 0 to 256 [ 593.009487][T16643] exfat: Deprecated parameter 'utf8' [ 593.015346][T16643] exfat: Deprecated parameter 'namecase' [ 593.021322][T16643] exfat: Deprecated parameter 'namecase' [ 593.122492][T16643] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 593.635098][T16645] loop3: detected capacity change from 0 to 128 [ 593.676266][T16645] EXT4-fs (loop3): Test dummy encryption mode enabled [ 593.718585][T16645] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.768293][T16645] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.849952][T16645] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 593.989701][T12981] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.067400][ T59] net_ratelimit: 22 callbacks suppressed [ 594.067419][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 594.087938][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 594.102349][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 594.116721][ T59] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.271184][ T5814] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 594.281084][ T5814] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 594.657438][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 594.671906][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 594.686487][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 594.700904][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.920992][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 594.931733][ T5814] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 594.959469][ T5814] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 594.971070][ T5814] microsoft 0003:045E:07DA.0002: no inputs found [ 594.977494][ T5814] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 595.011997][ T5814] usb 1-1: USB disconnect, device number 3 [ 595.133048][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 595.174642][ T5862] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 595.186017][ T5862] usb 2-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 595.213421][ T5862] usb 2-1: config 0 has no interface number 0 [ 595.237755][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 595.252659][ T11] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 595.339091][T16655] fido_id[16655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 595.366832][ T5862] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 595.385096][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.413673][ T5862] usb 2-1: Product: syz [ 595.413701][T13192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.462635][ T5862] usb 2-1: config 0 descriptor?? [ 595.473615][ T5862] usb 2-1: can't set config #0, error -71 [ 595.509069][ T5862] usb 2-1: USB disconnect, device number 2 [ 596.182777][T16669] syzkaller0: entered promiscuous mode [ 596.202705][T16669] syzkaller0: entered allmulticast mode [ 596.329575][T16665] syzkaller0: entered promiscuous mode [ 596.340885][T16665] syzkaller0: entered allmulticast mode [ 597.502617][T16720] loop0: detected capacity change from 0 to 256 [ 597.515799][T16720] exfat: Deprecated parameter 'utf8' [ 597.521966][T16720] exfat: Deprecated parameter 'namecase' [ 597.605727][T16720] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 599.069742][T16718] loop1: detected capacity change from 0 to 8192 [ 599.546700][ T12] net_ratelimit: 22 callbacks suppressed [ 599.546719][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 599.567500][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 599.581821][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 599.596274][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 600.103169][T16718] loop1: detected capacity change from 8192 to 0 [ 600.294565][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 600.309157][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 600.323765][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 600.338124][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 600.353546][T13192] syz-executor: attempt to access beyond end of device [ 600.353546][T13192] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 600.367287][T13192] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 600.869561][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 600.884539][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 602.804216][T16733] loop0: detected capacity change from 0 to 512 [ 603.016182][T16733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 603.046051][T16733] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 603.102751][T16733] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 603.112703][T16733] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 603.133123][T16733] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 603.141572][T16733] EXT4-fs (loop0): orphan cleanup on readonly fs [ 603.151044][T16733] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3649: bg 0: block 34: padding at end of block bitmap is not set [ 603.166455][T16733] Quota error (device loop0): write_blk: dquota write failed [ 603.174684][T16733] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 603.184898][T16733] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3649: Failed to acquire dquot type 1 [ 603.207675][T16733] EXT4-fs (loop0): 1 truncate cleaned up [ 603.220567][T16733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 603.440070][T16741] syzkaller0: entered promiscuous mode [ 603.445950][T16741] syzkaller0: entered allmulticast mode [ 603.451691][ T24] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 450 seconds [ 603.466522][ T24] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 450 seconds [ 603.477733][ T24] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,1024B). Runtime 450 seconds [ 603.494478][ T24] block nbd0: Possible stuck request ffff888021e90600: control (read@3072,1024B). Runtime 450 seconds [ 603.568754][T16743] syzkaller0: entered promiscuous mode [ 603.573338][T16601] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 603.586582][T16743] syzkaller0: entered allmulticast mode [ 603.762165][T16601] usb 1-1: Using ep0 maxpacket: 16 [ 603.780626][T16601] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 603.808367][T16601] usb 1-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 603.839818][T16601] usb 1-1: config 0 has no interface number 0 [ 603.856485][T16601] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 603.872556][T16601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.881975][T16601] usb 1-1: Product: syz [ 603.886467][T16601] usb 1-1: Manufacturer: syz [ 603.891097][T16601] usb 1-1: SerialNumber: syz [ 603.904187][T16601] usb 1-1: config 0 descriptor?? [ 603.925006][T16601] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 603.942256][T16601] usb 1-1: No valid video chain found. [ 604.079428][T16760] syzkaller0: entered promiscuous mode [ 604.088836][T16760] syzkaller0: entered allmulticast mode [ 604.181363][ T1144] usb 1-1: USB disconnect, device number 4 [ 604.304697][T16764] syzkaller0: entered promiscuous mode [ 604.313095][T16764] syzkaller0: entered allmulticast mode [ 604.567188][ T6373] net_ratelimit: 22 callbacks suppressed [ 604.567207][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 604.588292][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 604.602916][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.617705][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.712709][T16772] loop1: detected capacity change from 0 to 512 [ 605.365641][T16772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.402579][T16772] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.431165][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 605.445655][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 605.460027][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 605.474362][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 605.494939][T12324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.646330][T16780] syzkaller0: entered promiscuous mode [ 605.651969][T16780] syzkaller0: entered allmulticast mode [ 605.745280][T16777] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 605.961476][T13192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.009774][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 606.024285][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 606.623194][T16601] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 606.987782][T16601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.999205][T16601] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 607.008856][T16601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.046523][T16601] usb 1-1: config 0 descriptor?? [ 608.424468][T16601] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 608.473668][T16601] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input6 [ 609.023357][T16601] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 609.254656][T16601] usb 1-1: USB disconnect, device number 5 [ 609.581749][T16835] fido_id[16835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 609.649651][T16721] net_ratelimit: 18 callbacks suppressed [ 609.649667][T16721] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 609.670303][T16721] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 609.684960][T16721] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.701456][T16721] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.026002][T16857] syzkaller0: entered promiscuous mode [ 610.031613][T16857] syzkaller0: entered allmulticast mode [ 610.240112][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 610.254689][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 610.269079][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 610.283405][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.329686][T16860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3684'. [ 610.346522][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3684'. [ 610.355781][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'. [ 610.592309][T16866] loop1: detected capacity change from 0 to 512 [ 610.624212][T16866] EXT4-fs: Ignoring removed nobh option [ 610.629842][T16866] EXT4-fs: Ignoring removed mblk_io_submit option [ 610.716923][T16866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.774296][T16866] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.834361][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 610.849128][ T6371] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 612.011205][T13192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.186867][T16874] loop1: detected capacity change from 0 to 512 [ 612.214717][T16874] EXT4-fs: Ignoring removed nobh option [ 612.220348][T16874] EXT4-fs: Ignoring removed mblk_io_submit option [ 612.332411][T16874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.387740][T16874] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.733064][T16843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.747907][T13192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.994318][T16884] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3690'. [ 614.327812][ T29] INFO: task udevd:5779 blocked for more than 143 seconds. [ 614.335252][ T29] Not tainted syzkaller #0 [ 614.340236][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 614.365220][ T29] task:udevd state:D stack:25232 pid:5779 ppid:5136 flags:0x00004006 [ 614.405881][ T29] Call Trace: [ 614.413254][ T29] [ 614.420832][ T29] __schedule+0x1553/0x45a0 [ 614.432562][T16891] syzkaller0: entered promiscuous mode [ 614.452745][ T29] ? asan.module_dtor+0x20/0x20 [ 614.454134][T16891] syzkaller0: entered allmulticast mode [ 614.470141][ T29] ? mark_lock+0x94/0x320 [ 614.474915][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 614.493294][ T29] ? lock_chain_count+0x20/0x20 [ 614.523083][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 614.533250][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 614.553064][ T29] schedule+0xbd/0x170 [ 614.557236][ T29] io_schedule+0x80/0xd0 [ 614.587397][ T29] folio_wait_bit_common+0x714/0xfa0 [ 614.603291][ T29] ? folio_wait_bit+0x30/0x30 [ 614.608085][ T29] ? _compound_head+0x120/0x120 [ 614.623151][ T29] ? filemap_add_folio+0x192/0x3c0 [ 614.628362][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 614.652984][ T29] ? blkdev_writepage+0x30/0x30 [ 614.661791][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 614.673016][ T29] ? blkdev_writepage+0x30/0x30 [ 614.678118][ T29] read_part_sector+0xd2/0x340 [ 614.689615][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 614.695165][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 614.700581][ T29] ? put_partition+0x370/0x370 [ 614.710724][ T29] ? alloc_pages+0x4dc/0x740 [ 614.713089][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 614.720832][ T29] bdev_disk_changed+0x740/0x1420 [ 614.728922][ T787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 614.731137][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 614.745287][ T6373] net_ratelimit: 18 callbacks suppressed [ 614.745301][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 614.752696][ T787] usb 3-1: config 0 has no interface number 0 [ 614.765897][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 614.785592][ T787] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.785619][ T787] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.785659][ T787] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 614.785681][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.802411][ T29] ? iput+0x343/0x920 [ 614.807821][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.821510][ T787] usb 3-1: config 0 descriptor?? [ 614.824297][ T6373] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.865240][ T29] blkdev_get_whole+0x30d/0x390 [ 614.893114][ T29] blkdev_get_by_dev+0x279/0x600 [ 614.898269][ T29] blkdev_open+0x152/0x360 [ 614.913525][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 614.918284][ T29] do_dentry_open+0x8c6/0x1500 [ 614.923287][ T29] path_openat+0x27f1/0x3230 [ 614.928114][ T29] ? do_sys_openat2+0xda/0x1d0 [ 614.933008][ T29] ? verify_lock_unused+0x140/0x140 [ 614.938385][ T29] ? do_filp_open+0x430/0x430 [ 614.943485][ T29] ? __virt_addr_valid+0x18c/0x540 [ 614.948830][ T29] do_filp_open+0x1f5/0x430 [ 614.953785][ T29] ? vfs_tmpfile+0x490/0x490 [ 614.958497][ T29] ? _raw_spin_unlock+0x28/0x40 [ 614.963938][ T29] ? alloc_fd+0x58f/0x630 [ 614.968407][ T29] do_sys_openat2+0x134/0x1d0 [ 614.973958][ T29] ? do_sys_open+0xe0/0xe0 [ 614.979891][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 614.987373][ T29] ? lock_chain_count+0x20/0x20 [ 614.992356][ T29] __x64_sys_openat+0x139/0x160 [ 614.998040][ T29] do_syscall_64+0x55/0xa0 [ 615.002593][ T29] ? clear_bhb_loop+0x40/0x90 [ 615.008109][ T29] ? clear_bhb_loop+0x40/0x90 [ 615.013947][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.020104][ T29] RIP: 0033:0x7f1b60ea7407 [ 615.025083][ T29] RSP: 002b:00007ffcb3fd98a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 615.034024][ T29] RAX: ffffffffffffffda RBX: 00007f1b61578880 RCX: 00007f1b60ea7407 [ 615.042192][ T29] RDX: 00000000000a0800 RSI: 000055d1ef9ad360 RDI: ffffffffffffff9c [ 615.051537][ T29] RBP: 000055d1ef9ac910 R08: 0000000000000000 R09: 0000000000000000 [ 615.059995][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d1ef9d0f80 [ 615.071271][ T29] R13: 000055d1ef9c4410 R14: 0000000000000000 R15: 000055d1ef9d0f80 [ 615.079815][ T29] [ 615.083407][ T29] [ 615.083407][ T29] Showing all locks held in the system: [ 615.091276][ T29] 2 locks held by kworker/1:1/28: [ 615.099817][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 615.111135][ T29] #1: ffffc90000a4fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 615.124891][ T29] 1 lock held by khungtaskd/29: [ 615.129869][ T29] #0: ffffffff8d132060 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 615.140166][ T29] 5 locks held by kworker/0:2/787: [ 615.145594][ T29] #0: ffff888147654138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 615.157358][ T29] #1: ffffc90003a3fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 615.169564][ T29] #2: ffff88802545a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 615.178820][ T29] #3: ffff888062a63190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 615.188542][ T29] #4: ffff8880280ff160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 615.198261][ T29] 2 locks held by getty/5529: [ 615.204634][ T29] #0: ffff888031c320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 615.215562][ T29] #1: ffffc900032762f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 615.226033][ T29] 1 lock held by udevd/5779: [ 615.230793][ T29] #0: ffff888021d824c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 615.241248][ T29] 2 locks held by kworker/u4:15/6373: [ 615.246986][ T29] 3 locks held by kworker/u4:2/16721: [ 615.252450][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 615.264671][ T29] #1: ffffc90011cc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 615.276061][ T29] #2: ffffffff8e3c0d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 615.285654][ T29] 2 locks held by syz.1.3693/16890: [ 615.290905][ T29] #0: ffffffff8e3c0d48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 615.300339][ T29] #1: ffffffff8d137a38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 615.332773][ T29] [ 615.335287][ T29] ============================================= [ 615.335287][ T29] [ 615.344102][ T29] NMI backtrace for cpu 1 [ 615.348579][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 615.355855][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.365967][ T29] Call Trace: [ 615.369286][ T29] [ 615.372272][ T29] dump_stack_lvl+0x18c/0x250 [ 615.377034][ T29] ? show_regs_print_info+0x20/0x20 [ 615.382289][ T29] ? load_image+0x400/0x400 [ 615.386835][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 615.391821][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 615.398011][ T29] ? _printk+0xde/0x130 [ 615.402230][ T29] ? load_image+0x400/0x400 [ 615.406780][ T29] ? load_image+0x400/0x400 [ 615.411425][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 615.417544][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 615.423585][ T29] watchdog+0xf3d/0xf80 [ 615.427804][ T29] ? watchdog+0x1e1/0xf80 [ 615.432190][ T29] kthread+0x2fa/0x390 [ 615.436313][ T29] ? hungtask_pm_notify+0x90/0x90 [ 615.441405][ T29] ? kthread_blkcg+0xd0/0xd0 [ 615.446029][ T29] ret_from_fork+0x48/0x80 [ 615.450481][ T29] ? kthread_blkcg+0xd0/0xd0 [ 615.455129][ T29] ret_from_fork_asm+0x11/0x20 [ 615.459944][ T29] [ 615.463953][ T29] Sending NMI from CPU 1 to CPUs 0: [ 615.469203][ C0] NMI backtrace for cpu 0 [ 615.469213][ C0] CPU: 0 PID: 6360 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 615.469230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.469240][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 615.469260][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x17/0x80 [ 615.469284][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 40 97 7c 7e 65 8b 15 41 97 7c 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 [ 615.469301][ C0] RSP: 0018:ffffc9000c49f590 EFLAGS: 00000296 [ 615.469314][ C0] RAX: ffffffff813b37e6 RBX: ffffffff81000000 RCX: ffff88804f983c00 [ 615.469327][ C0] RDX: 0000000080000002 RSI: ffffffff81000000 RDI: ffffffff81defa0f [ 615.469338][ C0] RBP: ffffc9000c49f6b8 R08: ffffc9000c49f730 R09: 0000000000000003 [ 615.469350][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000c49f668 [ 615.469373][ C0] R13: dffffc0000000000 R14: ffffc9000c49f69d R15: ffffffff81defa0f [ 615.469385][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 615.469397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.469407][ C0] CR2: 000000110c29dae0 CR3: 000000002e14c000 CR4: 00000000003506f0 [ 615.469421][ C0] Call Trace: [ 615.469426][ C0] [ 615.469431][ C0] unwind_next_frame+0x1c6/0x2970 [ 615.469453][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 615.469470][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 615.469485][ C0] ? stack_trace_save+0x100/0x100 [ 615.469509][ C0] arch_stack_walk+0x144/0x190 [ 615.469528][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 615.469564][ C0] stack_trace_save+0xaa/0x100 [ 615.469584][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 615.469620][ C0] ? skb_release_data+0x634/0x800 [ 615.469637][ C0] ? worker_thread+0xa55/0xfc0 [ 615.469657][ C0] ? kthread+0x2fa/0x390 [ 615.469671][ C0] ? ret_from_fork+0x48/0x80 [ 615.469690][ C0] ? ret_from_fork_asm+0x11/0x20 [ 615.469716][ C0] kasan_set_track+0x4e/0x70 [ 615.469733][ C0] ? kasan_set_track+0x4e/0x70 [ 615.469750][ C0] ? kasan_save_free_info+0x2e/0x50 [ 615.469771][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 615.469795][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 615.469839][ C0] ? kmem_cache_free+0xf8/0x270 [ 615.469862][ C0] kasan_save_free_info+0x2e/0x50 [ 615.469884][ C0] ____kasan_slab_free+0x126/0x1e0 [ 615.469904][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 615.469924][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 615.469940][ C0] kmem_cache_free+0xf8/0x270 [ 615.469967][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 615.469994][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 615.470015][ C0] process_scheduled_works+0xa5d/0x15d0 [ 615.470051][ C0] ? worker_attach_to_pool+0x380/0x380 [ 615.470076][ C0] ? assign_work+0x3d2/0x5d0 [ 615.470100][ C0] worker_thread+0xa55/0xfc0 [ 615.470134][ C0] kthread+0x2fa/0x390 [ 615.470149][ C0] ? pr_cont_work+0x560/0x560 [ 615.470169][ C0] ? kthread_blkcg+0xd0/0xd0 [ 615.470185][ C0] ret_from_fork+0x48/0x80 [ 615.470204][ C0] ? kthread_blkcg+0xd0/0xd0 [ 615.470220][ C0] ret_from_fork_asm+0x11/0x20 [ 615.470250][ C0] [ 615.489811][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 615.546452][ T787] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 615.551006][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 615.610191][ T787] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 615.610423][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 615.632042][ T787] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 615.637895][ T5930] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.654266][ T787] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 615.762274][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 615.762324][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 615.762372][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.762402][ T29] Call Trace: [ 615.762423][ T29] [ 615.762448][ T29] dump_stack_lvl+0x18c/0x250 [ 615.764998][ T787] uclogic: probe of 0003:28BD:0071.0004 failed with error -71 [ 615.789196][ T787] usb 3-1: USB disconnect, device number 2 [ 615.929245][ T29] ? show_regs_print_info+0x20/0x20 [ 615.934488][ T29] ? load_image+0x400/0x400 [ 615.939020][ T29] panic+0x2dc/0x730 [ 615.942959][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 615.948629][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 615.953154][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 615.958735][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 615.964917][ T29] watchdog+0xf7c/0xf80 [ 615.969104][ T29] ? watchdog+0x1e1/0xf80 [ 615.973470][ T29] kthread+0x2fa/0x390 [ 615.977569][ T29] ? hungtask_pm_notify+0x90/0x90 [ 615.982605][ T29] ? kthread_blkcg+0xd0/0xd0 [ 615.987201][ T29] ret_from_fork+0x48/0x80 [ 615.991629][ T29] ? kthread_blkcg+0xd0/0xd0 [ 615.996236][ T29] ret_from_fork_asm+0x11/0x20 [ 616.001018][ T29] [ 616.004626][ T29] Kernel Offset: disabled [ 616.008978][ T29] Rebooting in 86400 seconds..