last executing test programs: 2m56.421542984s ago: executing program 2 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m56.119641254s ago: executing program 2 (id=279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4f}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @local, 0x6}, 0x1c) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}, 0x2400}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m56.036994177s ago: executing program 2 (id=285): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x7) 2m55.773913656s ago: executing program 2 (id=293): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) 2m55.462775137s ago: executing program 2 (id=302): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2m55.146091068s ago: executing program 1 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m55.122931529s ago: executing program 1 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m54.894988006s ago: executing program 4 (id=316): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m54.821509499s ago: executing program 3 (id=318): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dd0f14000e00003c0ff000800800ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2m54.789935941s ago: executing program 1 (id=319): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x80408}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}}, 0x0) 2m54.761117081s ago: executing program 3 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80400001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x5, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x7ff, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x10000, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0x0, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x9, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x104, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m54.727672092s ago: executing program 1 (id=322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m54.716924633s ago: executing program 4 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x80, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf84ecc34600", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 2m54.673907634s ago: executing program 1 (id=325): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) 2m54.646960005s ago: executing program 4 (id=326): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) 2m54.645975495s ago: executing program 3 (id=327): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40002000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m54.593826667s ago: executing program 2 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m54.533707149s ago: executing program 4 (id=330): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) 2m54.480693091s ago: executing program 3 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2m54.457378912s ago: executing program 4 (id=332): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dd0f14000e00003c0ff000800800ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2m54.374976985s ago: executing program 4 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2m54.372341755s ago: executing program 1 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dd0f14000e00003c0ff000800800ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2m54.325465796s ago: executing program 3 (id=334): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}, 0x49}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) 2m54.280404028s ago: executing program 3 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "dd8a2322448fe262c0d7af89b8714969b33ca40311bf164fe39171a5b540c7e150878f73f5b5be456202d98738ef118e15638f4821938d0b9c3a950dab37540ed2f28000c6c055b60e44786072fe49f089bd4994ad1fda9895974c509763e913eab650cbb98ff5a8ba8963da17756e409db1f0657bf7f2c73d6f3736e342b6b6bef5a175ee55114a3da98d916d5de19a90a433803444f608bd442d3335ccd43c17cf606c6beaf5151a0b2a216d5faa561160e7446a73d55444b428180374de13b2b9d785e030132c4f68540340e71e91087e2cca3c495835a03873e4b90ce323cf4f3815b2a8b52d6ef6632225f17d23aaa2d8b0b0f91c7fd653499c69928dc0"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m39.557025565s ago: executing program 32 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m38.910922977s ago: executing program 33 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dd0f14000e00003c0ff000800800ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2m38.894922677s ago: executing program 34 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "dd8a2322448fe262c0d7af89b8714969b33ca40311bf164fe39171a5b540c7e150878f73f5b5be456202d98738ef118e15638f4821938d0b9c3a950dab37540ed2f28000c6c055b60e44786072fe49f089bd4994ad1fda9895974c509763e913eab650cbb98ff5a8ba8963da17756e409db1f0657bf7f2c73d6f3736e342b6b6bef5a175ee55114a3da98d916d5de19a90a433803444f608bd442d3335ccd43c17cf606c6beaf5151a0b2a216d5faa561160e7446a73d55444b428180374de13b2b9d785e030132c4f68540340e71e91087e2cca3c495835a03873e4b90ce323cf4f3815b2a8b52d6ef6632225f17d23aaa2d8b0b0f91c7fd653499c69928dc0"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m38.881875398s ago: executing program 35 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2m6.655591958s ago: executing program 5 (id=338): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80400001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x5, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x7ff, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x10000, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0x0, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x9, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x104, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m6.579306571s ago: executing program 6 (id=339): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x80408}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}}, 0x0) 35.690398401s ago: executing program 7 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x20000000, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 34.880760158s ago: executing program 8 (id=481): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001014d9ec29bd7000fcd9df2508000300010000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 34.879657818s ago: executing program 8 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 24.219643015s ago: executing program 7 (id=487): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000003600)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}], 0x1}, 0x4041) 23.662110235s ago: executing program 8 (id=488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) 21.47497125s ago: executing program 0 (id=496): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 21.423969802s ago: executing program 0 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x20000000, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 12.280659857s ago: executing program 7 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 12.173421551s ago: executing program 8 (id=499): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) 12.107573763s ago: executing program 0 (id=500): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x7) 11.90434837s ago: executing program 0 (id=501): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x21, 0x80000, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x2000001, 0x4010933, r0, 0xb4b40000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="84010000190001002bbd7000fbdbdf251d010900500012800c00bf00fffffeffffffffff3e005f800400760008006000", @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card2/oss_mixer\x00', 0x498a00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0xff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001", @ANYRESHEX=r1], 0x104}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) 527.775361ms ago: executing program 7 (id=502): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 526.682372ms ago: executing program 7 (id=503): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) 496.485322ms ago: executing program 7 (id=504): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 174.117934ms ago: executing program 0 (id=505): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300060008004a0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 113.033896ms ago: executing program 8 (id=506): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002806fffe8000000000000000000000000000aafe8000000000000000000000000000aa000040014a4cee2decbcd612643ad3a091c8f6acf3998a7d56a87cb6d473c8d1b33df6de748d34180217c542bc3012617124d7f0fa3141b2ec1c65e6ae4d953b9ebead2ae1949eec044853b5d8cf64f9dd35b80244545bb1451843d7bb34e3577c99b5f0adf43e10285024fe1bceaac98109767e8fc66f15d7c1fe19b105b06a7826199a504233194d6e7f2f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780000011187d5c9ed7eed4e6de58079eef72628000000"], 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'dh\x00', 0x11, 0xfffffdfd, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 22.806779ms ago: executing program 8 (id=507): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 0 (id=508): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000003600)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8d4e}]}}]}, 0x44}}, 0x20000000) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}], 0x1}, 0x4041) kernel console output (not intermixed with test programs): a:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.133888][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.135508][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.137770][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.139932][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.143429][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.145043][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.157529][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.158939][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.160364][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.161810][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.163955][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.165537][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.168499][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.170098][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.171529][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.173039][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.175228][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.178759][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.179462][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.180068][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.181875][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.184318][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.187041][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.189361][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.190441][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.191981][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.193709][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.195185][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.197071][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.198545][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.200030][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.201606][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.203088][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.204624][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.210454][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.213132][ T4325] device veth0_vlan entered promiscuous mode [ 34.217112][ T4325] device veth1_vlan entered promiscuous mode [ 34.219434][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.221119][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.222461][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.223940][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.225280][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.231099][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.238178][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.239415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.241013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.242608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.246369][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.247731][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.249171][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.250491][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.277393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.280619][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.281965][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.283247][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.284630][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.321735][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.322939][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.324574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.339564][ T4325] device veth0_macvtap entered promiscuous mode [ 34.341927][ T4325] device veth1_macvtap entered promiscuous mode [ 34.346923][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.351051][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.352634][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.353954][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.380609][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.381899][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.383299][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.384430][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.385358][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.388663][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.390105][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.391740][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.393254][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.394859][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.397310][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.399077][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.401604][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.419034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.420594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.422664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.424222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.445118][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.445806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.447299][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.448262][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.449680][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.452323][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.454017][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.459038][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.461644][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.463625][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.465248][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.467697][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.470437][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.474309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.476350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.477865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.524059][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529303][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.529922][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.530623][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.536731][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.540138][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.549371][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.551078][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.562409][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.565363][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.777044][ T4406] device hsr_slave_1 left promiscuous mode [ 34.828179][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.829781][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.834167][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.868697][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.870123][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.871459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.890202][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.899848][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.902596][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.976910][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.979661][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.033948][ T4411] loop3: detected capacity change from 0 to 32768 [ 35.049283][ T4411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4411) [ 35.058126][ T4411] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.059845][ T4411] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 35.061144][ T4411] BTRFS info (device loop3): setting nodatasum [ 35.062225][ T4411] BTRFS info (device loop3): force zlib compression, level 3 [ 35.063443][ T4411] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 35.065025][ T4411] BTRFS info (device loop3): use lzo compression, level 0 [ 35.068596][ T4411] BTRFS info (device loop3): turning on flush-on-commit [ 35.069837][ T4411] BTRFS info (device loop3): enabling auto defrag [ 35.070957][ T4411] BTRFS info (device loop3): max_inline at 4096 [ 35.071920][ T4411] BTRFS info (device loop3): using free space tree [ 35.103019][ T4411] BTRFS info (device loop3): enabling ssd optimizations [ 35.161812][ T4321] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.198778][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 35.241879][ T4455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.245558][ T4455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.280049][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 35.280070][ T4322] Bluetooth: hci3: command 0x041b tx timeout [ 35.281124][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 35.302522][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.303991][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.599543][ T4461] loop4: detected capacity change from 0 to 32768 [ 35.606717][ T4461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.13 (4461) [ 35.622694][ T4461] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.624740][ T4461] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 35.626631][ T4461] BTRFS info (device loop4): setting nodatasum [ 35.627690][ T4461] BTRFS info (device loop4): force zlib compression, level 3 [ 35.628904][ T4461] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 35.630433][ T4461] BTRFS info (device loop4): use lzo compression, level 0 [ 35.631658][ T4461] BTRFS info (device loop4): turning on flush-on-commit [ 35.632815][ T4461] BTRFS info (device loop4): enabling auto defrag [ 35.633793][ T4461] BTRFS info (device loop4): max_inline at 4096 [ 35.635009][ T4461] BTRFS info (device loop4): using free space tree [ 35.664831][ T4461] BTRFS info (device loop4): enabling ssd optimizations [ 35.703483][ T4325] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.755517][ T4312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4312) [ 36.191223][ T4502] xt_CT: No such helper "pptp" [ 36.245060][ T4499] loop3: detected capacity change from 0 to 32768 [ 36.254890][ T4499] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 36.283091][ T4501] loop2: detected capacity change from 0 to 32768 [ 36.293531][ T4501] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.16 (4501) [ 36.300334][ T4312] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 36.302771][ T4501] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.307643][ T4501] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 36.311136][ T4501] BTRFS info (device loop2): force clearing of disk cache [ 36.312787][ T4501] BTRFS info (device loop2): metadata ratio 0 [ 36.315180][ T4501] BTRFS info (device loop2): enabling ssd optimizations [ 36.319474][ T4501] BTRFS info (device loop2): using spread ssd allocation scheme [ 36.322279][ T4501] BTRFS info (device loop2): using free space tree [ 36.326253][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 36.395664][ T4501] BTRFS info (device loop2): rebuilding free space tree [ 36.462462][ T4331] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.790202][ T51] block nbd0: Attempted send on invalid socket [ 36.791451][ T51] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 36.794375][ T51] block nbd0: Attempted send on invalid socket [ 36.795420][ T51] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 37.008590][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.009994][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.286356][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 37.355876][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 37.356510][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 37.358532][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 37.515047][ T4544] loop4: detected capacity change from 0 to 40427 [ 37.543138][ T4544] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 37.544606][ T4544] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.547811][ T4544] F2FS-fs (loop4): invalid crc value [ 37.548817][ T4544] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 37.569299][ T4544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.589106][ T4544] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.592569][ T4544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.613050][ T4544] syz.4.25: attempt to access beyond end of device [ 37.613050][ T4544] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 37.623272][ T4544] syz.4.25: attempt to access beyond end of device [ 37.623272][ T4544] loop4: rw=2049, sector=53288, nr_sectors = 8 limit=40427 [ 37.626563][ T4544] syz.4.25: attempt to access beyond end of device [ 37.626563][ T4544] loop4: rw=2049, sector=53328, nr_sectors = 16 limit=40427 [ 37.629093][ T4544] syz.4.25: attempt to access beyond end of device [ 37.629093][ T4544] loop4: rw=2049, sector=53352, nr_sectors = 8 limit=40427 [ 37.631384][ T4544] syz.4.25: attempt to access beyond end of device [ 37.631384][ T4544] loop4: rw=2049, sector=53384, nr_sectors = 32 limit=40427 [ 37.644116][ T4544] syz.4.25: attempt to access beyond end of device [ 37.644116][ T4544] loop4: rw=2049, sector=53440, nr_sectors = 16 limit=40427 [ 37.646725][ T4544] syz.4.25: attempt to access beyond end of device [ 37.646725][ T4544] loop4: rw=2049, sector=53488, nr_sectors = 8 limit=40427 [ 37.690978][ T4325] syz-executor: attempt to access beyond end of device [ 37.690978][ T4325] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.777177][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 37.909364][ T4570] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 38.119996][ T4580] loop0: detected capacity change from 0 to 32768 [ 38.183372][ T4586] loop1: detected capacity change from 0 to 128 [ 38.184810][ T4586] ======================================================= [ 38.184810][ T4586] WARNING: The mand mount option has been deprecated and [ 38.184810][ T4586] and is ignored by this kernel. Remove the mand [ 38.184810][ T4586] option from the mount to silence this warning. [ 38.184810][ T4586] ======================================================= [ 38.214116][ T4586] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 38.216372][ T4582] loop2: detected capacity change from 0 to 32768 [ 38.221423][ T4582] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 38.273755][ T4586] hpfs: filesystem error: improperly stopped [ 38.274780][ T4586] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 38.280595][ T4586] hpfs: You really don't want any checks? You are crazy... [ 38.282054][ T4586] hpfs: Code page index out of array [ 38.295911][ T4586] hpfs: code page support is disabled [ 38.297433][ T4586] hpfs: hpfs_map_4sectors(): unaligned read [ 38.298520][ T4586] hpfs: hpfs_map_4sectors(): unaligned read [ 38.299394][ T4586] hpfs: filesystem error: unable to find root dir [ 38.407732][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 38.950273][ T4314] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.961843][ T4586] hpfs: hpfs_map_4sectors(): unaligned read [ 39.120145][ T4600] Bluetooth: MGMT ver 1.22 [ 39.121250][ T4600] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 39.183202][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.189530][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.211871][ T4606] random: crng reseeded on system resumption [ 39.257776][ T4612] syz.1.47 (4612): attempted to duplicate a private mapping with mremap. This is not supported. [ 39.342809][ T4618] loop2: detected capacity change from 0 to 512 [ 39.352330][ T4618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.356527][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 39.363217][ T4618] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.443062][ T4623] Zero length message leads to an empty skb [ 39.535913][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 39.535937][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 39.537903][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 39.642153][ T4618] EXT4-fs (loop2): 1 truncate cleaned up [ 39.643216][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.213399][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 40.232400][ T4631] loop4: detected capacity change from 0 to 32768 [ 40.260109][ T4631] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 40.261565][ T4631] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 40.348521][ T4631] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 40.351206][ T4493] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 40.352715][ T4493] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 40.380378][ T4493] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 40.381878][ T4493] gfs2: fsid=syz:syz.0: jid=0: Done [ 40.383145][ T4631] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 40.775679][ T4631] gfs2: fsid=syz:syz.0: found 1 quota changes [ 40.850635][ T4325] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 40.855799][ T4325] CPU: 0 PID: 4325 Comm: syz-executor Not tainted syzkaller #0 [ 40.857026][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 40.858622][ T4325] Call trace: [ 40.859149][ T4325] dump_backtrace+0x1c0/0x1ec [ 40.859903][ T4325] show_stack+0x2c/0x3c [ 40.860611][ T4325] __dump_stack+0x30/0x40 [ 40.861318][ T4325] dump_stack_lvl+0xf4/0x15c [ 40.862055][ T4325] dump_stack+0x1c/0x5c [ 40.862718][ T4325] gfs2_assert_warn_i+0x16c/0x26c [ 40.863509][ T4325] gfs2_quota_cleanup+0x464/0x668 [ 40.864321][ T4325] gfs2_make_fs_ro+0x368/0x438 [ 40.865128][ T4325] gfs2_put_super+0x1e0/0x760 [ 40.865917][ T4325] generic_shutdown_super+0x130/0x324 [ 40.866775][ T4325] kill_block_super+0x70/0xdc [ 40.867563][ T4325] gfs2_kill_sb+0xc0/0xd4 [ 40.868312][ T4325] deactivate_locked_super+0xac/0x120 [ 40.869219][ T4325] deactivate_super+0xe4/0x104 [ 40.870000][ T4325] cleanup_mnt+0x390/0x418 [ 40.870730][ T4325] __cleanup_mnt+0x20/0x30 [ 40.871473][ T4325] task_work_run+0x1ec/0x278 [ 40.872233][ T4325] do_notify_resume+0x1fa0/0x2aa4 [ 40.873060][ T4325] el0_svc+0x98/0x128 [ 40.873696][ T4325] el0t_64_sync_handler+0x84/0xf0 [ 40.874535][ T4325] el0t_64_sync+0x18c/0x190 [ 41.148774][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.150220][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.229897][ T4322] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 41.303604][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.303720][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.613895][ T4676] loop0: detected capacity change from 0 to 32768 [ 41.628520][ T4676] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 41.689090][ T4312] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 41.910790][ T4680] loop3: detected capacity change from 0 to 40427 [ 41.917662][ T4680] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.917685][ T4680] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.937576][ T4680] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.961630][ T4680] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.961649][ T4680] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.051466][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.051573][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.156203][ T4504] kworker/u4:6: attempt to access beyond end of device [ 42.156203][ T4504] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 42.292248][ T4690] loop1: detected capacity change from 0 to 40427 [ 42.302237][ T4690] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x3ffff [ 42.339696][ T4703] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 42.779046][ T4722] syz.4.79 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.830318][ T4714] loop3: detected capacity change from 0 to 32768 [ 42.929922][ T4724] xt_hashlimit: size too large, truncated to 1048576 [ 43.149752][ T4714] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.77 (4714) [ 43.205109][ T4714] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 43.206939][ T4714] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 43.208407][ T4714] BTRFS info (device loop3): setting nodatacow, compression disabled [ 43.210080][ T4714] BTRFS info (device loop3): force clearing of disk cache [ 43.211333][ T4714] BTRFS info (device loop3): enabling ssd optimizations [ 43.213554][ T4714] BTRFS info (device loop3): using spread ssd allocation scheme [ 43.228327][ T4714] BTRFS info (device loop3): turning off barriers [ 43.229605][ T4714] BTRFS info (device loop3): use no compression [ 43.235392][ T4714] BTRFS info (device loop3): disabling free space tree [ 43.241024][ T4714] BTRFS info (device loop3): not using ssd optimizations [ 43.244844][ T4714] BTRFS info (device loop3): not using spread ssd allocation scheme [ 43.406748][ T4369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.571180][ T4714] BTRFS info (device loop3): rebuilding free space tree [ 43.576576][ T4714] BTRFS info (device loop3): disabling free space tree [ 43.577801][ T4714] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 43.579909][ T4714] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 43.588404][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 43.592812][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.594668][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.596490][ T4369] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 43.598454][ T4369] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 43.599810][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.616475][ T4369] usb 1-1: config 0 descriptor?? [ 43.722012][ T4321] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 44.353878][ T4322] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 44.461151][ T4754] loop4: detected capacity change from 0 to 32768 [ 44.748859][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 44.751969][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 44.756352][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 44.759437][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 44.761644][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 44.763798][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 44.766577][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 44.984777][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b36c5a6c: rx timeout, send abort [ 45.056304][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b36c5a6c: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.389366][ T4369] hid-generic 0003:0955:7214.0001: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 45.479188][ T4312] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (4312) [ 46.228315][ T4438] usb 1-1: USB disconnect, device number 2 [ 46.270949][ T4778] fido_id[4778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 46.347092][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.348559][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.555084][ T4796] loop3: detected capacity change from 0 to 8 [ 46.575649][ T4796] SQUASHFS error: Failed to read block 0x6de: -5 [ 46.580457][ T4796] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 46.581638][ T4796] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 46.691367][ T4800] loop4: detected capacity change from 0 to 2048 [ 46.709893][ T4798] loop3: detected capacity change from 0 to 40427 [ 46.712086][ T4798] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.713291][ T4798] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.721048][ T4798] F2FS-fs (loop3): invalid crc value [ 46.725980][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.744074][ T4798] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.756676][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 46.772995][ T4798] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.774292][ T4798] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.853769][ T4812] loop4: detected capacity change from 0 to 512 [ 46.855204][ T4812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.875960][ T4812] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.893965][ T4812] EXT4-fs (loop4): 1 truncate cleaned up [ 46.894969][ T4812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.638825][ T4810] loop0: detected capacity change from 0 to 32768 [ 47.639829][ T4380] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 47.641876][ T4380] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 47.653357][ T4810] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 47.703515][ T4789] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 47.757357][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 47.842444][ T4815] loop2: detected capacity change from 0 to 40427 [ 47.850641][ T4815] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 47.865551][ T4815] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.892904][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.894366][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.920469][ T4810] loop0: detected capacity change from 0 to 32768 [ 47.922010][ T4810] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 47.988179][ T4825] loop1: detected capacity change from 0 to 32768 [ 47.990108][ T4815] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.005836][ T4789] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.016571][ T4815] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.017698][ T4815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.531930][ T4810] loop0: detected capacity change from 0 to 32768 [ 48.554117][ T4810] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 48.562603][ T4765] kworker/u4:10: attempt to access beyond end of device [ 48.562603][ T4765] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 48.928255][ T4849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.939564][ T4849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.021626][ T4322] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 49.164939][ T4854] loop1: detected capacity change from 0 to 40427 [ 49.169224][ T4854] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 49.170420][ T4854] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.174855][ T4854] F2FS-fs (loop1): invalid crc value [ 49.197140][ T4854] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.214220][ T4854] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.215423][ T4854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.701975][ T4789] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 49.862758][ T4846] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 49.928525][ T4552] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 49.930669][ T4552] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 50.471717][ T27] audit: type=1326 audit(50.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5771a8 code=0x7ffc0000 [ 50.477194][ T27] audit: type=1326 audit(50.470:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=65 compat=0 ip=0xffffaf5771a8 code=0x7ffc0000 [ 50.487779][ T27] audit: type=1326 audit(50.470:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5771a8 code=0x7ffc0000 [ 50.515481][ T27] audit: type=1326 audit(50.470:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5771a8 code=0x7ffc0000 [ 50.780031][ T4873] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.782059][ T4873] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 50.783640][ T4873] BTRFS info (device loop4): setting nodatasum [ 50.785020][ T4873] BTRFS info (device loop4): force zlib compression, level 3 [ 50.786634][ T4873] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 50.788194][ T4873] BTRFS info (device loop4): use lzo compression, level 0 [ 50.789461][ T4873] BTRFS info (device loop4): turning on flush-on-commit [ 50.790713][ T4873] BTRFS info (device loop4): enabling auto defrag [ 50.791873][ T4873] BTRFS info (device loop4): max_inline at 4096 [ 50.793092][ T4873] BTRFS info (device loop4): using free space tree [ 50.814231][ T4873] BTRFS info (device loop4): enabling ssd optimizations [ 50.944625][ T4900] SQUASHFS error: Failed to read block 0x6de: -5 [ 50.945646][ T4900] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 50.947979][ T4900] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 51.344896][ T4325] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.299464][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.300993][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.446814][ T4334] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 52.721165][ T4929] sched: RT throttling activated [ 52.747145][ T4935] set_capacity_and_notify: 3 callbacks suppressed [ 52.747154][ T4935] loop0: detected capacity change from 0 to 512 [ 52.856636][ T4935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.864275][ T4935] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 52.870137][ T4935] EXT4-fs (loop0): 1 truncate cleaned up [ 52.871082][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.451413][ T4943] loop2: detected capacity change from 0 to 32768 [ 53.463721][ T4943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.130 (4943) [ 53.475223][ T4943] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.480850][ T4943] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 53.484362][ T4943] BTRFS info (device loop2): setting nodatasum [ 53.495349][ T4943] BTRFS info (device loop2): force zlib compression, level 3 [ 53.499424][ T4943] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 53.505222][ T4943] BTRFS info (device loop2): use lzo compression, level 0 [ 53.507575][ T4943] BTRFS info (device loop2): turning on flush-on-commit [ 53.509872][ T4943] BTRFS info (device loop2): enabling auto defrag [ 53.512266][ T4943] BTRFS info (device loop2): max_inline at 4096 [ 53.514367][ T4943] BTRFS info (device loop2): using free space tree [ 53.539542][ T4954] binder: 4948:4954 ioctl c0306201 0 returned -14 [ 53.541960][ T4954] binder: 4948:4954 ioctl 4018620d 0 returned -22 [ 53.621627][ T4956] binder: 4948:4956 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.625649][ T4956] binder: 4956 RLIMIT_NICE not set [ 53.629071][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 53.642288][ T4956] netlink: 96 bytes leftover after parsing attributes in process `syz.4.134'. [ 54.144953][ T4943] BTRFS info (device loop2): enabling ssd optimizations [ 54.327776][ T4331] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.004430][ T4998] befs: (nullb0): invalid magic header [ 55.394948][ T4994] loop3: detected capacity change from 0 to 32768 [ 55.398277][ T4994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.145 (4994) [ 55.404911][ T4994] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.406909][ T4994] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 55.408489][ T4994] BTRFS info (device loop3): setting nodatasum [ 55.409457][ T4994] BTRFS info (device loop3): force zlib compression, level 3 [ 55.410635][ T4994] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 55.417946][ T4994] BTRFS info (device loop3): use lzo compression, level 0 [ 55.419144][ T4994] BTRFS info (device loop3): turning on flush-on-commit [ 55.420280][ T4994] BTRFS info (device loop3): enabling auto defrag [ 55.421350][ T4994] BTRFS info (device loop3): max_inline at 4096 [ 55.422354][ T4994] BTRFS info (device loop3): using free space tree [ 55.427554][ T4997] loop4: detected capacity change from 0 to 40427 [ 55.432916][ T4997] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 55.568850][ T4994] BTRFS info (device loop3): enabling ssd optimizations [ 55.686509][ T4321] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.757232][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.761630][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.363774][ T5054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.365302][ T5054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.046417][ T5069] loop2: detected capacity change from 0 to 8 [ 58.358004][ T5080] loop1: detected capacity change from 0 to 32768 [ 58.364124][ T5080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.171 (5080) [ 58.511029][ T5096] loop0: detected capacity change from 0 to 40427 [ 58.515757][ T5080] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.517067][ T5096] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 58.517363][ T5080] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 58.524042][ T5080] BTRFS info (device loop1): setting nodatasum [ 58.527416][ T5080] BTRFS info (device loop1): force zlib compression, level 3 [ 58.529779][ T5080] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 58.533496][ T5080] BTRFS info (device loop1): use lzo compression, level 0 [ 58.536092][ T5080] BTRFS info (device loop1): turning on flush-on-commit [ 58.537182][ T5080] BTRFS info (device loop1): enabling auto defrag [ 58.538268][ T5080] BTRFS info (device loop1): max_inline at 4096 [ 58.539304][ T5080] BTRFS info (device loop1): using free space tree [ 58.580902][ T5104] loop3: detected capacity change from 0 to 8 [ 58.587807][ T4314] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.676317][ T5112] loop3: detected capacity change from 0 to 512 [ 58.761394][ T5118] loop0: detected capacity change from 0 to 1024 [ 58.767235][ T5118] hfsplus: unable to parse mount options [ 58.985387][ T5112] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.987503][ T5112] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.004264][ T5112] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 59.007990][ T5112] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 59.009835][ T5112] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.179: Failed to acquire dquot type 1 [ 59.012817][ T5112] EXT4-fs (loop3): Remounting filesystem read-only [ 59.016627][ T5112] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.179: bg 0: block 40: padding at end of block bitmap is not set [ 59.021321][ T5112] EXT4-fs (loop3): Remounting filesystem read-only [ 59.022660][ T5112] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 59.024998][ T5112] EXT4-fs (loop3): Remounting filesystem read-only [ 59.038160][ T5112] EXT4-fs (loop3): 1 truncate cleaned up [ 59.050057][ T5080] BTRFS info (device loop1): enabling ssd optimizations [ 59.067517][ T5112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.092722][ T4320] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 59.103942][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 59.755164][ T5160] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.759311][ T5160] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 59.785869][ T4369] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.015787][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 60.553681][ T4369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.555268][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.557289][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.558901][ T4369] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 60.566259][ T4369] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.573924][ T4369] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 60.575368][ T4369] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 60.579319][ T4369] usb 1-1: Manufacturer: syz [ 60.583092][ T4369] usb 1-1: config 0 descriptor?? [ 60.629808][ T5169] loop3: detected capacity change from 0 to 8 [ 60.789765][ T5146] loop0: detected capacity change from 0 to 128 [ 60.825617][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.829615][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.841338][ T4369] Registered IR keymap rc-hauppauge [ 60.926247][ T4369] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 60.928084][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 60.955153][ T5182] capability: warning: `syz.3.196' uses 32-bit capabilities (legacy support in use) [ 61.018642][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.054270][ T4369] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 61.067530][ T4369] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input2 [ 61.371605][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.395933][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.415450][ T5190] loop2: detected capacity change from 0 to 8 [ 61.435882][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.465878][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.469470][ T5185] loop1: detected capacity change from 0 to 32768 [ 61.490218][ T5185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.197 (5185) [ 61.496688][ T5185] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.498468][ T5185] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 61.500409][ T5185] BTRFS info (device loop1): enabling auto defrag [ 61.501765][ T5185] BTRFS info (device loop1): use no compression [ 61.502842][ T5185] BTRFS info (device loop1): max_inline at 4096 [ 61.503963][ T5185] BTRFS info (device loop1): using free space tree [ 61.506571][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.825882][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.856608][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.875406][ T5185] BTRFS info (device loop1): enabling ssd optimizations [ 61.896064][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.923655][ T4320] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.928403][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.957892][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 61.986691][ T4369] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 61.991399][ T4369] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 61.998651][ T4369] usb 1-1: USB disconnect, device number 3 [ 62.063969][ T5218] loop1: detected capacity change from 0 to 512 [ 62.081912][ T5218] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.083440][ T5218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.084957][ T5218] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 62.086616][ T5218] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 62.088538][ T5218] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.201: Failed to acquire dquot type 1 [ 62.090701][ T5218] EXT4-fs (loop1): Remounting filesystem read-only [ 62.092029][ T5218] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.201: bg 0: block 40: padding at end of block bitmap is not set [ 62.094360][ T5218] EXT4-fs (loop1): Remounting filesystem read-only [ 62.095418][ T5218] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 62.098271][ T5218] EXT4-fs (loop1): Remounting filesystem read-only [ 62.099644][ T5218] EXT4-fs (loop1): 1 truncate cleaned up [ 62.103013][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.121551][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 62.157443][ T5224] siw: device registration error -23 [ 62.341159][ T5226] XFS (loop1): Mounting V5 Filesystem [ 62.381989][ T5226] XFS (loop1): Ending clean mount [ 63.492290][ T4320] XFS (loop1): Unmounting Filesystem [ 64.446853][ T5274] tc_dump_action: action bad kind [ 64.487220][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.552322][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.599599][ T5278] netlink: 104 bytes leftover after parsing attributes in process `syz.0.221'. [ 64.788112][ T5286] set_capacity_and_notify: 1 callbacks suppressed [ 64.788122][ T5286] loop0: detected capacity change from 0 to 32768 [ 64.793390][ T5286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.225 (5286) [ 64.802427][ T5286] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.804247][ T5286] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 64.806179][ T5286] BTRFS info (device loop0): setting nodatasum [ 64.807125][ T5286] BTRFS info (device loop0): force zlib compression, level 3 [ 64.808564][ T5286] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 64.809995][ T5286] BTRFS info (device loop0): use lzo compression, level 0 [ 64.811404][ T5286] BTRFS info (device loop0): turning on flush-on-commit [ 64.812628][ T5286] BTRFS info (device loop0): enabling auto defrag [ 64.814476][ T5286] BTRFS info (device loop0): max_inline at 4096 [ 64.815457][ T5286] BTRFS info (device loop0): using free space tree [ 64.842781][ T5286] BTRFS info (device loop0): enabling ssd optimizations [ 64.872928][ T4330] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.025554][ T5323] device syzkaller0 entered promiscuous mode [ 65.154643][ T5328] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 65.157163][ T5328] netlink: 224 bytes leftover after parsing attributes in process `syz.0.234'. [ 65.168899][ T5325] device syzkaller0 entered promiscuous mode [ 65.449966][ T5334] device syzkaller0 entered promiscuous mode [ 65.465214][ T5341] device syzkaller0 entered promiscuous mode [ 65.652845][ T5343] device syzkaller0 entered promiscuous mode [ 66.031806][ T5362] loop2: detected capacity change from 0 to 32768 [ 66.040876][ T5362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.242 (5362) [ 66.046005][ T5362] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.047655][ T5362] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 66.049030][ T5362] BTRFS info (device loop2): setting nodatasum [ 66.050494][ T5362] BTRFS info (device loop2): force zlib compression, level 3 [ 66.051640][ T5362] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 66.053140][ T5362] BTRFS info (device loop2): use lzo compression, level 0 [ 66.054442][ T5362] BTRFS info (device loop2): turning on flush-on-commit [ 66.055583][ T5362] BTRFS info (device loop2): enabling auto defrag [ 66.057161][ T5362] BTRFS info (device loop2): max_inline at 4096 [ 66.058183][ T5362] BTRFS info (device loop2): using free space tree [ 66.095002][ T5362] BTRFS info (device loop2): enabling ssd optimizations [ 66.128889][ T4331] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.607020][ T1514] cfg80211: failed to load regulatory.db [ 76.852092][ T5430] device syzkaller0 entered promiscuous mode [ 77.995220][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 78.112153][ T5460] device syzkaller0 entered promiscuous mode [ 78.131335][ T5457] device syzkaller0 entered promiscuous mode [ 78.182887][ T5457] 0: reclassify loop, rule prio 0, protocol 800 [ 78.364535][ T5466] device syzkaller0 entered promiscuous mode [ 78.478929][ T5454] syz.3.260 (5454): drop_caches: 2 [ 78.561455][ T5473] device syzkaller0 entered promiscuous mode [ 78.594840][ T5477] device syzkaller0 entered promiscuous mode [ 78.945017][ T5500] netlink: 76 bytes leftover after parsing attributes in process `syz.4.276'. [ 78.950079][ T5500] device syzkaller0 entered promiscuous mode [ 78.962241][ T5498] device syzkaller0 entered promiscuous mode [ 79.009306][ T5505] IPVS: dh: FWM 3 0x00000003 - no destination available [ 79.128716][ T5511] device syzkaller0 entered promiscuous mode [ 79.254527][ T5525] device syzkaller0 entered promiscuous mode [ 79.525804][ T5550] device syzkaller0 entered promiscuous mode [ 79.601821][ T5552] device syzkaller0 entered promiscuous mode [ 79.920285][ T5578] device syzkaller0 entered promiscuous mode [ 80.085096][ T5595] device syzkaller0 entered promiscuous mode [ 80.231054][ T5598] device syzkaller0 entered promiscuous mode [ 80.592833][ T5650] device syzkaller0 entered promiscuous mode [ 80.734661][ T5654] device syzkaller0 entered promiscuous mode [ 80.752087][ T5656] device syzkaller0 entered promiscuous mode [ 81.835769][ T4334] Bluetooth: hci4: command 0x0411 tx timeout [ 95.705012][ T4334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.711241][ T4334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.713310][ T4334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.715610][ T4334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.718477][ T4334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.719670][ T4334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.389843][ T4334] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.392365][ T4334] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.393960][ T4334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.397282][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.400301][ T47] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 96.402224][ T47] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 96.403699][ T4324] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 96.405375][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.407242][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.409219][ T47] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.412470][ T4332] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 96.414412][ T4332] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 96.415855][ T4332] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 96.423485][ T47] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.425364][ T47] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.431612][ T47] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.433173][ T47] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.434466][ T47] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.758068][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 98.475757][ T47] Bluetooth: hci7: command 0x0409 tx timeout [ 98.475783][ T4328] Bluetooth: hci8: command 0x0409 tx timeout [ 98.476183][ T4328] Bluetooth: hci6: command 0x0409 tx timeout [ 99.835779][ T4334] Bluetooth: hci5: command 0x041b tx timeout [ 100.556291][ T4334] Bluetooth: hci6: command 0x041b tx timeout [ 100.565769][ T4334] Bluetooth: hci7: command 0x041b tx timeout [ 100.566798][ T4334] Bluetooth: hci8: command 0x041b tx timeout [ 101.915779][ T4334] Bluetooth: hci5: command 0x040f tx timeout [ 102.635802][ T4334] Bluetooth: hci7: command 0x040f tx timeout [ 102.636788][ T4334] Bluetooth: hci8: command 0x040f tx timeout [ 102.637753][ T4334] Bluetooth: hci6: command 0x040f tx timeout [ 102.788455][ T5714] chnl_net:caif_netlink_parms(): no params data found [ 102.792433][ T5725] chnl_net:caif_netlink_parms(): no params data found [ 102.802845][ T5723] chnl_net:caif_netlink_parms(): no params data found [ 102.859680][ T5726] chnl_net:caif_netlink_parms(): no params data found [ 102.990794][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.991932][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.993445][ T5725] device bridge_slave_0 entered promiscuous mode [ 103.097848][ T5714] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.099108][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.100708][ T5714] device bridge_slave_0 entered promiscuous mode [ 103.105621][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.107028][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.108561][ T5725] device bridge_slave_1 entered promiscuous mode [ 103.347144][ T5714] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.348344][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.349915][ T5714] device bridge_slave_1 entered promiscuous mode [ 103.355839][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.356965][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.358362][ T5723] device bridge_slave_0 entered promiscuous mode [ 103.408163][ T1598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.425990][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.435975][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.437157][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.438768][ T5726] device bridge_slave_0 entered promiscuous mode [ 103.440897][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.442091][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.443653][ T5723] device bridge_slave_1 entered promiscuous mode [ 103.451651][ T5714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.454427][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.472107][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.473258][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.474816][ T5726] device bridge_slave_1 entered promiscuous mode [ 103.482094][ T5714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.490447][ T5725] team0: Port device team_slave_0 added [ 103.493722][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.496866][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.546901][ T1598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.553427][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.561591][ T5725] team0: Port device team_slave_1 added [ 103.563858][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.565519][ T5789] device syzkaller0 entered promiscuous mode [ 103.572507][ T5714] team0: Port device team_slave_0 added [ 103.672196][ T5723] team0: Port device team_slave_0 added [ 103.673970][ T5714] team0: Port device team_slave_1 added [ 103.677012][ T5723] team0: Port device team_slave_1 added [ 103.722377][ T1598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.735409][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.736613][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.741074][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.745218][ T5726] team0: Port device team_slave_0 added [ 103.755625][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.757696][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.761814][ T5714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.766475][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.767646][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.771960][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.774476][ T5726] team0: Port device team_slave_1 added [ 103.816669][ T1598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.819493][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.820574][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.824746][ T5714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.828874][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.829959][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.833596][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.980095][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.981404][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.985475][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.992676][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.993952][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.995863][ T4334] Bluetooth: hci5: command 0x0419 tx timeout [ 103.998427][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.046995][ T5725] device hsr_slave_0 entered promiscuous mode [ 104.086148][ T5725] device hsr_slave_1 entered promiscuous mode [ 104.125842][ T5725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.127139][ T5725] Cannot create hsr debugfs directory [ 104.128615][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.129655][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.133370][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.177562][ T5723] device hsr_slave_0 entered promiscuous mode [ 104.215949][ T5723] device hsr_slave_1 entered promiscuous mode [ 104.255755][ T5723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.256964][ T5723] Cannot create hsr debugfs directory [ 104.309322][ T5714] device hsr_slave_0 entered promiscuous mode [ 104.336617][ T5714] device hsr_slave_1 entered promiscuous mode [ 104.385785][ T5714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.387102][ T5714] Cannot create hsr debugfs directory [ 104.467065][ T5726] device hsr_slave_0 entered promiscuous mode [ 104.506421][ T5726] device hsr_slave_1 entered promiscuous mode [ 104.565851][ T5726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.567093][ T5726] Cannot create hsr debugfs directory [ 104.591985][ T5803] device syzkaller0 entered promiscuous mode [ 104.715738][ T47] Bluetooth: hci6: command 0x0419 tx timeout [ 104.727219][ T47] Bluetooth: hci8: command 0x0419 tx timeout [ 104.727226][ T4334] Bluetooth: hci7: command 0x0419 tx timeout [ 105.028002][ T5714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.032954][ T5822] loop0: detected capacity change from 0 to 32768 [ 105.043374][ T5822] (syz.0.354,5822,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.048237][ T5822] (syz.0.354,5822,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 105.062094][ T5822] JBD2: Ignoring recovery information on journal [ 105.067290][ T5714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.083015][ T5822] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.148917][ T5714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.168945][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 105.188497][ T5714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.350213][ T5726] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.484195][ T5726] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.506970][ T5726] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.536902][ T5726] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.650712][ T5725] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 105.749894][ T5725] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 105.787205][ T5725] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 105.827104][ T5725] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.023260][ T5714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.051657][ T5723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.113252][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.119297][ T5723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.158083][ T5723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.197171][ T5723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.240324][ T5714] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.244446][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.246047][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.554312][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.556185][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.613116][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.647721][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.649462][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.650925][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.652032][ T4862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.661386][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.665551][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.669018][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.670184][ T4862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.671607][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.673394][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.686745][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.690202][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.691781][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.693187][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.694305][ T4862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.695685][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.703504][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.705121][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.709211][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.710581][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.711646][ T4862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.713093][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.717763][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.719789][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.721622][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.724408][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.729848][ T5888] device syzkaller0 entered promiscuous mode [ 107.040263][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.042096][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.121302][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.262259][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.263988][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.265434][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.266937][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.268270][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.271288][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.273010][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.274489][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.280452][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.281901][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.283343][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.304699][ T1598] device hsr_slave_0 left promiscuous mode [ 107.336599][ T1598] device hsr_slave_1 left promiscuous mode [ 107.416213][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.417540][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.419366][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.420511][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.421901][ T1598] device bridge_slave_1 left promiscuous mode [ 107.423930][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.460946][ T1598] device bridge_slave_0 left promiscuous mode [ 107.462008][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.576163][ T1598] device veth1_macvtap left promiscuous mode [ 107.577509][ T1598] device veth0_macvtap left promiscuous mode [ 107.578488][ T1598] device veth1_vlan left promiscuous mode [ 107.579441][ T1598] device veth0_vlan left promiscuous mode [ 109.658135][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 109.826594][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 109.997680][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.216319][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.747379][ T1598] bond0 (unregistering): Released all slaves [ 112.052642][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.054852][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.058659][ T5714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.060827][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.068654][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.070217][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.071619][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.073117][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.074531][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.075661][ T4552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.080874][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.082562][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.106647][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.108328][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.112198][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.114205][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.115295][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.118364][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.120141][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.140509][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.160619][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.162748][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.164588][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.173191][ T5911] device syzkaller0 entered promiscuous mode [ 112.178673][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.182169][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.194959][ T5725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.197790][ T5725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.200933][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.202445][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.203801][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.205270][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.219695][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.232128][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.233725][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.238871][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.289261][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.290997][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.292759][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.293906][ T4552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.295296][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.302001][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.303604][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.304781][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.313925][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.317058][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.318798][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.320363][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.322976][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.324724][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.328048][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.329659][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.331153][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.347223][ T5723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.349413][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.350859][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.352329][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.354000][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.373458][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.376093][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.377426][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.490215][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.491559][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.499940][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.501243][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.519059][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.521083][ T5714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.616399][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.617736][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.625805][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.678167][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.679874][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.704678][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.706696][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.708657][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.710410][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.718918][ T5726] device veth0_vlan entered promiscuous mode [ 112.722561][ T5726] device veth1_vlan entered promiscuous mode [ 112.798844][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.800475][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.801855][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.803296][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.819684][ T5726] device veth0_macvtap entered promiscuous mode [ 112.821327][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.822833][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.824689][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.842373][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.846319][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.864880][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.874181][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.881602][ T5725] device veth0_vlan entered promiscuous mode [ 112.885547][ T5725] device veth1_vlan entered promiscuous mode [ 112.901492][ T5714] device veth0_vlan entered promiscuous mode [ 112.903062][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.904479][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.906526][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.908099][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.910456][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.912515][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.914082][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.956558][ T5726] device veth1_macvtap entered promiscuous mode [ 112.961562][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.963147][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.969089][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.970775][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.972227][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.973828][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.975403][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.977849][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.980277][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.984763][ T5714] device veth1_vlan entered promiscuous mode [ 112.998114][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.999697][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.001175][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.002531][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.004017][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.017824][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.019475][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.021230][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.022791][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.024244][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.030149][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.031762][ T5726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.033351][ T5726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.037761][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.039011][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.040518][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.042193][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.043658][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.045174][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.055042][ T5725] device veth0_macvtap entered promiscuous mode [ 113.061819][ T5725] device veth1_macvtap entered promiscuous mode [ 113.100786][ T5726] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.102141][ T5726] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.103466][ T5726] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.104804][ T5726] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.109971][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.111713][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.113155][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.114569][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.167763][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.169320][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.171006][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.172622][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.174132][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.175679][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.180511][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.182109][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.183714][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.185227][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.189098][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.190667][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.193052][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.195178][ T5723] device veth0_vlan entered promiscuous mode [ 113.210243][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.211784][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.213090][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.214630][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.218038][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.219734][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.221323][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.222922][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.224496][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.226882][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.228394][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.229934][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.231493][ T5725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.233046][ T5725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.235267][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.237179][ T5996] device syzkaller0 entered promiscuous mode [ 113.278323][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.280089][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.282296][ T5725] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.283781][ T5725] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.285148][ T5725] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.286788][ T5725] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.799062][ T5723] device veth1_vlan entered promiscuous mode [ 113.998708][ T5714] device veth0_macvtap entered promiscuous mode [ 114.048685][ T1598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.076180][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.077417][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.188324][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.189917][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.200761][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.202429][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.204442][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.206286][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.218099][ T4765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.219373][ T4765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.258739][ T1598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.270913][ T5714] device veth1_macvtap entered promiscuous mode [ 114.277572][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.279223][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.280753][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.308041][ T5723] device veth0_macvtap entered promiscuous mode [ 114.314097][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.319196][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.320951][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.331412][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.333083][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.334786][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.337518][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.339230][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.340761][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.342291][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.343736][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.345255][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.351518][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.389361][ T1598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.394486][ T5723] device veth1_macvtap entered promiscuous mode [ 114.406290][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.407922][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.409429][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.410995][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.477376][ T1598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.481344][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.483037][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.484518][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.486602][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.488038][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.489972][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.491457][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.492976][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.494650][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.497246][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.498851][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.500450][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.502014][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.503654][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.506587][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.511763][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.513464][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.521291][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.522995][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.524530][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.534700][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.539988][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.541582][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.543022][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.544559][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.546177][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.547867][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.549352][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.551298][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.554401][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.559410][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.561016][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.562930][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.564499][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.566749][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.568460][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.569999][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.571662][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.573380][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.575012][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.577736][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.579263][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.580743][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.582341][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.584902][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.588597][ T5714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.590110][ T5714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.591622][ T5714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.592982][ T5714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.603096][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.604735][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.607096][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.610381][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.628834][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.630125][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.631431][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.648163][ T5723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.651391][ T5723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.652650][ T5723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.653988][ T5723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.704618][ T6033] device syzkaller0 entered promiscuous mode [ 114.712044][ T6031] device syzkaller0 entered promiscuous mode [ 114.863161][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.864473][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.874468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.882117][ T5187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.883361][ T5187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.892114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.971415][ T1598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.147298][ T1598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.227466][ T1598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.362752][ T1598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.539801][ T6059] device syzkaller0 entered promiscuous mode [ 116.422549][ T1598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.469522][ T6075] loop7: detected capacity change from 0 to 2048 [ 116.501163][ T6075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.506638][ T1598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.512749][ T6077] device syzkaller0 entered promiscuous mode [ 116.687319][ T1598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.844812][ T1598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.328300][ T6086] device syzkaller0 entered promiscuous mode [ 117.373009][ T6092] device syzkaller0 entered promiscuous mode [ 125.931278][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932391][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.465065][ T6120] device syzkaller0 entered promiscuous mode [ 128.596456][ T6147] device syzkaller0 entered promiscuous mode [ 128.716866][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.720845][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.722536][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.724450][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.732641][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 128.735556][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.750713][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.753327][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.761637][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.764882][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.770747][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 128.783873][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.960057][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.962206][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.963746][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.973650][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.975196][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.977015][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.352955][ T6197] device syzkaller0 entered promiscuous mode [ 130.795778][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 131.045977][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 132.875805][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 133.115924][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 134.965820][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 135.196018][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 137.035765][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 137.276626][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 140.593363][ T6263] loop7: detected capacity change from 0 to 512 [ 140.610644][ T6263] EXT2-fs (loop7): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 140.614259][ T6263] EXT2-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 140.631675][ T6263] syz.7.401: attempt to access beyond end of device [ 140.631675][ T6263] loop7: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 140.931896][ T6273] ubi31: attaching mtd0 [ 140.937010][ T6273] ubi31: scanning is finished [ 140.937842][ T6273] ubi31: empty MTD device detected [ 141.135821][ T6273] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 141.137114][ T6273] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 141.138278][ T6273] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 141.139435][ T6273] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 141.140623][ T6273] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 141.141643][ T6273] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 141.142826][ T6273] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2199483376 [ 141.144345][ T6273] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 141.147377][ T6274] ubi31: background thread "ubi_bgt31d" started, PID 6274 [ 141.844413][ T6314] device syzkaller0 entered promiscuous mode [ 142.009440][ T6154] chnl_net:caif_netlink_parms(): no params data found [ 152.879125][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 152.881266][ T6325] device syzkaller0 entered promiscuous mode [ 153.381269][ T6367] xt_hashlimit: size too large, truncated to 1048576 [ 153.639698][ T6346] device syzkaller0 entered promiscuous mode [ 155.018799][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.019991][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.021721][ T6154] device bridge_slave_0 entered promiscuous mode [ 155.025217][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.031035][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.032659][ T6154] device bridge_slave_1 entered promiscuous mode [ 155.060745][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.062004][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.071531][ T6182] device bridge_slave_0 entered promiscuous mode [ 155.079863][ T6399] device syzkaller0 entered promiscuous mode [ 155.137311][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.138570][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.140247][ T6182] device bridge_slave_1 entered promiscuous mode [ 155.150440][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.153442][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.304678][ T6154] team0: Port device team_slave_0 added [ 166.320628][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.326079][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.328018][ T6435] device syzkaller0 entered promiscuous mode [ 166.389702][ T6154] team0: Port device team_slave_1 added [ 166.498040][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.499297][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.505155][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.520025][ T6182] team0: Port device team_slave_0 added [ 166.684730][ T6475] loop0: detected capacity change from 0 to 32768 [ 166.697904][ T6475] (syz.0.428,6475,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.702034][ T6475] (syz.0.428,6475,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.723706][ T6475] JBD2: Ignoring recovery information on journal [ 166.739232][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.740361][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.744370][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.751946][ T6182] team0: Port device team_slave_1 added [ 166.779036][ T6475] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 166.819066][ T6478] device syzkaller0 entered promiscuous mode [ 166.863274][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 166.917842][ T6154] device hsr_slave_0 entered promiscuous mode [ 166.956185][ T6154] device hsr_slave_1 entered promiscuous mode [ 166.975830][ T6154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.977062][ T6154] Cannot create hsr debugfs directory [ 178.000884][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.002030][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.005997][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.228679][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.229869][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.233940][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.417597][ T6182] device hsr_slave_0 entered promiscuous mode [ 178.446241][ T6182] device hsr_slave_1 entered promiscuous mode [ 178.786084][ T6182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.788324][ T6182] Cannot create hsr debugfs directory [ 178.828183][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 179.609449][ T6154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.827802][ T6154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.835365][ T6597] device syzkaller0 entered promiscuous mode [ 179.896566][ T1598] device hsr_slave_0 left promiscuous mode [ 179.925953][ T1598] device hsr_slave_1 left promiscuous mode [ 180.005852][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.007150][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.008788][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.009985][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.011599][ T1598] device bridge_slave_1 left promiscuous mode [ 180.012603][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.027059][ T1598] device bridge_slave_0 left promiscuous mode [ 180.028109][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.067962][ T1598] device hsr_slave_0 left promiscuous mode [ 180.105881][ T1598] device hsr_slave_1 left promiscuous mode [ 180.175859][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.177183][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.178754][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.180058][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.181629][ T1598] device bridge_slave_1 left promiscuous mode [ 180.182744][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.226890][ T1598] device bridge_slave_0 left promiscuous mode [ 180.227869][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.268885][ T1598] device hsr_slave_0 left promiscuous mode [ 180.314481][ T1598] device hsr_slave_1 left promiscuous mode [ 180.385798][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.387126][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.389114][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.390399][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.391908][ T1598] device bridge_slave_1 left promiscuous mode [ 180.392970][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.427191][ T1598] device bridge_slave_0 left promiscuous mode [ 180.428345][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.565966][ T1598] device veth1_macvtap left promiscuous mode [ 180.567013][ T1598] device veth0_macvtap left promiscuous mode [ 180.567972][ T1598] device veth1_vlan left promiscuous mode [ 180.568908][ T1598] device veth0_vlan left promiscuous mode [ 180.655821][ T1598] device veth1_macvtap left promiscuous mode [ 180.656849][ T1598] device veth0_macvtap left promiscuous mode [ 180.657875][ T1598] device veth1_vlan left promiscuous mode [ 180.658791][ T1598] device veth0_vlan left promiscuous mode [ 180.735926][ T1598] device veth1_macvtap left promiscuous mode [ 180.737029][ T1598] device veth0_macvtap left promiscuous mode [ 180.738159][ T1598] device veth1_vlan left promiscuous mode [ 180.739260][ T1598] device veth0_vlan left promiscuous mode [ 182.899120][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 183.097009][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 183.286677][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.476164][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.006726][ T1598] bond0 (unregistering): Released all slaves [ 187.356207][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.357347][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.368887][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 187.526403][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 187.690802][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.886801][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.191461][ T1598] bond0 (unregistering): Released all slaves [ 189.399041][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.401739][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.403817][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.405303][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.406908][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.408130][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.422803][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.424645][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.435892][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.438082][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.439443][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 189.440641][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.435757][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 191.525880][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 191.578033][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 191.737495][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 191.906978][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.121050][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.155853][ T24] infiniband syz1: ib_query_port failed (-19) [ 193.515787][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 193.595765][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 193.626768][ T1598] bond0 (unregistering): Released all slaves [ 194.027144][ T6154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.078833][ T4446] bond0 speed is unknown, defaulting to 1000 [ 194.134106][ T6154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.238429][ T6642] loop8: detected capacity change from 0 to 40427 [ 194.251851][ T6642] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 194.253192][ T6642] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 194.258132][ T6642] F2FS-fs (loop8): invalid crc value [ 194.268835][ T6642] F2FS-fs (loop8): Found nat_bits in checkpoint [ 194.286430][ T6642] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 194.287624][ T6642] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 194.993428][ T4504] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 195.004728][ T4504] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 195.034497][ T6182] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.116930][ T6182] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.127239][ T6623] chnl_net:caif_netlink_parms(): no params data found [ 195.147590][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 195.237344][ T6182] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.299799][ T6698] loop0: detected capacity change from 0 to 32768 [ 195.303288][ T6698] (syz.0.450,6698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.307184][ T6698] (syz.0.450,6698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.324362][ T6704] IPVS: dh: FWM 3 0x00000003 - no destination available [ 195.340681][ T6698] JBD2: Ignoring recovery information on journal [ 195.357047][ T6182] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.374310][ T6698] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 195.400639][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.407073][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.413514][ T6626] device bridge_slave_0 entered promiscuous mode [ 195.440318][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.442645][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.452243][ T6623] device bridge_slave_0 entered promiscuous mode [ 195.455329][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.459159][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 195.475053][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.477552][ T6626] device bridge_slave_1 entered promiscuous mode [ 195.495572][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.503149][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.504989][ T6623] device bridge_slave_1 entered promiscuous mode [ 195.534661][ T6718] device syzkaller0 entered promiscuous mode [ 195.605797][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 195.675909][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 195.711282][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.817334][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.821925][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.835014][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.888382][ T6626] team0: Port device team_slave_0 added [ 195.938866][ T6623] team0: Port device team_slave_0 added [ 195.941640][ T6626] team0: Port device team_slave_1 added [ 196.114764][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.116188][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.120045][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.136544][ T6623] team0: Port device team_slave_1 added [ 196.174440][ T6743] device syzkaller0 entered promiscuous mode [ 196.186162][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.187233][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.200742][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.215621][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.217321][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.221245][ T6623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.625078][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.626758][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.832554][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.833919][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.675774][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 197.755910][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 206.956508][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.957608][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.961684][ T6623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.007192][ T6626] device hsr_slave_0 entered promiscuous mode [ 207.045986][ T6626] device hsr_slave_1 entered promiscuous mode [ 207.133479][ T6781] IPVS: dh: FWM 3 0x00000003 - no destination available [ 207.217697][ T6623] device hsr_slave_0 entered promiscuous mode [ 207.266580][ T6623] device hsr_slave_1 entered promiscuous mode [ 207.296673][ T6623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.297865][ T6623] Cannot create hsr debugfs directory [ 207.302940][ T6801] device syzkaller0 entered promiscuous mode [ 207.391910][ T6790] device syzkaller0 entered promiscuous mode [ 208.022629][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.8.470'. [ 218.619409][ T6853] syz.7.472 (6853): drop_caches: 2 [ 218.695611][ T6626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.740758][ T6626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.822046][ T6626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.838089][ T6626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.082665][ T6868] raw_sendmsg: syz.8.473 forgot to set AF_INET. Fix it! [ 219.189820][ T6870] device syzkaller0 entered promiscuous mode [ 219.300716][ T6623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.374038][ T6623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.407370][ T6623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.443786][ T6623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.113103][ T6903] device syzkaller0 entered promiscuous mode [ 220.328028][ T6916] netlink: 32 bytes leftover after parsing attributes in process `syz.8.481'. [ 220.431616][ T6921] IPVS: dh: FWM 3 0x00000003 - no destination available [ 231.518172][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.521934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.523551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.540570][ T6963] device syzkaller0 entered promiscuous mode [ 231.629051][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.963506][ T6982] ubi: mtd0 is already attached to ubi31 [ 233.707888][ T6992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.494'. [ 233.731911][ T6994] IPVS: dh: FWM 3 0x00000003 - no destination available [ 242.881374][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.883020][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.884467][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.885507][ T4765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.887396][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.889064][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.890559][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.891688][ T4765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.893077][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.894773][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.896516][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.899067][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.900579][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.901839][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.015830][ T6626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.017585][ T6626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.019852][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.021391][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.022931][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.024361][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.046622][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.051283][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.063508][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.158043][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.163633][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.172804][ T7014] device syzkaller0 entered promiscuous mode [ 243.322627][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.324161][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.326219][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.327905][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.330452][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.331613][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.335303][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.340607][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.344314][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.345471][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.349533][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.353679][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.357785][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.364247][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.471177][ T7041] loop0: detected capacity change from 0 to 32768 [ 248.796646][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.797757][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.038695][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.040671][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.042904][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.044838][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.051792][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.053080][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.065960][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.069266][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.070951][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.072985][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.074379][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 250.081417][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.075892][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 252.155784][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 254.155847][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 254.245751][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 255.000018][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.002016][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.156127][ T7073] IPVS: dh: FWM 3 0x00000003 - no destination available [ 255.170144][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 255.223289][ T7080] ================================================================== [ 255.224699][ T7080] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x20c/0x210 [ 255.226214][ T7080] Read of size 2 at addr ffff0000f56f69fb by task syz.8.507/7080 [ 255.227505][ T7080] [ 255.227907][ T7080] CPU: 0 PID: 7080 Comm: syz.8.507 Not tainted syzkaller #0 [ 255.229190][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 255.230906][ T7080] Call trace: [ 255.231451][ T7080] dump_backtrace+0x1c0/0x1ec [ 255.232224][ T7080] show_stack+0x2c/0x3c [ 255.232895][ T7080] __dump_stack+0x30/0x40 [ 255.233617][ T7080] dump_stack_lvl+0xf4/0x15c [ 255.234375][ T7080] print_address_description+0x88/0x218 [ 255.235282][ T7080] print_report+0x50/0x68 [ 255.236018][ T7080] kasan_report+0xa8/0xfc [ 255.236743][ T7080] __asan_report_load2_noabort+0x2c/0x38 [ 255.237690][ T7080] ieee80211_monitor_select_queue+0x20c/0x210 [ 255.238694][ T7080] netdev_core_pick_tx+0x130/0x320 [ 255.239549][ T7080] __dev_queue_xmit+0x738/0x3118 [ 255.240369][ T7080] dev_queue_xmit+0x24/0x34 [ 255.241115][ T7080] packet_sendmsg+0x2f9c/0x3fd0 [ 255.241903][ T7080] ____sys_sendmsg+0x5c8/0x938 [ 255.242676][ T7080] __sys_sendmsg+0x288/0x374 [ 255.243380][ T7080] __arm64_sys_sendmsg+0x80/0x94 [ 255.244086][ T7080] invoke_syscall+0x98/0x2b4 [ 255.244800][ T7080] el0_svc_common+0x138/0x258 [ 255.245474][ T7080] do_el0_svc+0x58/0x130 [ 255.246092][ T7080] el0_svc+0x58/0x128 [ 255.246669][ T7080] el0t_64_sync_handler+0x84/0xf0 [ 255.247374][ T7080] el0t_64_sync+0x18c/0x190 [ 255.248021][ T7080] [ 255.248348][ T7080] Allocated by task 6963: [ 255.248971][ T7080] kasan_set_track+0x4c/0x80 [ 255.249617][ T7080] kasan_save_alloc_info+0x24/0x30 [ 255.250323][ T7080] __kasan_kmalloc+0xa0/0xb8 [ 255.251002][ T7080] __kmalloc_node+0xf0/0x17c [ 255.251652][ T7080] qdisc_alloc+0x8c/0x8b8 [ 255.252290][ T7080] qdisc_create_dflt+0x6c/0x560 [ 255.253041][ T7080] mq_init+0x264/0x5b4 [ 255.253730][ T7080] qdisc_create_dflt+0x114/0x560 [ 255.254563][ T7080] dev_activate+0x1b8/0xf60 [ 255.255300][ T7080] __dev_open+0x384/0x4d4 [ 255.256008][ T7080] __dev_change_flags+0x1ac/0x564 [ 255.256811][ T7080] dev_change_flags+0x80/0x154 [ 255.257569][ T7080] dev_ifsioc+0x138/0xc04 [ 255.258251][ T7080] dev_ioctl+0x4b0/0xc74 [ 255.258986][ T7080] sock_do_ioctl+0x198/0x258 [ 255.259815][ T7080] sock_ioctl+0x238/0x824 [ 255.260583][ T7080] __arm64_sys_ioctl+0x14c/0x1c8 [ 255.261430][ T7080] invoke_syscall+0x98/0x2b4 [ 255.262189][ T7080] el0_svc_common+0x138/0x258 [ 255.262891][ T7080] do_el0_svc+0x58/0x130 [ 255.263516][ T7080] el0_svc+0x58/0x128 [ 255.264132][ T7080] el0t_64_sync_handler+0x84/0xf0 [ 255.264978][ T7080] el0t_64_sync+0x18c/0x190 [ 255.265749][ T7080] [ 255.266124][ T7080] Last potentially related work creation: [ 255.266999][ T7080] kasan_save_stack+0x40/0x70 [ 255.267700][ T7080] __kasan_record_aux_stack+0xc0/0xdc [ 255.268569][ T7080] kasan_record_aux_stack_noalloc+0x14/0x20 [ 255.269527][ T7080] call_rcu+0x100/0x94c [ 255.270220][ T7080] __qdisc_destroy+0x2a8/0x4f8 [ 255.270989][ T7080] shutdown_scheduler_queue+0x168/0x1fc [ 255.271857][ T7080] dev_shutdown+0x9c/0x478 [ 255.272592][ T7080] unregister_netdevice_many+0x944/0x177c [ 255.273618][ T7080] unregister_netdevice_queue+0x2b0/0x304 [ 255.274614][ T7080] __tun_detach+0xb04/0x1224 [ 255.275406][ T7080] tun_chr_close+0x118/0x1f4 [ 255.276144][ T7080] __fput+0x1bc/0x7b8 [ 255.276797][ T7080] ____fput+0x20/0x30 [ 255.277471][ T7080] task_work_run+0x1ec/0x278 [ 255.278232][ T7080] do_notify_resume+0x1fa0/0x2aa4 [ 255.279104][ T7080] el0_svc+0x98/0x128 [ 255.279826][ T7080] el0t_64_sync_handler+0x84/0xf0 [ 255.280644][ T7080] el0t_64_sync+0x18c/0x190 [ 255.281402][ T7080] [ 255.281783][ T7080] Second to last potentially related work creation: [ 255.282796][ T7080] kasan_save_stack+0x40/0x70 [ 255.283533][ T7080] __kasan_record_aux_stack+0xc0/0xdc [ 255.284385][ T7080] kasan_record_aux_stack_noalloc+0x14/0x20 [ 255.285458][ T7080] call_rcu+0x100/0x94c [ 255.286192][ T7080] __qdisc_destroy+0x2a8/0x4f8 [ 255.287022][ T7080] shutdown_scheduler_queue+0x168/0x1fc [ 255.287996][ T7080] dev_shutdown+0x9c/0x478 [ 255.288790][ T7080] unregister_netdevice_many+0x944/0x177c [ 255.289780][ T7080] unregister_netdevice_queue+0x2b0/0x304 [ 255.290697][ T7080] __tun_detach+0xb04/0x1224 [ 255.291497][ T7080] tun_chr_close+0x118/0x1f4 [ 255.292322][ T7080] __fput+0x1bc/0x7b8 [ 255.293075][ T7080] ____fput+0x20/0x30 [ 255.293768][ T7080] task_work_run+0x1ec/0x278 [ 255.294546][ T7080] do_notify_resume+0x1fa0/0x2aa4 [ 255.295385][ T7080] el0_svc+0x98/0x128 [ 255.296016][ T7080] el0t_64_sync_handler+0x84/0xf0 [ 255.296848][ T7080] el0t_64_sync+0x18c/0x190 [ 255.297560][ T7080] [ 255.297953][ T7080] The buggy address belongs to the object at ffff0000f56f6000 [ 255.297953][ T7080] which belongs to the cache kmalloc-2k of size 2048 [ 255.300164][ T7080] The buggy address is located 507 bytes to the right of [ 255.300164][ T7080] 2048-byte region [ffff0000f56f6000, ffff0000f56f6800) [ 255.302337][ T7080] [ 255.302675][ T7080] The buggy address belongs to the physical page: [ 255.303775][ T7080] page:00000000ff0fd589 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f56f4000 pfn:0x1356f0 [ 255.305817][ T7080] head:00000000ff0fd589 order:3 compound_mapcount:0 compound_pincount:0 [ 255.307283][ T7080] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 255.308661][ T7080] raw: 05ffc00000010200 fffffc0003795008 fffffc00030f8808 ffff0000c0002900 [ 255.310098][ T7080] raw: ffff0000f56f4000 0000000000080002 00000001ffffffff 0000000000000000 [ 255.311511][ T7080] page dumped because: kasan: bad access detected [ 255.312567][ T7080] [ 255.312951][ T7080] Memory state around the buggy address: [ 255.313894][ T7080] ffff0000f56f6880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.315155][ T7080] ffff0000f56f6900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.316422][ T7080] >ffff0000f56f6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.317754][ T7080] ^ [ 255.319058][ T7080] ffff0000f56f6a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.320389][ T7080] ffff0000f56f6a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.321799][ T7080] ================================================================== [ 255.323230][ T7080] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.585590][ T1598] device hsr_slave_0 left promiscuous mode [ 256.615943][ T1598] device hsr_slave_1 left promiscuous mode [ 256.686136][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.687663][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.689079][ T1598] device bridge_slave_1 left promiscuous mode [ 256.690068][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.736184][ T1598] device bridge_slave_0 left promiscuous mode [ 256.737205][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.777452][ T1598] device hsr_slave_0 left promiscuous mode [ 256.816518][ T1598] device hsr_slave_1 left promiscuous mode [ 256.895767][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.897174][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.898447][ T1598] device bridge_slave_1 left promiscuous mode [ 256.899347][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.946637][ T1598] device bridge_slave_0 left promiscuous mode [ 256.947629][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.987779][ T1598] device hsr_slave_0 left promiscuous mode [ 257.045999][ T1598] device hsr_slave_1 left promiscuous mode [ 257.148352][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.149557][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.151705][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.152895][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.154326][ T1598] device bridge_slave_1 left promiscuous mode [ 257.155287][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.206154][ T1598] device bridge_slave_0 left promiscuous mode [ 257.207167][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.247538][ T1598] device hsr_slave_0 left promiscuous mode [ 257.285793][ T1598] device hsr_slave_1 left promiscuous mode [ 257.378136][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.379405][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.381152][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.382327][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.383777][ T1598] device bridge_slave_1 left promiscuous mode [ 257.384741][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.446152][ T1598] device bridge_slave_0 left promiscuous mode [ 257.447095][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.585792][ T1598] device veth1_macvtap left promiscuous mode [ 257.586827][ T1598] device veth0_macvtap left promiscuous mode [ 257.587841][ T1598] device veth1_vlan left promiscuous mode [ 257.588759][ T1598] device veth0_vlan left promiscuous mode [ 257.685818][ T1598] device veth1_macvtap left promiscuous mode [ 257.686845][ T1598] device veth0_macvtap left promiscuous mode [ 257.687819][ T1598] device veth1_vlan left promiscuous mode [ 257.688822][ T1598] device veth0_vlan left promiscuous mode [ 258.018435][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 258.096808][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 258.206977][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.336357][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.598876][ T1598] bond0 (unregistering): Released all slaves [ 258.956554][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 259.048616][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 259.156617][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.296495][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.537445][ T1598] bond0 (unregistering): Released all slaves [ 261.666201][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 261.846508][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 262.006588][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.206380][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.726968][ T1598] bond0 (unregistering): Released all slaves