last executing test programs: 36.32893939s ago: executing program 4 (id=2243): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) 35.182603123s ago: executing program 4 (id=2250): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 32.590678032s ago: executing program 4 (id=2258): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 31.987621129s ago: executing program 4 (id=2262): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$eJzs3M9rHFUcAPDvTLJpY6qJtf5q/RGtYhFNmrZqDx5UFDxUEBTU45LEUptWaSLYEjD1UE8ignfx6L/gSS8ingSvepdCkV5sPa3Mzkyym2w22XQ3W93PB7b9vvmR974783bfzNvdAAbWZPZPErEvIn6PiPG82LzBZP7fjevLszevL88mUau99VdS3+7v68uz5ablfmONhUjiUIt6Fy9eOltdWJi/UJSnl859NL148dKzZ85VT8+fnj9/7OTJE8dnXnj+2HNdyXMs0iJ6/b2v3jj1RVP+6/Loksl2K5+s1bpcXX/d2RAP97EddGaoOF6Vev8fj6GGozcer322Wvi0Tw0EeqZWq9XGNl+9UgP+x5JoLuvyMCjKN/ry+rfVdfBLPRt99N+1l/MLoCzvG8UjXzO8esegsu76tpsmI+LdlX++yR7Rm/sQAABNfsjGP89ko53l2WzssTb+SOO+hu3uKuaGJiLi7ojYHxH3xPk4EBH3RtS3vT8iHuiw/oZJkvowc+P4J7264+S2IRv/vVjMbTWP/8rRX0wM1UsX80JUkvfPLMwfLZ6TI1HZk5Vn2tTx46u/fbnZusbxX/bI6i/HgkU7rg7vad5nrrpU3XnGza5djjg43Cr/ZHUmIImIByPiYKs/kG5dx5mnv3tos3Vb599GFyaaat9GPJUf/5VYl38paT8/Ob03FuaPTpdnxUa//Hrlzc3qX5f/3ugk/y7Ijv8dLc//1fwnksb52sXO67jyx+ebXtNMVoqgg/N/pbpUHUnerscjxbJPqktLF2YiRpJTeaMblx9b27csl9tn+R853Lr/74+1Z+JQRGQn8cMR8UhEPFocu8ci4vGIONwm/59feeKD9ctGy/xv5fzvgiz/uY6O/1owEs1L0hbbZMHQ2Z++b6p0Yi0s8r/Z/vXvRD06UizZzuvfxla0Dm71+QMAAID/gjQi9kWSTq3GaTo1lX+G/0A+9Z35+Pxc/h2Biaik5Z2u8Yb7oTPFZX1evhwR+UcLyvXHI63fN/56aLRenpr9cGGur5kDY5v0/8yfQ/1uHdBzvrAFg0v/h8HVtv9Xdq8dwO7b0P/b9vk9PW0LsLtavP+P9qMdwO5rNf73ez8wGNb1f9N+MEDc/4fBpf/D4NL/YSAtjsbWX5JvG5R/aYe7bxWMR+y8hRGx0uX2bDuISh8q3cUg0p5XMdLbU6tnQbKzNidxOzS+oe9s4Z02PxwOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwu/g3AAD//0C6yvY=") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 31.04698425s ago: executing program 4 (id=2269): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f003}) 28.295816701s ago: executing program 4 (id=2283): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 27.947003705s ago: executing program 32 (id=2283): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 16.84385106s ago: executing program 2 (id=2315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000014) 14.521117256s ago: executing program 2 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040004) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x3f0}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x2, 0x5, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}]}, 0x38}, 0x1, 0x7}, 0x0) 8.672844952s ago: executing program 2 (id=2349): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) close(0x4) 7.023907941s ago: executing program 0 (id=2354): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.620697415s ago: executing program 0 (id=2357): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @remote, 0x100000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 6.432373477s ago: executing program 0 (id=2359): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040004) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x3f0}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x2, 0x5, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}]}, 0x38}, 0x1, 0x7}, 0x0) 6.1961095s ago: executing program 2 (id=2362): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x8, 0x9, 0x0, 0x0, 0x0}) 6.071279231s ago: executing program 2 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) mount(0x0, 0x0, 0x0, 0x40078, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./cgroup\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1007408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') 2.232416825s ago: executing program 1 (id=2377): r0 = io_uring_setup(0x46eb, &(0x7f0000000080)={0x0, 0x18cc, 0x10000, 0x1, 0xa}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2.048449207s ago: executing program 1 (id=2380): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.898423329s ago: executing program 1 (id=2382): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0xf8, &(0x7f0000000200)=0xb9b, &(0x7f0000000240)=0x1) 1.824487139s ago: executing program 3 (id=2383): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x273e, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) readv(r0, &(0x7f00000058c0)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1) 1.647654011s ago: executing program 3 (id=2384): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000280)={0x0, 0x0}) 1.536187353s ago: executing program 5 (id=2385): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020) 1.476246153s ago: executing program 3 (id=2386): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xef045000) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000001c0)={'bond_slave_0\x00', @ifru_names='dvmrp1\x00'}) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x366) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.476069063s ago: executing program 1 (id=2387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x54, r1, 0x1, 0x70bd25, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) 1.342335655s ago: executing program 5 (id=2388): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bind$inet(r0, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000001480)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.340237305s ago: executing program 1 (id=2389): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200003, 0x200, 0x0, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x10, "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"}) 1.064430398s ago: executing program 1 (id=2390): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 407.924145ms ago: executing program 3 (id=2391): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xa, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 312.278987ms ago: executing program 5 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 291.768597ms ago: executing program 0 (id=2393): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x4004af07, 0x0) 192.484738ms ago: executing program 5 (id=2394): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a00000000000000000300f2"], 0x20}}, 0x0) 191.707588ms ago: executing program 3 (id=2395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000700)={0x8, 0x120, 0xfa00, {0x1, {0x7fff, 0x0, "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", 0xc, 0xfc, 0xd, 0x0, 0xe, 0xe, 0x6, 0x1}}}, 0x128) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") 168.115678ms ago: executing program 5 (id=2396): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) 151.916968ms ago: executing program 0 (id=2397): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x6, @vbi={0x3, 0xe2, 0x7, 0x584e4f53, [0x3, 0x400006], [0x2, 0x5d8], 0x108}}) 112.780569ms ago: executing program 3 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) 441.04µs ago: executing program 5 (id=2399): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1200000070e4fd2b476b31087100000000a1", 0x12, 0x0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x40001) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x564, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 169.32µs ago: executing program 2 (id=2400): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 0s ago: executing program 0 (id=2401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xef045000) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000001c0)={'bond_slave_0\x00', @ifru_names='dvmrp1\x00'}) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x366) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 4] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.716433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.727939][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.739424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.748403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.776124][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.791543][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.806830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.815467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.829052][ T4191] device veth0_vlan entered promiscuous mode [ 52.861209][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 52.867337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.875428][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 52.876386][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 52.887892][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 52.888505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.902187][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 52.910571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.919966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.929643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.939194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.948276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.957082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.988900][ T4191] device veth1_vlan entered promiscuous mode [ 52.996400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.005497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.016172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.029221][ T4190] device veth0_vlan entered promiscuous mode [ 53.046216][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.060428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.068897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.084343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.096427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.105606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.115150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.123615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.132701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.140269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.156125][ T4190] device veth1_vlan entered promiscuous mode [ 53.167988][ T4188] device veth0_vlan entered promiscuous mode [ 53.184669][ T4191] device veth0_macvtap entered promiscuous mode [ 53.206199][ T4191] device veth1_macvtap entered promiscuous mode [ 53.215814][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.226219][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.234995][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.244424][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.252103][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.262362][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.273867][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.293504][ T4188] device veth1_vlan entered promiscuous mode [ 53.310086][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.338185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.349264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.363904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.373561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.385179][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.402650][ T4190] device veth0_macvtap entered promiscuous mode [ 53.412267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.420199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.429679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.438478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.448616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.465229][ T4190] device veth1_macvtap entered promiscuous mode [ 53.477281][ T4188] device veth0_macvtap entered promiscuous mode [ 53.493459][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.503075][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.511831][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.520120][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.532920][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.542605][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.551590][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.560294][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.576592][ T4188] device veth1_macvtap entered promiscuous mode [ 53.595026][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.606015][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.617313][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.634491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.643324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.651947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.660067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.669090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.678315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.686630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.696055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.705057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.717698][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.728824][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.738709][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.750135][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.761475][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.769907][ T4189] device veth0_vlan entered promiscuous mode [ 53.778712][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.791635][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.802975][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.822881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.833303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.844177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.853079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.867423][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.878100][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.888857][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.899320][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.912940][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.930445][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.939695][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.948704][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.957652][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.971358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.979877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.989657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.998083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.006888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.015763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.031792][ T4189] device veth1_vlan entered promiscuous mode [ 54.039204][ T4197] device veth0_vlan entered promiscuous mode [ 54.048044][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.059504][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.068444][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.077344][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.114057][ T4197] device veth1_vlan entered promiscuous mode [ 54.123593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.132352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.140175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.156100][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.165533][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.181567][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.193622][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.258037][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.278188][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.287504][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.296766][ T4189] device veth0_macvtap entered promiscuous mode [ 54.310535][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.313977][ T4197] device veth0_macvtap entered promiscuous mode [ 54.330275][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.351691][ T4189] device veth1_macvtap entered promiscuous mode [ 54.359090][ T4197] device veth1_macvtap entered promiscuous mode [ 54.375007][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.384315][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.393157][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.402531][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.410431][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.435372][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.449968][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.462377][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.476084][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.476665][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.500208][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.510961][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.523886][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.534141][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.545145][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.556139][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.564821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.573155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.582450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.591409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.615588][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.630280][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.642274][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.668895][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.683293][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.702445][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.712924][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.724481][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.735726][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.746407][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.757471][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.767740][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.778578][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.788871][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.799301][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.812358][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.832242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.842650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.851762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.860314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.872290][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.888847][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.899330][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.912135][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.922146][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.932759][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.943243][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 54.949459][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 54.949571][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.955841][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 54.971650][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.972420][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 54.983723][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.997780][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.999278][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 55.008572][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.023450][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.032311][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.045180][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.054359][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.065890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.074703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.090881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.112822][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.122343][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.133393][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.142299][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.164046][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.172536][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.212112][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.234814][ T26] audit: type=1326 audit(1778104298.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.301450][ T26] audit: type=1326 audit(1778104298.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.428704][ T26] audit: type=1326 audit(1778104298.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.454209][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.470694][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.477512][ T26] audit: type=1326 audit(1778104298.740:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.520548][ T4283] device geneve2 entered promiscuous mode [ 55.576985][ T26] audit: type=1326 audit(1778104298.740:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.605048][ T26] audit: type=1326 audit(1778104298.740:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.632012][ T26] audit: type=1326 audit(1778104298.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.656103][ T26] audit: type=1326 audit(1778104298.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.680271][ T26] audit: type=1326 audit(1778104298.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.706530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.712090][ T26] audit: type=1326 audit(1778104298.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e83062dd9 code=0x7ffc0000 [ 55.777277][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.797605][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.912477][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.934248][ T4300] loop0: detected capacity change from 0 to 1024 [ 55.945740][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.990474][ T4300] EXT4-fs (loop0): Ignoring removed orlov option [ 56.035790][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.044553][ T4300] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 56.045071][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.136339][ T4305] Zero length message leads to an empty skb [ 56.655102][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.698446][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.726701][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.817292][ T4300] syz.0.14 (4300) used greatest stack depth: 20336 bytes left [ 56.910190][ T4317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 56.951898][ T4322] loop2: detected capacity change from 0 to 256 [ 57.021001][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 57.021759][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 57.050782][ T4322] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.057043][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 57.086458][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 57.122139][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 57.353816][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.385796][ T4336] device batadv_slave_1 entered promiscuous mode [ 58.070176][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 58.080349][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 58.177679][ T4352] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 58.283656][ T4339] device syzkaller0 entered promiscuous mode [ 58.409045][ T4361] loop4: detected capacity change from 0 to 128 [ 58.634045][ T4372] attempt to access beyond end of device [ 58.634045][ T4372] loop4: rw=2049, want=353, limit=128 [ 58.725673][ T4361] attempt to access beyond end of device [ 58.725673][ T4361] loop4: rw=524288, want=353, limit=128 [ 58.800130][ T4375] device syzkaller0 entered promiscuous mode [ 58.957314][ T4378] loop4: detected capacity change from 0 to 512 [ 59.035291][ T4384] overlayfs: failed to clone upperpath [ 59.060140][ T4378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.147924][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.149982][ T4378] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.275459][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.615064][ T4401] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 60.233465][ T4405] team0: Device vxcan3 is of different type [ 60.372355][ T4401] team0: Port device bridge1 added [ 60.426151][ T4407] device macvlan2 entered promiscuous mode [ 60.446804][ T4407] team0: Device macvlan2 is already an upper device of the team interface [ 60.915185][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 60.980869][ T4282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.330718][ T4282] usb 4-1: Using ep0 maxpacket: 32 [ 61.460951][ T4282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.519996][ T4282] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.856406][ T4282] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 61.892108][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.900146][ T4282] usb 4-1: Product: syz [ 61.948403][ T4282] usb 4-1: Manufacturer: syz [ 61.976555][ T4282] usb 4-1: SerialNumber: syz [ 61.999624][ T4282] usb 4-1: config 0 descriptor?? [ 62.018177][ T4450] Invalid ELF header magic: != ELF [ 62.394401][ T4382] ODEBUG: Out of memory. ODEBUG disabled [ 63.375545][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.470830][ T4282] usb 4-1: USB disconnect, device number 2 [ 63.609505][ T4489] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 63.637584][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 63.780867][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.791730][ T4498] loop3: detected capacity change from 0 to 512 [ 63.799458][ T4496] loop4: detected capacity change from 0 to 512 [ 63.803227][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.815212][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.832050][ T24] usb 3-1: config 0 descriptor?? [ 63.886735][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 63.908179][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 63.926910][ T4498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.955156][ T24] hub: probe of 3-1:0.0 failed with error -5 [ 63.959648][ T4382] Set syz1 is full, maxelem 65536 reached [ 63.967215][ T4496] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.977856][ T4498] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.060017][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.107139][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.020205][ T4534] loop2: detected capacity change from 0 to 512 [ 68.074337][ T4534] ======================================================= [ 68.074337][ T4534] WARNING: The mand mount option has been deprecated and [ 68.074337][ T4534] and is ignored by this kernel. Remove the mand [ 68.074337][ T4534] option from the mount to silence this warning. [ 68.074337][ T4534] ======================================================= [ 68.127979][ T4531] block device autoloading is deprecated and will be removed. [ 68.411635][ T4534] EXT4-fs (loop2): inline encryption not supported [ 68.489286][ T4534] EXT4-fs (loop2): 1 orphan inode deleted [ 68.504966][ T24] usb 3-1: USB disconnect, device number 2 [ 68.533959][ T4534] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 68.666966][ T4534] EXT4-fs (loop2): shut down requested (2) [ 68.829930][ T4567] loop2: detected capacity change from 0 to 1024 [ 68.850734][ T4567] EXT4-fs (loop2): Ignoring removed orlov option [ 68.869251][ T4568] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.937592][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 68.961270][ T4572] af_packet: tpacket_rcv: packet too big, clamped from 65267 to 3966. macoff=82 [ 69.080146][ T4577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 69.232205][ T26] audit: type=1326 audit(1778104312.740:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 69.325466][ T26] audit: type=1326 audit(1778104312.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 69.349488][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.395542][ T26] audit: type=1326 audit(1778104312.780:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 69.419482][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.557228][ T26] audit: type=1326 audit(1778104312.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 70.610633][ T26] audit: type=1326 audit(1778104312.780:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 70.665211][ T26] audit: type=1326 audit(1778104312.780:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 70.709738][ T26] audit: type=1326 audit(1778104312.780:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa57c657dd9 code=0x7ffc0000 [ 70.780593][ C1] sched: RT throttling activated [ 70.859343][ T4608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.184052][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.191783][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.225926][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 71.280144][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 71.320781][ T4282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.570694][ T4282] usb 1-1: Using ep0 maxpacket: 32 [ 71.593742][ T4639] loop4: detected capacity change from 0 to 8 [ 71.619817][ T4643] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.629002][ T4643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.636537][ T4643] IPv6: NLM_F_CREATE should be set when creating new route [ 71.643794][ T4643] IPv6: NLM_F_CREATE should be set when creating new route [ 71.722362][ T4282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.741599][ T4639] SQUASHFS error: lzo decompression failed, data probably corrupt [ 71.759449][ T4282] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.769056][ T4639] SQUASHFS error: Failed to read block 0x91: -5 [ 71.781842][ T4639] SQUASHFS error: Unable to read metadata cache entry [8f] [ 71.789705][ T4639] SQUASHFS error: Unable to read inode 0x11f [ 72.689303][ T4657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.142'. [ 73.638737][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 73.657095][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 73.793036][ T4282] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 73.810153][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.155241][ T4282] usb 1-1: Product: syz [ 74.800649][ T4282] usb 1-1: Manufacturer: syz [ 74.805298][ T4282] usb 1-1: SerialNumber: syz [ 75.791797][ T4282] usb 1-1: config 0 descriptor?? [ 75.942137][ T4282] usb 1-1: can't set config #0, error -71 [ 75.974335][ T4282] usb 1-1: USB disconnect, device number 2 [ 76.241055][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 76.247500][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 76.302988][ T21] cfg80211: failed to load regulatory.db [ 76.408672][ T4705] loop0: detected capacity change from 0 to 512 [ 76.498794][ T4705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 76.547653][ T4705] System zones: 1-12 [ 76.587455][ T4705] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.157: Directory hole found for htree index block 0 [ 76.700292][ T4705] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 76.765926][ T4705] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.157: Directory hole found for htree index block 0 [ 76.803608][ T4705] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 76.835701][ T4705] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 76.878672][ T4705] EXT4-fs (loop0): shut down requested (1) [ 76.939957][ T4732] netlink: 64 bytes leftover after parsing attributes in process `syz.1.169'. [ 77.102155][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.103940][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.104056][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.687622][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 79.550067][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.592611][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.620915][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.785635][ T4797] loop0: detected capacity change from 0 to 256 [ 79.845122][ T4797] FAT-fs (loop0): Directory bread(block 64) failed [ 79.859574][ T4797] FAT-fs (loop0): Directory bread(block 65) failed [ 79.867532][ T4797] FAT-fs (loop0): Directory bread(block 66) failed [ 79.874253][ T4797] FAT-fs (loop0): Directory bread(block 67) failed [ 79.880946][ T4797] FAT-fs (loop0): Directory bread(block 68) failed [ 79.887793][ T4797] FAT-fs (loop0): Directory bread(block 69) failed [ 79.898236][ T4797] FAT-fs (loop0): Directory bread(block 70) failed [ 79.905649][ T4797] FAT-fs (loop0): Directory bread(block 71) failed [ 79.915860][ T4797] FAT-fs (loop0): Directory bread(block 72) failed [ 79.922903][ T4803] netlink: 64 bytes leftover after parsing attributes in process `syz.3.192'. [ 79.925964][ T4797] FAT-fs (loop0): Directory bread(block 73) failed [ 80.149194][ T4818] loop0: detected capacity change from 0 to 128 [ 81.038321][ T4847] loop4: detected capacity change from 0 to 256 [ 81.197204][ T4847] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 81.618437][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 81.662105][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 81.674592][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 83.722591][ T4927] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 84.016688][ T4934] bond1: (slave gretap1): making interface the new active one [ 84.035587][ T4934] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.390646][ T5014] mmap: syz.3.266 (5014) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.104693][ T5030] loop0: detected capacity change from 0 to 256 [ 91.546913][ T5124] loop2: detected capacity change from 0 to 2048 [ 91.788830][ T5124] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 91.867207][ T5124] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.957065][ T5124] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 91.984842][ T5124] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.984842][ T5124] [ 91.996767][ T5124] EXT4-fs (loop2): Total free blocks count 0 [ 92.003174][ T5124] EXT4-fs (loop2): Free/Dirty block details [ 92.010472][ T5124] EXT4-fs (loop2): free_blocks=2415919104 [ 92.023258][ T5124] EXT4-fs (loop2): dirty_blocks=16 [ 92.028655][ T5124] EXT4-fs (loop2): Block reservation details [ 92.037772][ T5124] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 93.695946][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 93.723931][ T5180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.733018][ T5180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.741859][ T5180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.750550][ T5180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.763318][ T5180] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.772264][ T5180] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.781163][ T5180] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.790157][ T5180] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.812487][ T5183] netlink: 76 bytes leftover after parsing attributes in process `syz.0.324'. [ 94.011073][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 94.045342][ T5180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.054268][ T5180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.063031][ T5180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.071831][ T5180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.375363][ T5180] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.384415][ T5180] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.393363][ T5180] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.402505][ T5180] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.615150][ T5207] SET target dimension over the limit! [ 95.054618][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 95.078531][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 96.155739][ T5242] SET target dimension over the limit! [ 96.220959][ T5239] loop0: detected capacity change from 0 to 2048 [ 96.666695][ T5239] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 97.881748][ T5247] crypto_alloc_aead failed rc=-4 [ 97.965028][ T5239] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.032861][ T5239] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 98.046338][ T5239] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.046338][ T5239] [ 98.076135][ T5239] EXT4-fs (loop0): Total free blocks count 0 [ 98.083174][ T5239] EXT4-fs (loop0): Free/Dirty block details [ 98.088540][ T5291] tipc: Started in network mode [ 98.089212][ T5239] EXT4-fs (loop0): free_blocks=2415919104 [ 98.106217][ T5239] EXT4-fs (loop0): dirty_blocks=16 [ 98.112932][ T5239] EXT4-fs (loop0): Block reservation details [ 98.117991][ T5295] loop4: detected capacity change from 0 to 512 [ 98.120872][ T5239] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 98.125628][ T5291] tipc: Node identity 1252bdbc685e, cluster identity 4711 [ 98.140118][ T5291] tipc: Enabled bearer , priority 0 [ 98.154374][ T5296] device syzkaller0 entered promiscuous mode [ 98.177280][ T5291] tipc: Resetting bearer [ 98.198057][ T5295] EXT4-fs (loop4): Ignoring removed oldalloc option [ 98.220557][ T5288] tipc: Resetting bearer [ 98.235706][ T5295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.276725][ T5288] tipc: Disabling bearer [ 98.294894][ T5295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.359714][ T5295] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 98.389874][ T5295] EXT4-fs (loop4): 1 truncate cleaned up [ 98.396139][ T5295] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 100.739654][ T5344] device syzkaller0 entered promiscuous mode [ 102.077132][ T5402] device syzkaller0 entered promiscuous mode [ 102.682386][ T26] audit: type=1326 audit(1778104346.190:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5413 comm="syz.2.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa33a5add9 code=0x0 [ 102.705796][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.016382][ T5424] overlayfs: failed to clone upperpath [ 103.053337][ T5424] overlayfs: failed to clone lowerpath [ 103.123739][ T5426] capability: warning: `syz.4.401' uses deprecated v2 capabilities in a way that may be insecure [ 103.542586][ T5454] device syzkaller1 entered promiscuous mode [ 103.565708][ T5457] loop2: detected capacity change from 0 to 7 [ 103.593680][ T5457] Dev loop2: unable to read RDB block 7 [ 103.619395][ T5457] loop2: unable to read partition table [ 103.635744][ T5457] loop2: partition table beyond EOD, truncated [ 103.675992][ T5457] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.870948][ T5466] 9pnet: p9_fd_create_tcp (5466): problem connecting socket to 127.0.0.1 [ 104.178955][ T5484] device syzkaller0 entered promiscuous mode [ 104.203690][ T5484] tipc: Started in network mode [ 104.218861][ T5484] tipc: Node identity ce8c09919587, cluster identity 4711 [ 104.228079][ T5484] tipc: Enabled bearer , priority 0 [ 104.284627][ T5483] tipc: Resetting bearer [ 104.326761][ T5493] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 104.339058][ T5483] tipc: Disabling bearer [ 104.507164][ T5498] device syzkaller0 entered promiscuous mode [ 105.626142][ T5509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 105.871990][ T5521] device syzkaller0 entered promiscuous mode [ 105.919244][ T5525] loop2: detected capacity change from 0 to 7 [ 105.970153][ T5525] Dev loop2: unable to read RDB block 7 [ 106.010726][ T5525] loop2: unable to read partition table [ 106.051064][ T5525] loop2: partition table beyond EOD, truncated [ 106.093990][ T5525] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.107703][ T5533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 106.250504][ T5537] loop2: detected capacity change from 0 to 512 [ 107.152866][ T5537] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.201520][ T5537] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000001,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000. Quota mode: writeback. [ 107.302869][ T5555] device syzkaller0 entered promiscuous mode [ 107.524855][ T5537] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 108.348907][ T5596] tipc: Enabling of bearer rejected, failed to enable media [ 108.406913][ T5591] device syzkaller0 entered promiscuous mode [ 109.728741][ T5615] loop4: detected capacity change from 0 to 1024 [ 109.850086][ T5615] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodioread_nolock,noblock_validity,delalloc,journal_dev=0x0000000000000007,nodioread_nolock,journal_ioprio=0x0000000000000006,noinit_itable,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 109.916123][ T5615] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.133318][ T5638] device syzkaller0 entered promiscuous mode [ 110.905504][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 110.959343][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 111.241788][ T5664] tipc: Cannot configure node identity twice [ 114.229384][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 114.250236][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 114.697738][ T5754] process 'syz.1.515' launched './file1' with NULL argv: empty string added [ 118.719967][ T5843] loop2: detected capacity change from 0 to 512 [ 118.779188][ T5843] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.867176][ T5843] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 118.960103][ T5843] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.556: invalid indirect mapped block 256 (level 1) [ 118.988676][ T5843] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.556: invalid indirect mapped block 2683928664 (level 1) [ 119.011030][ T5843] EXT4-fs (loop2): 1 truncate cleaned up [ 119.027799][ T5843] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,noinit_itable,nodioread_nolock,discard,usrjquota=.noacl,dioread_nolock,jqfmt=vfsv0,auto_da_alloc,init_itable,norecovery,nouid32,,,errors=continue. Quota mode: writeback. [ 119.362776][ T5860] loop0: detected capacity change from 0 to 512 [ 119.439310][ T5860] EXT4-fs (loop0): Ignoring removed orlov option [ 119.474946][ T5860] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 119.537976][ T5860] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 119.613440][ T5860] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 119.787846][ T5860] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.916559][ T5860] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 120.080743][ T26] audit: type=1800 audit(1778104363.530:20): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.556" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 120.122495][ T5860] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.238881][ T5860] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 120.265004][ T5860] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.563: bg 0: block 40: padding at end of block bitmap is not set [ 120.360886][ T5860] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 120.392070][ T5860] EXT4-fs (loop0): 1 truncate cleaned up [ 120.397788][ T5860] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,noload,noblock_validity,norecovery,i_version,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 120.459420][ T5860] EXT4-fs (loop0): shut down requested (1) [ 120.494751][ T5860] fscrypt (loop0, inode 16): Error -5 getting encryption context [ 120.525160][ T5877] device syzkaller0 entered promiscuous mode [ 121.185967][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.822358][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.843528][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.898796][ T5890] device bridge_slave_0 left promiscuous mode [ 121.965313][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.104146][ T5890] device bridge_slave_1 left promiscuous mode [ 122.145313][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.230266][ T5890] bond0: (slave bond_slave_0): Releasing backup interface [ 122.450314][ T5890] bond0: (slave bond_slave_1): Releasing backup interface [ 122.565113][ T5890] team0: Port device team_slave_0 removed [ 122.639864][ T5890] team0: Port device team_slave_1 removed [ 122.684528][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.719645][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.817506][ T5919] device syzkaller0 entered promiscuous mode [ 124.109832][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 125.307067][ T5956] netlink: 'syz.3.600': attribute type 4 has an invalid length. [ 125.512913][ T5965] loop8: detected capacity change from 0 to 7 [ 125.534819][ T4182] Dev loop8: unable to read RDB block 7 [ 125.552939][ T4182] loop8: unable to read partition table [ 125.593257][ T4182] loop8: partition table beyond EOD, truncated [ 125.615884][ T5965] Dev loop8: unable to read RDB block 7 [ 125.627557][ T5965] loop8: unable to read partition table [ 125.664084][ T5965] loop8: partition table beyond EOD, truncated [ 125.697226][ T5965] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 125.731651][ T5969] Dev loop8: unable to read RDB block 7 [ 125.748470][ T5969] loop8: unable to read partition table [ 125.783055][ T5969] loop8: partition table beyond EOD, truncated [ 125.820665][ T5969] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 126.778266][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 127.034134][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 127.043115][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 127.071745][ T6011] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.080520][ T6011] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.089254][ T6011] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.097967][ T6011] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.111606][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 127.120506][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 129.038064][ T6049] netlink: 'syz.4.627': attribute type 39 has an invalid length. [ 129.471413][ T6068] device syzkaller0 entered promiscuous mode [ 129.758752][ T6080] loop2: detected capacity change from 0 to 512 [ 129.925048][ T6087] tipc: Started in network mode [ 129.943868][ T6087] tipc: Node identity , cluster identity 4711 [ 129.950057][ T6087] tipc: Failed to obtain node identity [ 129.956264][ T6080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.967212][ T6087] tipc: Enabling of bearer rejected, failed to enable media [ 129.994870][ T6087] netlink: 3 bytes leftover after parsing attributes in process `syz.3.644'. [ 130.133458][ T6080] EXT4-fs (loop2): 1 truncate cleaned up [ 130.153402][ T6080] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 130.196093][ T6087] 0ªX¹¦À: renamed from caif0 [ 130.407472][ T6087] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 130.741851][ T6080] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.641: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 130.918057][ T6080] EXT4-fs (loop2): Remounting filesystem read-only [ 130.978999][ T6092] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #2: block 13: comm syz.2.641: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 131.125560][ T6092] EXT4-fs (loop2): Remounting filesystem read-only [ 131.185299][ T6096] netlink: 'syz.3.646': attribute type 39 has an invalid length. [ 132.622094][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.628451][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912197][ T6136] overlayfs: failed to clone upperpath [ 133.057087][ T6141] netlink: 'syz.3.663': attribute type 39 has an invalid length. [ 133.075391][ T6137] loop0: detected capacity change from 0 to 4096 [ 133.121672][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.794070][ T6137] overlayfs: failed to resolve './bus': -2 [ 134.034343][ T6153] device syzkaller0 entered promiscuous mode [ 135.011315][ T6175] netlink: 'syz.4.674': attribute type 39 has an invalid length. [ 136.361133][ T6192] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.694874][ T6222] netlink: 'syz.3.687': attribute type 39 has an invalid length. [ 141.981186][ T6241] sctp: failed to load transform for md5: -2 [ 142.058039][ T6237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.118041][ T6248] bond1: (slave ip6erspan0): making interface the new active one [ 142.181370][ T6248] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 142.247098][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 144.935866][ T6298] input: syz0 as /devices/virtual/input/input5 [ 145.176646][ T6307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.307544][ T6307] bond2: (slave ip6erspan0): making interface the new active one [ 145.326903][ T6307] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 145.704867][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 145.905829][ T6333] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.943300][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'. [ 146.011499][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.018741][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.031642][ T6365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.216731][ T6365] bond1: (slave ip6erspan0): making interface the new active one [ 147.523414][ T6365] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 147.581659][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 147.783607][ T6365] syz.1.736 (6365) used greatest stack depth: 20016 bytes left [ 149.948589][ T6396] netlink: 'syz.0.747': attribute type 39 has an invalid length. [ 151.127678][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'. [ 151.221354][ T6420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.787987][ T6425] sctp: failed to load transform for md5: -2 [ 154.048412][ T6452] netlink: 'syz.0.762': attribute type 39 has an invalid length. [ 155.761742][ T6481] loop2: detected capacity change from 0 to 512 [ 155.954970][ T6481] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.772: bg 0: block 248: padding at end of block bitmap is not set [ 155.980336][ T6481] Quota error (device loop2): write_blk: dquota write failed [ 155.990283][ T6481] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 156.005382][ T6481] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.772: Failed to acquire dquot type 1 [ 156.038655][ T6481] EXT4-fs (loop2): 1 truncate cleaned up [ 156.047170][ T6481] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 156.065131][ T6481] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.164601][ T6504] netlink: 'syz.0.776': attribute type 39 has an invalid length. [ 156.497382][ T6519] loop2: detected capacity change from 0 to 512 [ 156.504819][ T6490] netlink: 'syz.3.774': attribute type 4 has an invalid length. [ 156.615660][ T6490] netlink: 'syz.3.774': attribute type 17 has an invalid length. [ 156.674537][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.365886][ T6539] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 158.427614][ T6539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.582236][ T6542] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 158.691896][ T6547] netlink: 'syz.4.788': attribute type 39 has an invalid length. [ 158.743857][ T6553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'. [ 160.227115][ T6588] netlink: 'syz.3.804': attribute type 39 has an invalid length. [ 160.263297][ T6582] device syzkaller0 entered promiscuous mode [ 160.357668][ T6590] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.370420][ T6590] Cannot find add_set index 0 as target [ 161.057054][ T6600] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 161.225534][ T6606] device syzkaller0 entered promiscuous mode [ 162.097570][ T6612] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.108230][ T6612] overlayfs: failed to clone upperpath [ 162.324497][ T6622] netlink: 'syz.3.817': attribute type 39 has an invalid length. [ 164.889872][ T6685] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 164.948511][ T6685] netlink: 3 bytes leftover after parsing attributes in process `syz.0.835'. [ 165.151519][ T6688] netlink: 'syz.4.834': attribute type 39 has an invalid length. [ 165.922197][ T6705] device syzkaller0 entered promiscuous mode [ 166.096039][ T6716] device syzkaller0 entered promiscuous mode [ 166.351500][ T6727] netlink: 'syz.1.851': attribute type 39 has an invalid length. [ 166.585336][ T6733] loop0: detected capacity change from 0 to 512 [ 166.624045][ T6730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.675412][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.737593][ T6733] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.781084][ T6733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.849523][ T6733] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 168.653837][ T6755] device syzkaller0 entered promiscuous mode [ 169.012057][ T6768] device syzkaller0 entered promiscuous mode [ 169.112943][ T6773] netlink: 'syz.1.865': attribute type 39 has an invalid length. [ 172.246745][ T6815] netlink: 'syz.1.878': attribute type 39 has an invalid length. [ 173.476445][ T6829] device syzkaller0 entered promiscuous mode [ 174.020875][ T6858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.072516][ T6869] netlink: 'syz.3.894': attribute type 39 has an invalid length. [ 176.060645][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 176.071258][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 176.096762][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 176.103022][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 176.114699][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 176.126149][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 176.200915][ T6893] device syzkaller0 entered promiscuous mode [ 177.583188][ T6921] netlink: 'syz.4.908': attribute type 39 has an invalid length. [ 179.239324][ T6971] netlink: 'syz.1.921': attribute type 39 has an invalid length. [ 179.488252][ T6979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.325568][ T7015] netlink: 'syz.4.933': attribute type 39 has an invalid length. [ 182.222444][ T7025] device syzkaller0 entered promiscuous mode [ 182.496530][ T7033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.531086][ T7033] overlayfs: failed to clone upperpath [ 183.206760][ T7051] netlink: 'syz.2.944': attribute type 39 has an invalid length. [ 183.716433][ T7080] SET target dimension over the limit! [ 183.923755][ T7092] netlink: 'syz.2.959': attribute type 39 has an invalid length. [ 184.402815][ T7122] SET target dimension over the limit! [ 184.595883][ T26] audit: type=1326 audit(1778104428.100:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa57c657dd9 code=0x0 [ 184.857749][ T7139] netlink: 'syz.3.971': attribute type 39 has an invalid length. [ 185.638358][ T7160] SET target dimension over the limit! [ 185.772302][ T7171] netlink: 'syz.0.983': attribute type 39 has an invalid length. [ 187.504679][ T7218] Cannot find add_set index 0 as target [ 188.206873][ T7224] netlink: 'syz.3.997': attribute type 39 has an invalid length. [ 189.088031][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 189.097015][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 189.123227][ T7267] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.132009][ T7267] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.140737][ T7267] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.149427][ T7267] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.162757][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 189.171826][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 189.775358][ T7272] netlink: 'syz.4.1011': attribute type 39 has an invalid length. [ 189.900209][ T7274] SET target dimension over the limit! [ 191.471743][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 191.481313][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 191.491805][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 191.500793][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 192.161808][ T7319] netlink: 'syz.1.1022': attribute type 39 has an invalid length. [ 192.432435][ T7327] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.461699][ T7327] overlayfs: failed to clone upperpath [ 193.183599][ T7333] ip6tnl0: Master is either lo or non-ether device [ 193.206079][ T7336] overlayfs: failed to clone upperpath [ 194.324721][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.331108][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.392066][ T7370] netlink: 'syz.2.1035': attribute type 39 has an invalid length. [ 194.500201][ T7382] input: syz0 as /devices/virtual/input/input6 [ 195.250920][ T7387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.707263][ T7387] overlayfs: failed to clone upperpath [ 196.424756][ T7414] loop4: detected capacity change from 0 to 512 [ 198.681045][ T7431] netlink: 'syz.0.1053': attribute type 39 has an invalid length. [ 199.009305][ T7441] SET target dimension over the limit! [ 199.935101][ T7452] netlink: 'syz.2.1061': attribute type 30 has an invalid length. [ 200.039649][ T7463] netlink: 'syz.0.1066': attribute type 39 has an invalid length. [ 200.064169][ T7466] loop4: detected capacity change from 0 to 128 [ 200.392873][ T7476] SET target dimension over the limit! [ 200.674242][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.925433][ T7466] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.114533][ T7482] tipc: Started in network mode [ 201.152325][ T7482] tipc: Node identity 4, cluster identity 4711 [ 201.158533][ T7482] tipc: Node number set to 4 [ 201.286908][ T7492] sctp: [Deprecated]: syz.4.1075 (pid 7492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.286908][ T7492] Use struct sctp_sack_info instead [ 201.477024][ T7498] netlink: 'syz.4.1078': attribute type 30 has an invalid length. [ 201.743220][ T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0) [ 202.319016][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 202.952178][ T7531] SET target dimension over the limit! [ 203.924977][ T7545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1095'. [ 203.970875][ T7545] device veth1_to_bond entered promiscuous mode [ 203.987112][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1095'. [ 204.172316][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 204.182489][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 206.689729][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 206.895929][ T7612] loop0: detected capacity change from 0 to 1024 [ 206.971509][ T7612] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 206.980529][ T7612] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.023782][ T7612] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1118: Invalid inode table block 0 in block_group 0 [ 207.066648][ T7612] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 207.090672][ T7612] EXT4-fs error (device loop0): ext4_quota_write:6648: inode #3: comm syz.0.1118: mark_inode_dirty error [ 207.112588][ T7612] Quota error (device loop0): write_blk: dquota write failed [ 207.120298][ T7612] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 207.160681][ T7612] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1118: Failed to acquire dquot type 0 [ 207.200894][ T7612] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1118: Invalid inode table block 0 in block_group 0 [ 207.241827][ T7612] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 207.264147][ T7612] EXT4-fs error (device loop0): ext4_ext_truncate:4472: inode #15: comm syz.0.1118: mark_inode_dirty error [ 207.346204][ T7612] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1118: Invalid inode table block 0 in block_group 0 [ 207.390292][ T7612] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 207.436194][ T7612] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 207.476700][ T7612] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1118: Invalid inode table block 0 in block_group 0 [ 207.626066][ T7612] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 207.808978][ T7612] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.1118: mark_inode_dirty error [ 207.994777][ T7612] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 208.145643][ T7612] EXT4-fs (loop0): 1 truncate cleaned up [ 208.180633][ T7612] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000000001ff,nodioread_nolock,grpid,errors=remount-ro,bsddf,errors=continue,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 208.504239][ T7645] SET target dimension over the limit! [ 209.955858][ T7673] loop2: detected capacity change from 0 to 1024 [ 209.972058][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.979496][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.032272][ T7673] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.241715][ T7673] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 210.267978][ T7673] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (40000) [ 210.656697][ T7694] Cannot find add_set index 0 as target [ 211.163279][ T7693] tipc: Started in network mode [ 211.207772][ T7693] tipc: Node identity 4, cluster identity 4711 [ 211.214223][ T7693] tipc: Node number set to 4 [ 212.937655][ T7734] loop4: detected capacity change from 0 to 1024 [ 213.573773][ T7734] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.669254][ T7753] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1166'. [ 213.705901][ T7734] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 213.745019][ T7734] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (40000) [ 214.143383][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 214.143540][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 214.148360][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 214.148478][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 218.909541][ T7822] netlink: 'syz.2.1187': attribute type 39 has an invalid length. [ 219.111391][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1190'. [ 219.129615][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1190'. [ 220.540072][ T7860] netlink: 'syz.0.1201': attribute type 39 has an invalid length. [ 220.868799][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 220.877832][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 220.888421][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 220.897559][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 222.658764][ T7886] loop2: detected capacity change from 0 to 2048 [ 222.901518][ T7886] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.085770][ T7886] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 223.121618][ T7886] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 372 with error 28 [ 223.144927][ T7886] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.144927][ T7886] [ 223.206014][ T7886] EXT4-fs (loop2): Total free blocks count 0 [ 223.213475][ T7886] EXT4-fs (loop2): Free/Dirty block details [ 223.226381][ T7886] EXT4-fs (loop2): free_blocks=2415919504 [ 223.244327][ T7886] EXT4-fs (loop2): dirty_blocks=384 [ 223.267383][ T7886] EXT4-fs (loop2): Block reservation details [ 223.286529][ T7886] EXT4-fs (loop2): i_reserved_data_blocks=24 [ 223.414373][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 223.423740][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 223.448116][ T7910] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.456851][ T7910] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.465598][ T7910] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.474309][ T7910] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.487235][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 223.496223][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 224.199710][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 224.295871][ T7936] netlink: 'syz.3.1231': attribute type 6 has an invalid length. [ 224.330715][ T7936] netlink: 'syz.3.1231': attribute type 7 has an invalid length. [ 224.350514][ T7936] netlink: 'syz.3.1231': attribute type 8 has an invalid length. [ 224.532303][ T7944] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 225.742668][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 225.751659][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 225.761156][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 225.770011][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 227.553968][ T7976] loop2: detected capacity change from 0 to 4096 [ 228.039039][ T7976] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.589529][ T7976] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1245: corrupted inode contents [ 228.651015][ T7976] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.1245: mark_inode_dirty error [ 228.687093][ T7976] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1245: corrupted inode contents [ 228.751618][ T7996] bond2: option mode: unable to set because the bond device has slaves [ 228.778206][ T7976] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.1245: mark_inode_dirty error [ 228.821518][ T7976] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1245: corrupted inode contents [ 228.930762][ T7976] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.1245: mark_inode_dirty error [ 228.950369][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 228.960207][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 228.972595][ T8003] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.981553][ T8003] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.990258][ T8003] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.998996][ T8003] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.008862][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 229.018080][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 229.429310][ T7976] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1245: corrupted inode contents [ 229.460569][ T7976] EXT4-fs error (device loop2): ext4_truncate:4286: inode #15: comm syz.2.1245: mark_inode_dirty error [ 229.476378][ T7976] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 229.534025][ T7991] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1245: corrupted inode contents [ 229.736801][ T8018] loop4: detected capacity change from 0 to 1024 [ 229.759714][ T4189] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 229.947921][ T8018] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 229.970890][ T8018] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.003637][ T8046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.752113][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 231.761158][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 231.770701][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 231.779571][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 233.237867][ T8073] sctp: failed to load transform for md5: -2 [ 233.250984][ T8071] sctp: failed to load transform for md5: -2 [ 233.519258][ T8095] loop4: detected capacity change from 0 to 4096 [ 233.660094][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 233.694190][ T8095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.727201][ T8095] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1278: corrupted inode contents [ 233.765846][ T8108] loop2: detected capacity change from 0 to 8192 [ 233.795568][ T8095] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.1278: mark_inode_dirty error [ 233.825221][ T8095] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1278: corrupted inode contents [ 233.870657][ T8095] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.1278: mark_inode_dirty error [ 234.798607][ T8095] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1278: corrupted inode contents [ 234.941574][ T8095] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.1278: mark_inode_dirty error [ 235.008130][ T8095] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1278: corrupted inode contents [ 235.046720][ T8095] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.1278: mark_inode_dirty error [ 235.095909][ T8095] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 235.151582][ T8112] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1278: corrupted inode contents [ 235.257249][ T4197] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 235.430471][ T8157] loop2: detected capacity change from 0 to 256 [ 238.006258][ T8187] device syzkaller0 entered promiscuous mode [ 241.247494][ T8224] device syzkaller0 entered promiscuous mode [ 241.328798][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 241.367361][ T8229] device gretap0 entered promiscuous mode [ 242.350120][ T8250] SET target dimension over the limit! [ 245.267612][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 245.778332][ T8287] SET target dimension over the limit! [ 246.433660][ T8296] loop2: detected capacity change from 0 to 512 [ 247.565448][ T8296] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #17: comm syz.2.1346: iget: immutable or append flags not allowed on symlinks [ 247.618421][ T8296] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1346: couldn't read orphan inode 17 (err -117) [ 247.739754][ T8296] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.860824][ T8302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 249.124999][ T8332] SET target dimension over the limit! [ 250.648925][ T8356] SET target dimension over the limit! [ 251.619551][ T8374] tipc: Enabled bearer , priority 10 [ 252.024914][ T8386] loop2: detected capacity change from 0 to 256 [ 253.195708][ T13] tipc: Node number set to 2047655356 [ 253.438711][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 253.447720][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 253.456986][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 253.465877][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 255.148286][ T8421] loop2: detected capacity change from 0 to 512 [ 255.163174][ T8420] loop0: detected capacity change from 0 to 512 [ 255.203928][ T8421] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 255.218771][ T8419] device syzkaller0 entered promiscuous mode [ 255.369356][ T8420] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000000000000d,auto_da_alloc=0x0000000000000007,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 255.420141][ T8420] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.563533][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.569853][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.118406][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 257.127449][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 257.138299][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 257.147239][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 257.303018][ T8463] loop0: detected capacity change from 0 to 256 [ 257.511822][ T8475] device syzkaller0 entered promiscuous mode [ 257.572664][ T8463] FAT-fs (loop0): Directory bread(block 64) failed [ 257.579267][ T8463] FAT-fs (loop0): Directory bread(block 65) failed [ 257.608396][ T8463] FAT-fs (loop0): Directory bread(block 66) failed [ 257.618615][ T8463] FAT-fs (loop0): Directory bread(block 67) failed [ 257.627518][ T8463] FAT-fs (loop0): Directory bread(block 68) failed [ 257.637770][ T8463] FAT-fs (loop0): Directory bread(block 69) failed [ 257.650730][ T8463] FAT-fs (loop0): Directory bread(block 70) failed [ 257.658103][ T8463] FAT-fs (loop0): Directory bread(block 71) failed [ 257.684342][ T8463] FAT-fs (loop0): Directory bread(block 72) failed [ 257.698924][ T8463] FAT-fs (loop0): Directory bread(block 73) failed [ 259.076532][ T8498] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 259.393976][ T8512] SET target dimension over the limit! [ 260.089247][ T8515] loop4: detected capacity change from 0 to 512 [ 260.185146][ T8515] EXT4-fs (loop4): Ignoring removed bh option [ 260.209482][ T8523] device syzkaller0 entered promiscuous mode [ 261.574883][ T1108] Bluetooth: hci4: command 0x0405 tx timeout [ 262.272568][ T8515] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 262.290824][ T8515] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.577768][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 263.586881][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 263.599763][ T8551] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.608603][ T8551] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.617386][ T8551] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.626160][ T8551] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.636305][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 263.645395][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 263.803207][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1435'. [ 265.304180][ T8577] device syzkaller0 entered promiscuous mode [ 266.498670][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 266.507679][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 266.518333][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 266.527468][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 267.327731][ T8616] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 267.386189][ T8616] netlink: 'syz.1.1451': attribute type 4 has an invalid length. [ 267.403778][ T8616] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1451'. [ 267.470816][ T8622] device syzkaller1 entered promiscuous mode [ 267.481836][ T8620] device syzkaller0 entered promiscuous mode [ 267.846412][ T8645] loop4: detected capacity change from 0 to 512 [ 267.996243][ T8645] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 268.003656][ T8645] EXT4-fs (loop4): inline encryption not supported [ 268.011119][ T8645] EXT4-fs (loop4): Test dummy encryption mode enabled [ 268.018032][ T8645] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 268.025230][ T8645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.246762][ T8645] EXT4-fs (loop4): 1 truncate cleaned up [ 268.252592][ T8645] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 269.766284][ T8674] loop2: detected capacity change from 0 to 256 [ 269.793352][ T8676] __nla_validate_parse: 4 callbacks suppressed [ 269.793367][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 269.808636][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 269.817901][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 269.826791][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 269.970745][ T8674] FAT-fs (loop2): Directory bread(block 64) failed [ 270.017949][ T8674] FAT-fs (loop2): Directory bread(block 65) failed [ 270.088848][ T8674] FAT-fs (loop2): Directory bread(block 66) failed [ 270.119106][ T8674] FAT-fs (loop2): Directory bread(block 67) failed [ 270.188982][ T8674] FAT-fs (loop2): Directory bread(block 68) failed [ 270.228697][ T8674] FAT-fs (loop2): Directory bread(block 69) failed [ 270.257877][ T8674] FAT-fs (loop2): Directory bread(block 70) failed [ 270.274740][ T8674] FAT-fs (loop2): Directory bread(block 71) failed [ 270.290701][ T8674] FAT-fs (loop2): Directory bread(block 72) failed [ 270.340749][ T8674] FAT-fs (loop2): Directory bread(block 73) failed [ 272.720897][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 272.729809][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 272.743800][ T8731] SET target dimension over the limit! [ 272.772012][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 272.796840][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 275.558429][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 275.567481][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 275.584755][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 275.593837][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 276.607150][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 276.625119][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 276.672920][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 276.715049][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 276.774376][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 276.841173][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 276.866788][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 276.911615][ T8805] device syzkaller0 entered promiscuous mode [ 277.053477][ T8809] Bluetooth: hci5: Frame reassembly failed (-90) [ 277.132564][ T8813] loop2: detected capacity change from 0 to 1024 [ 277.517067][ T8813] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 278.394938][ T8823] SET target dimension over the limit! [ 278.533091][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 278.542105][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 278.551349][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 278.560214][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 279.100871][ T4236] Bluetooth: hci5: command 0x1003 tx timeout [ 279.108198][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 279.703389][ T8869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.894547][ T8871] SET target dimension over the limit! [ 281.636941][ T4236] Bluetooth: hci5: command 0x1001 tx timeout [ 281.660252][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 283.629784][ T8911] device geneve2 entered promiscuous mode [ 283.740199][ T8916] device syzkaller0 entered promiscuous mode [ 283.749409][ T4236] Bluetooth: hci5: command 0x1009 tx timeout [ 283.970045][ T8923] SET target dimension over the limit! [ 284.940952][ T8936] device syzkaller0 entered promiscuous mode [ 285.874390][ T8953] loop6: detected capacity change from 0 to 7 [ 285.886288][ T8953] loop6: [ 285.890424][ T8953] loop6: partition table partially beyond EOD, truncated [ 286.636116][ T8963] SET target dimension over the limit! [ 287.132182][ T8970] device syzkaller0 entered promiscuous mode [ 288.035921][ T8991] device geneve2 entered promiscuous mode [ 290.471670][ T9013] device syzkaller0 entered promiscuous mode [ 290.748676][ T9015] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.160535][ T9021] SET target dimension over the limit! [ 291.418193][ T9033] loop4: detected capacity change from 0 to 8192 [ 292.396410][ T9046] device syzkaller0 entered promiscuous mode [ 292.691369][ T9063] netlink: 'syz.0.1603': attribute type 2 has an invalid length. [ 292.699294][ T9063] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 292.787155][ T9067] SET target dimension over the limit! [ 295.507994][ T9113] SET target dimension over the limit! [ 296.084871][ T9130] xt_TPROXY: Can be used only with -p tcp or -p udp [ 298.452472][ T9167] SET target dimension over the limit! [ 301.830976][ T9212] SET target dimension over the limit! [ 302.482492][ T9230] xt_hashlimit: size too large, truncated to 1048576 [ 307.742480][ T9294] SET target dimension over the limit! [ 307.922274][ T9299] 9pnet: Insufficient options for proto=fd [ 309.023854][ T9309] device syzkaller1 entered promiscuous mode [ 309.920118][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1688'. [ 309.968164][ T9321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1689'. [ 310.000078][ T9321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1689'. [ 310.208301][ T9327] loop0: detected capacity change from 0 to 512 [ 310.357249][ T9327] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 312.595662][ T9356] loop2: detected capacity change from 0 to 256 [ 312.982842][ T9367] SET target dimension over the limit! [ 315.213133][ T9389] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 315.808006][ T9398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 316.777058][ T9418] device syzkaller0 entered promiscuous mode [ 316.842841][ T9420] netlink: 'syz.3.1726': attribute type 3 has an invalid length. [ 316.944942][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.951303][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.471404][ T9439] SET target dimension over the limit! [ 318.021883][ T9438] xt_TPROXY: Can be used only with -p tcp or -p udp [ 319.582126][ T9483] device syzkaller0 entered promiscuous mode [ 320.976582][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 320.995961][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 321.017426][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 321.050819][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 324.253969][ T9551] loop2: detected capacity change from 0 to 512 [ 324.428522][ T9551] EXT4-fs (loop2): can't read group descriptor 0 [ 325.561675][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 325.570689][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 325.579916][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 325.588813][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 330.045675][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 330.054623][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 330.063848][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 330.072732][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 333.072457][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.079557][ T9624] bridge0: port 2(bridge_slave_1) entered listening state [ 333.087402][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.094502][ T9624] bridge0: port 1(bridge_slave_0) entered listening state [ 333.109250][ T9624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.117381][ T9624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.342992][ T9624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.210779][ T9654] SET target dimension over the limit! [ 336.351885][ T9660] device syzkaller0 entered promiscuous mode [ 338.693718][ T9693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.728883][ T9688] device syzkaller0 entered promiscuous mode [ 341.094685][ T9713] device syzkaller0 entered promiscuous mode [ 341.546549][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 341.555524][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 341.565519][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 341.574404][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 342.527800][ T9735] SET target dimension over the limit! [ 343.366097][ T9742] device syzkaller0 entered promiscuous mode [ 344.818871][ T9753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.997054][ T9755] device syzkaller0 entered promiscuous mode [ 345.932525][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 345.941523][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 345.950757][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 345.959709][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 346.710289][ T9782] device syzkaller0 entered promiscuous mode [ 348.583236][ T9801] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.141054][ T9827] SET target dimension over the limit! [ 350.670503][ T9834] device syzkaller0 entered promiscuous mode [ 352.300301][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 352.309591][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 352.319554][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 352.328485][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 353.437262][ T9862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.231820][ T9889] device syzkaller0 entered promiscuous mode [ 356.611945][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 356.620868][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 356.630043][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 356.638932][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 358.172703][ T9917] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.938772][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 360.947929][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 360.957553][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 360.966788][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 362.341146][ T9995] SET target dimension over the limit! [ 363.662384][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 363.670058][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 364.062085][T10017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 364.520854][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 364.529825][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 364.539121][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 364.548132][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 365.282080][T10041] device syzkaller0 entered promiscuous mode [ 365.675992][T10053] loop0: detected capacity change from 0 to 512 [ 365.829026][T10053] EXT4-fs (loop0): can't read group descriptor 0 [ 368.549628][T10067] xt_TPROXY: Can be used only with -p tcp or -p udp [ 369.355705][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 369.364769][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 369.374212][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 369.383234][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 369.756424][T10085] device syzkaller0 entered promiscuous mode [ 370.673000][T10114] SET target dimension over the limit! [ 370.914440][T10118] loop0: detected capacity change from 0 to 512 [ 373.657767][T10118] EXT4-fs (loop0): can't read group descriptor 0 [ 376.219739][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 376.228865][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 376.238249][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 376.247234][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 379.063729][T10191] loop4: detected capacity change from 0 to 512 [ 379.131485][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.144428][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.464219][T10198] device syzkaller0 entered promiscuous mode [ 379.667068][T10191] EXT4-fs (loop4): can't read group descriptor 0 [ 381.424616][T10221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.833130][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 381.842762][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 381.853032][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 381.861957][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 386.216827][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 386.226408][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 386.237560][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 386.247062][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 386.340611][ C1] hrtimer: interrupt took 44340 ns [ 386.837315][T10289] SET target dimension over the limit! [ 387.016486][T10295] xt_TPROXY: Can be used only with -p tcp or -p udp [ 391.307566][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 391.316480][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1954'. [ 391.325713][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 391.334591][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1954'. [ 393.807406][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.814699][ C1] bridge0: topology change detected, propagating [ 393.821774][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.829010][ C1] bridge0: topology change detected, propagating [ 393.914425][T10375] loop4: detected capacity change from 0 to 512 [ 393.924359][ T9488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.223905][T10383] SET target dimension over the limit! [ 395.276109][T10375] EXT4-fs (loop4): can't read group descriptor 0 [ 395.572184][T10393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 397.541605][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'. [ 397.550509][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 397.559766][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'. [ 397.568662][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 400.399026][T10446] device syzkaller0 entered promiscuous mode [ 400.519828][T10450] device syzkaller0 entered promiscuous mode [ 400.652961][T10453] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.780418][T10464] loop0: detected capacity change from 0 to 512 [ 404.207669][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 404.216684][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 404.226012][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 404.234914][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 404.319174][T10464] EXT4-fs (loop0): can't read group descriptor 0 [ 406.751653][T10496] device syzkaller0 entered promiscuous mode [ 406.867571][T10507] SET target dimension over the limit! [ 406.934178][T10508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 408.017708][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 408.026778][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 408.037785][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 408.046739][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 412.756048][T10559] device syzkaller0 entered promiscuous mode [ 413.325537][T10572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 414.446536][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 414.455501][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 414.464760][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 414.473801][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 415.065964][T10597] SET target dimension over the limit! [ 415.469874][T10605] loop2: detected capacity change from 0 to 512 [ 416.256569][T10605] EXT4-fs (loop2): can't read group descriptor 0 [ 417.465681][T10614] device syzkaller0 entered promiscuous mode [ 417.785525][T10618] device syzkaller0 entered promiscuous mode [ 420.200535][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 420.209547][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 420.218813][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 420.228034][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 420.280651][T10643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.996182][T10655] device syzkaller0 entered promiscuous mode [ 422.077293][T10657] device syzkaller0 entered promiscuous mode [ 422.873465][T10665] SET target dimension over the limit! [ 423.959369][T10676] loop0: detected capacity change from 0 to 512 [ 424.146122][T10676] EXT4-fs (loop0): can't read group descriptor 0 [ 427.619476][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 427.690995][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 427.700253][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 427.745123][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 427.780134][T10699] device syzkaller0 entered promiscuous mode [ 430.310448][T10723] SET target dimension over the limit! [ 431.673151][T10735] loop0: detected capacity change from 0 to 512 [ 432.461098][T10735] EXT4-fs (loop0): can't read group descriptor 0 [ 432.476308][T10738] device syzkaller0 entered promiscuous mode [ 435.538645][T10772] SET target dimension over the limit! [ 437.901693][T10786] loop2: detected capacity change from 0 to 512 [ 437.976459][T10786] EXT4-fs (loop2): can't read group descriptor 0 [ 438.454401][T10788] device syzkaller0 entered promiscuous mode [ 439.827475][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.833878][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.395128][T10812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.657633][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 440.672836][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 440.687367][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 440.701878][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 442.395219][T10826] loop4: detected capacity change from 0 to 512 [ 443.933301][T10826] EXT4-fs (loop4): can't read group descriptor 0 [ 446.054015][T10871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.460716][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 446.469644][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 446.479042][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 446.487974][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 448.789333][T10891] loop4: detected capacity change from 0 to 512 [ 450.256737][T10891] EXT4-fs (loop4): can't read group descriptor 0 [ 452.258448][T10915] loop0: detected capacity change from 0 to 512 [ 452.325330][T10915] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 452.380869][T10915] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.727183][T10915] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 452.927835][T10915] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 456.856285][T10968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.880425][T11024] overlayfs: failed to clone upperpath [ 463.177067][T11040] SET target dimension over the limit! [ 463.647118][T11067] loop4: detected capacity change from 0 to 128 [ 463.699831][T11067] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.781043][T11074] binder: 11073:11074 ioctl c0306201 9999999999999999 returned -14 [ 464.123544][T11084] SET target dimension over the limit! [ 466.368423][T11112] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2173'. [ 466.549725][T11112] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2173'. [ 466.573812][T11120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2173'. [ 467.392752][T11126] SET target dimension over the limit! [ 468.036606][T11130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.134089][T11130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.533277][T11137] loop0: detected capacity change from 0 to 4096 [ 468.801096][T11137] EXT4-fs (loop0): Test dummy encryption mode enabled [ 468.889544][T11137] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 469.174282][T11137] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 469.219015][T11137] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 470.635163][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 470.644089][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 470.653335][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 470.662233][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 471.273450][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 471.398048][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 475.115718][T11229] SET target dimension over the limit! [ 475.878477][T11239] overlayfs: failed to clone upperpath [ 476.028108][T11248] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 476.037991][T11248] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 476.468184][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 476.477120][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 476.486411][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 476.495297][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 478.220751][T11269] SET target dimension over the limit! [ 478.927675][ T1108] Process accounting resumed [ 479.016262][T11278] Process accounting resumed [ 479.028280][T11283] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 479.069967][T11283] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 479.380560][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 479.389629][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 479.399130][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 479.408073][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 480.331864][T11314] loop0: detected capacity change from 0 to 512 [ 480.389339][T11314] EXT4-fs (loop0): Ignoring removed nobh option [ 480.429241][T11314] EXT4-fs (loop0): journaled quota format not specified [ 481.708542][T11325] SET target dimension over the limit! [ 482.753835][T11345] loop0: detected capacity change from 0 to 2048 [ 482.784544][T11345] EXT4-fs warning (device loop0): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 482.825087][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop0 [ 482.945335][T11345] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 485.654538][T11379] loop4: detected capacity change from 0 to 512 [ 485.702138][T11379] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 485.749621][T11379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 486.318305][ T4177] Process accounting resumed [ 486.323962][T11379] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.2262: bad orphan inode 131083 [ 486.538575][T11391] Process accounting resumed [ 486.559541][T11379] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 486.696609][T11379] overlayfs: upper fs needs to support d_type. [ 486.831970][ T4197] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /425/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 487.974426][T11408] overlayfs: failed to clone upperpath [ 488.113802][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2271'. [ 488.122951][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2271'. [ 488.583469][T11415] device syzkaller0 entered promiscuous mode [ 488.862872][T11424] loop2: detected capacity change from 0 to 256 [ 489.017612][T11424] FAT-fs (loop2): Directory bread(block 64) failed [ 489.030696][T11424] FAT-fs (loop2): Directory bread(block 65) failed [ 489.060765][T11424] FAT-fs (loop2): Directory bread(block 66) failed [ 489.068630][T11424] FAT-fs (loop2): Directory bread(block 67) failed [ 489.095871][T11424] FAT-fs (loop2): Directory bread(block 68) failed [ 489.130688][T11424] FAT-fs (loop2): Directory bread(block 69) failed [ 489.150735][T11424] FAT-fs (loop2): Directory bread(block 70) failed [ 489.157313][T11424] FAT-fs (loop2): Directory bread(block 71) failed [ 489.194453][T11424] FAT-fs (loop2): Directory bread(block 72) failed [ 489.214614][T11424] FAT-fs (loop2): Directory bread(block 73) failed [ 490.671688][T11444] lo speed is unknown, defaulting to 1000 [ 490.711992][T11444] lo speed is unknown, defaulting to 1000 [ 490.720334][T11444] lo speed is unknown, defaulting to 1000 [ 490.773528][T11437] chnl_net:caif_netlink_parms(): no params data found [ 490.816582][T11444] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 490.862335][T11444] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 491.043124][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.142585][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.178545][T11437] device bridge_slave_0 entered promiscuous mode [ 491.220768][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.228383][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.236633][T11437] device bridge_slave_1 entered promiscuous mode [ 491.245659][T11444] lo speed is unknown, defaulting to 1000 [ 491.258715][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.270929][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.554006][T11444] lo speed is unknown, defaulting to 1000 [ 492.029947][T11444] lo speed is unknown, defaulting to 1000 [ 492.046147][T11437] team0: Port device team_slave_0 added [ 492.089506][T11437] team0: Port device team_slave_1 added [ 492.131709][T11444] lo speed is unknown, defaulting to 1000 [ 492.138440][T11444] lo speed is unknown, defaulting to 1000 [ 492.187743][T11444] lo speed is unknown, defaulting to 1000 [ 492.225203][T11437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.290695][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.447795][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 492.455074][T11437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.467301][T11437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.474340][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.524094][T11437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.763820][T11437] device hsr_slave_0 entered promiscuous mode [ 492.997691][T11437] device hsr_slave_1 entered promiscuous mode [ 493.792074][T11437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.799997][T11437] Cannot create hsr debugfs directory [ 494.088058][ T9488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.128513][ T9488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.300252][ T9488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.360729][ T9488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.924608][ T9488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.009981][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 495.016579][ T9488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.169795][ T9488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.197609][ T9488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.506181][ T9488] tipc: Left network mode [ 495.552379][T11437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.602791][T11437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.667491][T11437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 495.695922][T11437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 495.886994][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.033981][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.091286][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.099279][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.257927][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.306929][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.345024][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.352172][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.380733][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.406835][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.421152][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.428276][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.531076][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.560720][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.893838][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.297857][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.356969][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.437594][T11437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.509041][T11437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.442262][ T3159] Bluetooth: hci4: command 0x040f tx timeout [ 498.471133][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.498594][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.521530][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.531504][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.542149][T11521] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 498.565966][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.579268][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.590295][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.599374][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.650144][T11521] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 498.681376][T11521] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 499.405116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.456253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.698771][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.057959][ T9488] device hsr_slave_0 left promiscuous mode [ 500.121506][ T9488] device hsr_slave_1 left promiscuous mode [ 500.137936][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.171693][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.199564][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.273478][ T9488] device bridge_slave_1 left promiscuous mode [ 500.301904][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.342842][ T9488] device bridge_slave_0 left promiscuous mode [ 500.354647][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.392316][ T9488] device veth1_macvtap left promiscuous mode [ 500.408373][ T9488] device veth0_macvtap left promiscuous mode [ 500.428287][ T9488] device veth1_vlan left promiscuous mode [ 500.447393][ T9488] device veth0_vlan left promiscuous mode [ 500.470817][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 500.866277][ T9488] team0 (unregistering): Port device bridge1 removed [ 501.275481][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.281866][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.306923][ T9488] team0 (unregistering): Port device team_slave_1 removed [ 501.335634][ T9488] team0 (unregistering): Port device team_slave_0 removed [ 502.521903][ T9488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.536780][ T9488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.725303][ T9488] bond0 (unregistering): Released all slaves [ 503.686939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.705909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.769228][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.781825][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.800411][T11437] device veth0_vlan entered promiscuous mode [ 503.816665][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.826929][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.849336][T11437] device veth1_vlan entered promiscuous mode [ 503.955670][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.972023][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.980336][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.015592][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.068780][T11437] device veth0_macvtap entered promiscuous mode [ 504.106210][T11437] device veth1_macvtap entered promiscuous mode [ 504.937389][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.948314][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.958264][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.968734][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.979873][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.989554][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.027692][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.081927][T11629] siw: device registration error -23 [ 505.094421][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.165957][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.236778][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.309062][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.320146][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.376517][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.408795][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.447883][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.990244][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.191782][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.433940][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.490756][T11645] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 507.442940][T11437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.724516][T11437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.756288][T11437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.128142][T11437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.569470][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.588741][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.629316][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.629435][ T5117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 508.673849][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.720171][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 508.889532][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2344'. [ 511.172508][T11715] loop5: detected capacity change from 0 to 512 [ 511.474333][T11715] EXT4-fs (loop5): can't read group descriptor 0 [ 512.689375][T11747] syz.1.2366 sent an empty control message without MSG_MORE. [ 512.705524][T11743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.066475][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 513.075593][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 513.084809][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 513.093694][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 516.202334][T11801] loop5: detected capacity change from 0 to 512 [ 516.254478][T11801] EXT4-fs (loop5): can't read group descriptor 0 [ 517.930179][ C1] ------------[ cut here ]------------ [ 517.935713][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 517.939876][T11857] loop5: detected capacity change from 0 to 1024 [ 517.946293][ C1] WARNING: CPU: 1 PID: 11862 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 517.962368][ C1] Modules linked in: [ 517.966277][ C1] CPU: 1 PID: 11862 Comm: syz.0.2401 Not tainted syzkaller #0 [ 517.973783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.983894][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 517.990154][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 90 f3 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 518.009822][ C1] RSP: 0000:ffffc90000dd0788 EFLAGS: 00010246 [ 518.015941][ C1] RAX: 8c192da12f503700 RBX: 000000000000000c RCX: ffff888051610000 [ 518.023959][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 518.031981][ C1] RBP: 0000000000000084 R08: ffffffff901d50f7 R09: 1ffffffff203aa1e [ 518.039967][ C1] R10: dffffc0000000000 R11: fffffbfff203aa1f R12: ffff888068a94528 [ 518.048095][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 518.056205][ C1] FS: 000055556d591500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 518.065377][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.072001][ C1] CR2: 00007f35508eed70 CR3: 0000000024341000 CR4: 00000000003506e0 [ 518.080111][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 518.088154][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 518.096281][ C1] Call Trace: [ 518.099570][ C1] [ 518.102458][ C1] rate_control_send_low+0x194/0x790 [ 518.107761][ C1] rate_control_get_rate+0x207/0x5c0 [ 518.113095][ C1] __ieee80211_beacon_get+0x155e/0x2000 [ 518.118695][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 518.124747][ C1] ? verify_lock_unused+0x140/0x140 [ 518.129975][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 518.135754][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 518.141256][ C1] __iterate_interfaces+0x243/0x500 [ 518.146468][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 518.152758][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 518.159006][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 518.166071][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 518.171299][ C1] ? hw_scan_work+0xed0/0xed0 [ 518.175982][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 518.181250][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 518.186380][ C1] hrtimer_run_softirq+0x176/0x240 [ 518.191532][ C1] handle_softirqs+0x339/0x830 [ 518.196303][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 518.201200][ C1] ? do_softirq+0x210/0x210 [ 518.205729][ C1] __irq_exit_rcu+0x13b/0x230 [ 518.210415][ C1] ? irq_exit_rcu+0x20/0x20 [ 518.214967][ C1] irq_exit_rcu+0x5/0x20 [ 518.219218][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 518.224888][ C1] [ 518.227820][ C1] [ 518.230780][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 518.237030][ C1] RIP: 0010:handle_mm_fault+0x2c3a/0x4410 [ 518.242794][ C1] Code: 89 c4 31 ff 89 c6 e8 05 ad ca ff 45 85 e4 0f 84 4f 05 00 00 e8 97 a9 ca ff bb 01 00 00 00 e9 cd fd ff ff 48 c7 c0 a0 ed 89 8d <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 0c 48 c7 [ 518.262463][ C1] RSP: 0000:ffffc9000363fcc0 EFLAGS: 00000202 [ 518.268542][ C1] RAX: ffffffff8d89eda0 RBX: 8000000000000025 RCX: ffff888051610000 [ 518.276571][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 518.284587][ C1] RBP: ffffc9000363fe70 R08: ffffc9000363fde7 R09: ffffc9000363fda4 [ 518.292610][ C1] R10: dffffc0000000000 R11: fffff520006c7fbd R12: ffff88807a846210 [ 518.300626][ C1] R13: 0000000000000001 R14: 0000000025ed5067 R15: ffff88807e714420 [ 518.308732][ C1] ? get_page+0xe0/0xe0 [ 518.312956][ C1] ? vmacache_find+0x238/0x590 [ 518.317732][ C1] ? find_vma+0xd2/0x230 [ 518.322037][ C1] do_user_addr_fault+0x489/0xc80 [ 518.327083][ C1] exc_page_fault+0x60/0x100 [ 518.331730][ C1] asm_exc_page_fault+0x22/0x30 [ 518.336589][ C1] RIP: 0033:0x7f35505337bf [ 518.341062][ C1] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 518.360727][ C1] RSP: 002b:00007fffc1cd2868 EFLAGS: 00010202 [ 518.366809][ C1] RAX: 00000000819d73ae RBX: ffffffff819d73ae RCX: 0000000000000000 [ 518.374836][ C1] RDX: 00000000000013ae RSI: ffffffff819d73ae RDI: 0000000000000000 [ 518.382842][ C1] RBP: 0000000000000000 R08: 00007f35508e3000 R09: 00007f35508e5000 [ 518.390865][ C1] R10: 00000000819d73b2 R11: 0000000000000000 R12: 00007f35508f9038 [ 518.398842][ C1] R13: 0000000000000023 R14: ffffffff819d7d72 R15: 00007f3551428720 [ 518.406869][ C1] ? trace_user_enter+0x12/0x190 [ 518.411845][ C1] ? __jump_label_update+0x8e/0x390 [ 518.417056][ C1] ? __jump_label_update+0x8e/0x390 [ 518.422310][ C1] [ 518.425349][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.432972][ C1] CPU: 1 PID: 11862 Comm: syz.0.2401 Not tainted syzkaller #0 [ 518.440433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.450492][ C1] Call Trace: [ 518.453774][ C1] [ 518.456619][ C1] dump_stack_lvl+0x188/0x250 [ 518.461319][ C1] ? show_regs_print_info+0x20/0x20 [ 518.466525][ C1] ? load_image+0x400/0x400 [ 518.471046][ C1] panic+0x2e5/0x810 [ 518.474958][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 518.479478][ C1] ? __rate_control_send_low+0x630/0x880 [ 518.485120][ C1] __warn+0x248/0x2b0 [ 518.489114][ C1] ? __rate_control_send_low+0x630/0x880 [ 518.494756][ C1] report_bug+0x1b7/0x2e0 [ 518.499102][ C1] handle_bug+0x3a/0x70 [ 518.503263][ C1] exc_invalid_op+0x16/0x40 [ 518.507771][ C1] asm_exc_invalid_op+0x16/0x20 [ 518.512636][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 518.518888][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 90 f3 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 518.538584][ C1] RSP: 0000:ffffc90000dd0788 EFLAGS: 00010246 [ 518.544669][ C1] RAX: 8c192da12f503700 RBX: 000000000000000c RCX: ffff888051610000 [ 518.552642][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 518.560613][ C1] RBP: 0000000000000084 R08: ffffffff901d50f7 R09: 1ffffffff203aa1e [ 518.568590][ C1] R10: dffffc0000000000 R11: fffffbfff203aa1f R12: ffff888068a94528 [ 518.576566][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 518.584554][ C1] ? __rate_control_send_low+0x630/0x880 [ 518.590210][ C1] rate_control_send_low+0x194/0x790 [ 518.595510][ C1] rate_control_get_rate+0x207/0x5c0 [ 518.600814][ C1] __ieee80211_beacon_get+0x155e/0x2000 [ 518.606382][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 518.612385][ C1] ? verify_lock_unused+0x140/0x140 [ 518.617619][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 518.623093][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 518.628563][ C1] __iterate_interfaces+0x243/0x500 [ 518.633777][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 518.640026][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 518.646273][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 518.653308][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 518.658732][ C1] ? hw_scan_work+0xed0/0xed0 [ 518.663421][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 518.668652][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 518.673785][ C1] hrtimer_run_softirq+0x176/0x240 [ 518.678911][ C1] handle_softirqs+0x339/0x830 [ 518.683696][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 518.688558][ C1] ? do_softirq+0x210/0x210 [ 518.693077][ C1] __irq_exit_rcu+0x13b/0x230 [ 518.697762][ C1] ? irq_exit_rcu+0x20/0x20 [ 518.702287][ C1] irq_exit_rcu+0x5/0x20 [ 518.706538][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 518.712183][ C1] [ 518.715118][ C1] [ 518.718060][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 518.724049][ C1] RIP: 0010:handle_mm_fault+0x2c3a/0x4410 [ 518.729781][ C1] Code: 89 c4 31 ff 89 c6 e8 05 ad ca ff 45 85 e4 0f 84 4f 05 00 00 e8 97 a9 ca ff bb 01 00 00 00 e9 cd fd ff ff 48 c7 c0 a0 ed 89 8d <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 0c 48 c7 [ 518.749793][ C1] RSP: 0000:ffffc9000363fcc0 EFLAGS: 00000202 [ 518.755872][ C1] RAX: ffffffff8d89eda0 RBX: 8000000000000025 RCX: ffff888051610000 [ 518.763854][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 518.771832][ C1] RBP: ffffc9000363fe70 R08: ffffc9000363fde7 R09: ffffc9000363fda4 [ 518.779811][ C1] R10: dffffc0000000000 R11: fffff520006c7fbd R12: ffff88807a846210 [ 518.787788][ C1] R13: 0000000000000001 R14: 0000000025ed5067 R15: ffff88807e714420 [ 518.795791][ C1] ? get_page+0xe0/0xe0 [ 518.799962][ C1] ? vmacache_find+0x238/0x590 [ 518.804736][ C1] ? find_vma+0xd2/0x230 [ 518.808992][ C1] do_user_addr_fault+0x489/0xc80 [ 518.814036][ C1] exc_page_fault+0x60/0x100 [ 518.818635][ C1] asm_exc_page_fault+0x22/0x30 [ 518.823493][ C1] RIP: 0033:0x7f35505337bf [ 518.827918][ C1] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 518.847529][ C1] RSP: 002b:00007fffc1cd2868 EFLAGS: 00010202 [ 518.853605][ C1] RAX: 00000000819d73ae RBX: ffffffff819d73ae RCX: 0000000000000000 [ 518.861588][ C1] RDX: 00000000000013ae RSI: ffffffff819d73ae RDI: 0000000000000000 [ 518.869560][ C1] RBP: 0000000000000000 R08: 00007f35508e3000 R09: 00007f35508e5000 [ 518.877533][ C1] R10: 00000000819d73b2 R11: 0000000000000000 R12: 00007f35508f9038 [ 518.885506][ C1] R13: 0000000000000023 R14: ffffffff819d7d72 R15: 00007f3551428720 [ 518.893482][ C1] ? trace_user_enter+0x12/0x190 [ 518.898428][ C1] ? __jump_label_update+0x8e/0x390 [ 518.903635][ C1] ? __jump_label_update+0x8e/0x390 [ 518.908836][ C1] [ 518.912142][ C1] Kernel Offset: disabled [ 518.916678][ C1] Rebooting in 86400 seconds..