last executing test programs: 14m9.942526663s ago: executing program 2 (id=21): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r0, 0x21eae}}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r0, 0x700, 0x40, 0x7, 0x3, {{0xf, 0x4, 0x1, 0x2f, 0x3c, 0x66, 0x0, 0x1, 0x4, 0x0, @broadcast, @local, {[@lsrr={0x83, 0xb, 0x79, [@multicast2, @broadcast]}, @timestamp={0x44, 0x1c, 0x91, 0x0, 0xf, [0x5, 0x2, 0x80, 0x2, 0x8, 0x9]}]}}}}}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 14m9.810026427s ago: executing program 2 (id=26): syz_read_part_table(0x5dd, &(0x7f0000000600)="$eJzs0r9LnHcYAPDn3sa8LVQMIdAhGQqGLL0YuAzNkBvScLm6RAlpCSVzIEMzBBwcDsvp0EntP6BYWxAXceriKJ4gFs5JbmtxLihCOTq85e7e/lKXUn9Q+XzgeLnned73+X55nuB/LYlfsiwrRER262/h4XdPqL1yLPLZcuXJTzH66NnziEK8jIjKrfe7mUJekaW932r+fyTNG6Sl5sLW44Pla9uDO43bi0kMzXTia0nEVxHx5c/fDeSvFE7xulwyK+WNgcmpt9Xp8fLr3V9re/df3a3cnKm8eSfPv0h6z85e9RapPyJO2u7/0D/vEdVaFs0HnTb7c/1DfY1mu7SZp4pHtngx0tM7BBdm5b34a/+qtb35G/VWvf30ztLYveL11vrEbD73wyPzv3ohpwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6zlfLGwOTU2+r0ePn1brW2d//V3crNmcqbbz7+9uHE5x88fJH06taS8+l/u/ng+x+zkf25/qG+RrNd2szrioVjr37yw29Zdjan4rx8FPn8I7rzn79Rb9XbT+8sjd0rXm+tT8zmcz/85/yPbwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQK7yZPjD0UfPnkcU4mXE1U93vhjsxLO0m07+qFvNnyNppzJiOC01F7YeHyxf2x7cafTFaBqR/vnVr7Ou5OSeV872SvwLvwcAAP//nKiG0A==") 14m9.704821721s ago: executing program 2 (id=29): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) io_setup(0xff, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) removexattr(0x0, &(0x7f0000000080)=@known='user.incfs.metadata\x00') 14m9.581641454s ago: executing program 2 (id=31): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 14m9.473002238s ago: executing program 2 (id=33): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) 14m6.637629648s ago: executing program 2 (id=76): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000066c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x20000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000000b9"], 0x10}}], 0x1, 0x0) 14m6.632457328s ago: executing program 32 (id=76): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000066c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x20000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000000b9"], 0x10}}], 0x1, 0x0) 1m7.550250391s ago: executing program 4 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m7.470144074s ago: executing program 4 (id=3079): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000001c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f383835392d1e2c6e616d65636173653d312c6b6565705f6c6173745f646f74732c6769643d", @ANYRESHEX=0xee01, @ANYBLOB=',dmask=00000000000000000000001,errors=remount-ro,iocharset=cp1255,\x00'], 0x1, 0x1532, &(0x7f0000000940)="$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") syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0) 1m7.372970837s ago: executing program 4 (id=3082): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000019e000/0xc00000)=nil, 0xc00000) io_setup(0x5, &(0x7f0000000240)) 1m6.585631722s ago: executing program 4 (id=3088): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0), 0xfffffffffffffe92, 0x0, 0x0, 0x0) 1m6.468121206s ago: executing program 4 (id=3094): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004"], 0xfdef) 1m6.289703002s ago: executing program 4 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 50.927556683s ago: executing program 0 (id=3313): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x238}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 50.837979366s ago: executing program 0 (id=3315): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 50.793663927s ago: executing program 0 (id=3325): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000440)={[{@numtail}, {@fat=@check_strict}, {@utf8}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@gid}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x42}}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x23, 0x34c, &(0x7f0000001740)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 50.3973859s ago: executing program 0 (id=3327): unshare(0x6a040000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, 0x0, 0x0, 0x880, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 50.221707076s ago: executing program 0 (id=3321): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, 0x0) 50.06021581s ago: executing program 33 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 49.851564717s ago: executing program 0 (id=3330): sched_setattr(0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 49.790937829s ago: executing program 34 (id=3330): sched_setattr(0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 17.499284311s ago: executing program 6 (id=3572): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="03bd3b370c8f663a") syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \rH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) 16.91651072s ago: executing program 6 (id=3587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 16.839523462s ago: executing program 6 (id=3589): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 16.800716913s ago: executing program 6 (id=3590): r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="20126cac000897023f3b210908f51dcbf90aae") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 16.713526086s ago: executing program 6 (id=3593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 16.361660647s ago: executing program 6 (id=3599): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000102efffffff00000000000002000001300002802c0001801400034ce600ff01000000000000000000000009000000000400fe80000000000000000000000000003972ee6b57473ee14a7db068dcdb11d400642852891114f2c2d5f5a8dc6042e0cd736aa8582c1f614d9653b9598f5eb4da7c45efcb574e066ca7a6bfa511853b3258ea250ff7391d34c803baa14a545fe74b2a03dbb559666381fcff07ccb714d8aa90851c939d7f107e43f86eda6e29ae827704547ec7ca7cdb2b13ca58dfb9a13071f5a2882ce0d6b94ee001a41ff1c61ca9a07322cb8a5ddcd1"], 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040800) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000000)={0x1, 0x1, 0x2}) 16.324912788s ago: executing program 35 (id=3599): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000102efffffff00000000000002000001300002802c0001801400034ce600ff01000000000000000000000009000000000400fe80000000000000000000000000003972ee6b57473ee14a7db068dcdb11d400642852891114f2c2d5f5a8dc6042e0cd736aa8582c1f614d9653b9598f5eb4da7c45efcb574e066ca7a6bfa511853b3258ea250ff7391d34c803baa14a545fe74b2a03dbb559666381fcff07ccb714d8aa90851c939d7f107e43f86eda6e29ae827704547ec7ca7cdb2b13ca58dfb9a13071f5a2882ce0d6b94ee001a41ff1c61ca9a07322cb8a5ddcd1"], 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040800) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000000)={0x1, 0x1, 0x2}) 3.790563789s ago: executing program 8 (id=3711): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 2.791388191s ago: executing program 8 (id=3727): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 2.262140068s ago: executing program 7 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040054) 2.121519882s ago: executing program 7 (id=3744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8050, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), 0x0) syz_pidfd_open(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 1.966153517s ago: executing program 7 (id=3747): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 1.817610212s ago: executing program 8 (id=3748): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec02010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x51) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1.241555621s ago: executing program 1 (id=3749): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.24122693s ago: executing program 8 (id=3751): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xe1d, @remote, 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f00000002c0)=0x4) 1.090929565s ago: executing program 1 (id=3756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 1.029907557s ago: executing program 1 (id=3758): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 973.662989ms ago: executing program 7 (id=3760): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 945.21146ms ago: executing program 7 (id=3761): openat$tun(0xffffffffffffff9c, 0x0, 0x600, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @remote}) 909.892191ms ago: executing program 7 (id=3762): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) 535.939563ms ago: executing program 3 (id=3770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 514.365173ms ago: executing program 3 (id=3771): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_vlan\x00'}}, 0x1e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x11, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) close(0x3) 449.645846ms ago: executing program 3 (id=3772): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 377.254718ms ago: executing program 3 (id=3774): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 293.690991ms ago: executing program 3 (id=3775): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x8000, 0x1}}}}, 0x11) 293.581851ms ago: executing program 8 (id=3776): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) 276.661731ms ago: executing program 3 (id=3777): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xd, 0x7, 0x2, 0x405, 0x3, 0x3e, 0xfffffff9, 0x3da, 0x40, 0x8b, 0xd2c, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4}, [{0x7, 0x8000, 0x9, 0x0, 0x5, 0x9, 0x5, 0x1000000080000000}]}, 0x78) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) 271.041631ms ago: executing program 8 (id=3778): setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x29b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0xd49}, 0x10000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}) 162.479935ms ago: executing program 5 (id=3782): r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)=@phonet={0x23, 0x40, 0x6, 0x7}, 0x80, 0x0}}], 0x1, 0x24040001) 109.239286ms ago: executing program 1 (id=3783): r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x0, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 52.532499ms ago: executing program 5 (id=3784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_to_bond\x00', 0x100}) 52.437808ms ago: executing program 1 (id=3785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 52.339188ms ago: executing program 5 (id=3786): r0 = socket(0x18, 0x4, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0x7}, 0x8) 52.273448ms ago: executing program 5 (id=3787): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002640)=ANY=[], 0x110) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 30.882109ms ago: executing program 5 (id=3788): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) 9.59629ms ago: executing program 5 (id=3789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4000, 0x0) 0s ago: executing program 1 (id=3790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): ond_slave_0): Enslaving as an active interface with an up link [ 788.276471][T15140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.310089][T15140] team0: Port device team_slave_0 added [ 788.319656][T15140] team0: Port device team_slave_1 added [ 788.338952][T15140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.341299][T15208] loop5: detected capacity change from 0 to 4096 [ 788.342446][T15140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.375421][T15208] ntfs3: Unknown parameter 'nocase' [ 788.387714][T15140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.393900][T15140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.395060][T15140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.400367][T15140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.670559][T15140] device hsr_slave_0 entered promiscuous mode [ 788.702012][T15140] device hsr_slave_1 entered promiscuous mode [ 788.744868][T15140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.747128][T15140] Cannot create hsr debugfs directory [ 788.894737][T15140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.985390][T15140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.094149][T15140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.200965][T15140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.208782][T15220] net_ratelimit: 10 callbacks suppressed [ 789.208799][T15220] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 789.305566][T15227] loop0: detected capacity change from 0 to 256 [ 789.313540][T15227] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x96172c56, utbl_chksum : 0xe619d30d) [ 789.424214][T15231] loop3: detected capacity change from 0 to 256 [ 789.425653][T15231] exfat: Deprecated parameter 'namecase' [ 789.426577][T15231] exfat: Deprecated parameter 'namecase' [ 789.446903][T15231] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 789.583326][T15235] loop3: detected capacity change from 0 to 4096 [ 789.587890][T15235] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 789.649564][T15229] netlink: 'syz.5.2846': attribute type 39 has an invalid length. [ 789.665786][T13901] Bluetooth: hci1: command 0x0419 tx timeout [ 789.837991][ T9] tipc: Left network mode [ 789.847401][T15140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.895694][T15140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 790.149612][T15244] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2853'. [ 790.164430][ T9] bond1: (slave ip6gre1): Releasing backup interface [ 790.165550][ T9] device ip6gre1 left promiscuous mode [ 790.207846][ T9] bond1: Destroying bond [ 790.215791][T15246] loop0: detected capacity change from 0 to 16 [ 790.225308][T15246] erofs: (device loop0): mounted with root inode @ nid 36. [ 790.923928][ T9] bond1 (unregistering): Released all slaves [ 790.928313][T15140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 790.973441][T15140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 791.126167][T15254] loop3: detected capacity change from 0 to 1024 [ 791.128288][T15254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 791.149684][T15254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 791.157119][T15140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.163056][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 791.164662][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 791.167986][T15140] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.449771][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 791.451664][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 791.456989][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.458196][T11710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.513016][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 791.514776][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 791.516441][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 791.518549][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.519731][T11710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.523023][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 791.526245][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 791.529688][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 791.531842][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 791.533481][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 791.536531][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 791.538132][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 791.598014][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 791.599802][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 791.602611][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 791.604257][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 791.611253][T15140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 791.615444][ T4373] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 791.718702][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 791.720158][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 791.724433][T15140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.824793][ T4373] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.827095][ T4373] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.831277][ T4373] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 791.835997][ T4373] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 791.837493][ T4373] usb 1-1: Product: syz [ 791.838318][ T4373] usb 1-1: Manufacturer: syz [ 791.855216][ T4373] hub 1-1:4.0: USB hub found [ 791.862320][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 791.864082][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 791.916158][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 791.917985][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 791.919992][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 791.921637][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 791.924445][T15140] device veth0_vlan entered promiscuous mode [ 791.928448][T15140] device veth1_vlan entered promiscuous mode [ 791.937642][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 791.939635][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 791.941575][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 791.943710][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 791.946922][T15140] device veth0_macvtap entered promiscuous mode [ 791.949824][T15140] device veth1_macvtap entered promiscuous mode [ 791.982105][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 792.012675][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.014710][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.017252][T15140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.019700][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.021467][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.023745][T15140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.026281][T15140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.027991][T15140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.029552][T15140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.031050][T15140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.060513][T15278] loop1: detected capacity change from 0 to 256 [ 792.062011][T15278] exfat: Deprecated parameter 'namecase' [ 792.062996][T15278] exfat: Deprecated parameter 'namecase' [ 792.076484][ T4373] hub 1-1:4.0: 2 ports detected [ 792.097145][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 792.098787][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 792.100368][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 792.102005][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 792.105808][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 792.107492][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 792.111198][T15278] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 792.190945][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.192293][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.200066][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 792.230047][T15289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.231870][T15289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.262559][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.263837][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.266135][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 792.382476][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.384140][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.795601][T15308] loop4: detected capacity change from 0 to 512 [ 792.812848][T15308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 792.819951][T15308] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2869: inode has both inline data and extents flags [ 792.822588][T15308] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2869: couldn't read orphan inode 15 (err -117) [ 792.825034][T15308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 792.847983][T15140] EXT4-fs (loop4): unmounting filesystem. [ 793.038375][T15320] process 'syz.3.2873' launched '/dev/fd/-1' with NULL argv: empty string added [ 793.059075][T15322] loop4: detected capacity change from 0 to 256 [ 793.060518][T15322] exfat: Deprecated parameter 'namecase' [ 793.061475][T15322] exfat: Deprecated parameter 'namecase' [ 793.063487][ T9] device hsr_slave_0 left promiscuous mode [ 793.076470][T15322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 793.088733][ T9] device hsr_slave_1 left promiscuous mode [ 793.234952][T15336] loop4: detected capacity change from 0 to 512 [ 793.237023][T15336] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 793.241304][ T9] device veth1_macvtap left promiscuous mode [ 793.242293][ T9] device veth0_macvtap left promiscuous mode [ 793.243349][ T9] device veth1_vlan left promiscuous mode [ 793.244812][ T9] device veth0_vlan left promiscuous mode [ 793.256238][T15336] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 793.259377][T15336] Quota error (device loop4): write_blk: dquota write failed [ 793.260655][T15336] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 793.262814][T15336] Quota error (device loop4): write_blk: dquota write failed [ 793.264131][T15336] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 793.265774][T15336] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2880: Failed to acquire dquot type 1 [ 793.270883][T15336] EXT4-fs (loop4): 1 truncate cleaned up [ 793.271875][T15336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 793.304862][T15140] EXT4-fs (loop4): unmounting filesystem. [ 793.318137][ T4373] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 793.319365][ T4373] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 793.362353][ T4373] usb 1-1: USB disconnect, device number 2 [ 793.992269][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 794.035948][T15352] netlink: 'syz.0.2884': attribute type 1 has an invalid length. [ 794.086688][ T9] bond3 (unregistering): Released all slaves [ 794.234227][T15359] capability: warning: `syz.0.2887' uses deprecated v2 capabilities in a way that may be insecure [ 794.263525][T15361] loop0: detected capacity change from 0 to 256 [ 794.264908][T15361] exfat: Deprecated parameter 'namecase' [ 794.266005][T15361] exfat: Deprecated parameter 'namecase' [ 794.273236][T15361] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 794.790029][ T9] bond2 (unregistering): Released all slaves [ 795.298156][ T4331] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 795.298183][T13901] Bluetooth: hci4: command 0x1003 tx timeout [ 795.376064][T15373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.377832][T15373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.565058][T15376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.566519][T15376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.027954][ T9] bond0 (unregistering): Released all slaves [ 799.348783][T15366] device bridge0 entered promiscuous mode [ 799.350076][T15366] device macsec1 entered promiscuous mode [ 799.352319][T15366] device bridge0 left promiscuous mode [ 799.532553][T15378] batman_adv: batadv0: Interface deactivated: dummy0 [ 800.124347][T15378] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.125867][T15378] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.127231][T15378] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.128883][T15378] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.440298][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.441755][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.469009][T15426] loop3: detected capacity change from 0 to 2048 [ 801.471984][T15426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.504123][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2913'. [ 801.647967][ T4444] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 801.771171][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.772815][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.856646][T15442] loop3: detected capacity change from 0 to 8192 [ 801.865374][ T4444] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 801.866979][ T4444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.868303][ T4444] usb 1-1: Product: syz [ 801.869070][ T4444] usb 1-1: Manufacturer: syz [ 801.870168][ T4444] usb 1-1: SerialNumber: syz [ 801.888451][T15442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 801.890335][T15442] FAT-fs (loop3): Filesystem has been set read-only [ 801.896231][T15442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 802.027121][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.028874][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.312847][ T4444] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 802.400786][T15459] loop1: detected capacity change from 0 to 1024 [ 802.802648][ T4326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 802.805992][ T4326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 802.808652][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 802.810348][ T4326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 802.811909][ T4326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 802.813300][ T4326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.970589][ T4444] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 802.972576][ T4444] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 802.985616][ T4444] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 803.011338][T15471] chnl_net:caif_netlink_parms(): no params data found [ 803.025368][T15367] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 803.038063][ T4444] lan78xx: probe of 1-1:1.0 failed with error -71 [ 803.317785][ T4444] usb 1-1: USB disconnect, device number 3 [ 803.347864][T15495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.349422][T15495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.417776][T15471] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.419115][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.420634][T15471] device bridge_slave_0 entered promiscuous mode [ 803.423345][T15471] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.424499][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.426558][T15471] device bridge_slave_1 entered promiscuous mode [ 803.433553][T15471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.436166][T15471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.443473][T15471] team0: Port device team_slave_0 added [ 803.445993][T15471] team0: Port device team_slave_1 added [ 803.451693][T15471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.452862][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.457418][T15471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.459897][T15471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.461077][T15471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.466244][T15471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.510115][T15471] device hsr_slave_0 entered promiscuous mode [ 803.553878][T15471] device hsr_slave_1 entered promiscuous mode [ 803.595429][T15471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.596823][T15471] Cannot create hsr debugfs directory [ 803.803502][ T4495] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.106104][ T4495] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.287625][ T4495] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.427274][T15524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.428782][T15524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.430788][ T4495] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.698347][ T4495] tipc: Left network mode [ 804.765749][ T3897] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 804.981777][ T3897] usb 1-1: Using ep0 maxpacket: 8 [ 805.000461][ T3897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 805.000595][T15559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.001965][ T3897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 805.004279][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 805.008122][T15559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.014497][ T3897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.016106][ T3897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.018332][ T3897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.019853][ T3897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.091043][ T4495] bond1: (slave ip6gre1): Releasing backup interface [ 805.092120][ T4495] device ip6gre1 left promiscuous mode [ 805.126297][ T4495] bond1: Destroying bond [ 805.248366][ T3897] usb 1-1: GET_CAPABILITIES returned 0 [ 805.249323][ T3897] usbtmc 1-1:16.0: can't read capabilities [ 805.336841][T15575] overlayfs: failed to clone upperpath [ 805.475775][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.477510][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.479026][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.480645][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.482211][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.483814][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.485424][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.486993][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.488601][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.490159][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.491742][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.494402][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.495770][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.497230][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.498711][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.500109][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 805.508956][T15581] loop3: detected capacity change from 0 to 128 [ 805.520924][T10148] usb 1-1: USB disconnect, device number 4 [ 805.817099][ T4495] bond1 (unregistering): Released all slaves [ 806.060372][T15471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 806.106154][T15609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.107784][T15609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.120224][T15471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 806.187219][T15471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 806.229233][T15471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 806.394168][T15471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.460807][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 806.462288][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 806.465144][T15471] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.467840][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 806.469942][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 806.471662][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.472810][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.474372][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.505084][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 806.506586][T15630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.506801][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 806.510319][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.511422][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.519095][T15630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.552938][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 806.554615][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 806.556273][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 806.558966][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 806.560598][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 806.570404][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 806.572647][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 806.576199][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 806.577645][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.579247][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 806.581119][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 806.583849][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 806.692646][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.697930][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.750276][ T4326] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 806.785070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.787839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.791869][T15471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.310678][T15367] Bluetooth: hci4: command 0x041b tx timeout [ 807.399694][T15671] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4325] was attempted by " [ 807.695621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 807.726458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 807.800139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 807.802055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 807.804523][T15471] device veth0_vlan entered promiscuous mode [ 807.807365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 807.811402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 807.817930][T15471] device veth1_vlan entered promiscuous mode [ 807.976425][T15687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.979096][T15687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.112240][T10148] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 808.181286][T15471] device veth0_macvtap entered promiscuous mode [ 808.183644][T15471] device veth1_macvtap entered promiscuous mode [ 808.187848][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.201035][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.204888][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.207834][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.215567][T15471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.217223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 808.218846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 808.220388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 808.226743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 808.236472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 808.238246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 808.250342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 808.251376][T15694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.253762][T15694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.256620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 808.288434][ T4495] device hsr_slave_0 left promiscuous mode [ 808.309794][T10148] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 808.311192][T10148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.312435][T10148] usb 1-1: Product: syz [ 808.313143][T10148] usb 1-1: Manufacturer: syz [ 808.314064][T10148] usb 1-1: SerialNumber: syz [ 808.321343][T10148] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 808.326558][T10148] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 808.328012][T10148] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 808.333314][ T4495] device hsr_slave_1 left promiscuous mode [ 808.502315][ T4495] device veth1_macvtap left promiscuous mode [ 808.503509][ T4495] device veth0_macvtap left promiscuous mode [ 808.504574][ T4495] device veth1_vlan left promiscuous mode [ 808.505649][ T4495] device veth0_vlan left promiscuous mode [ 808.890188][ T9] Bluetooth: hci3: Frame reassembly failed (-84) [ 809.509583][T15367] Bluetooth: hci4: command 0x040f tx timeout [ 810.102886][T15715] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3014'. [ 810.104294][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 810.186582][T15721] can: request_module (can-proto-0) failed. [ 810.793858][T15728] tmpfs: Bad value for 'mpol' [ 810.930995][ T9362] usb 1-1: USB disconnect, device number 5 [ 811.069376][ T4331] Bluetooth: hci3: command 0x1003 tx timeout [ 811.069429][ T4326] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 811.099384][T15750] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3029'. [ 811.762592][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 812.244198][T15765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.245847][T15765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.807746][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 812.847651][ T4495] bond0 (unregistering): Released all slaves [ 813.153008][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.154693][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.156352][T15471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.158164][T15471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.161320][T15471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.164930][T15471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.166438][T15471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.167864][T15471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.169424][T15471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.175223][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 813.177035][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 813.178597][T15738] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 813.283308][T15777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3039'. [ 813.288005][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.289216][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.301622][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 813.320283][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.321685][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.326109][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 813.515404][ T4326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 813.521382][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 813.524395][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.527933][ T4326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.546169][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 813.547643][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.637732][T15795] chnl_net:caif_netlink_parms(): no params data found [ 813.680280][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.681817][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.732532][T15795] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.739502][T15795] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.741935][T15795] device bridge_slave_0 entered promiscuous mode [ 813.745791][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.747122][T15795] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.748863][T15795] device bridge_slave_1 entered promiscuous mode [ 813.769446][T15795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.778213][T15795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.800451][T15795] team0: Port device team_slave_0 added [ 813.804271][T15795] team0: Port device team_slave_1 added [ 813.822319][T15795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.827353][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.836329][T15795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.841303][T15795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.845234][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.849907][T15795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.887749][T15795] device hsr_slave_0 entered promiscuous mode [ 813.933346][T15795] device hsr_slave_1 entered promiscuous mode [ 813.942268][T15795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 813.943711][T15795] Cannot create hsr debugfs directory [ 814.072516][T15795] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.168829][T15795] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.258215][T15795] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.331061][T15826] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3054'. [ 814.369723][T15795] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.573654][ T4495] Bluetooth: hci6: Frame reassembly failed (-84) [ 815.488906][T15779] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 815.490193][T15367] Bluetooth: hci0: command 0x0c20 tx timeout [ 815.748787][T15367] Bluetooth: hci3: command 0x0409 tx timeout [ 816.788608][T15367] Bluetooth: hci6: command 0x1003 tx timeout [ 816.788627][ T4326] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 816.900269][T15809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.903516][T15795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 816.952208][T15795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 816.996444][T15795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 817.029207][T15853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3066'. [ 817.061933][T15795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 817.134046][T15862] tipc: Started in network mode [ 817.135462][T15862] tipc: Node identity 4, cluster identity 4711 [ 817.136470][T15862] tipc: Node number set to 4 [ 817.180026][T15795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.185506][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 817.187103][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 817.190924][T15795] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.196162][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 817.197876][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 817.199375][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.200627][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.204012][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 817.207071][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 817.208626][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.209733][ T4495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.219504][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 817.223778][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 817.240007][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 817.241910][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 817.244577][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 817.246303][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 817.249726][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 817.251648][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 817.259040][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 817.262308][T15795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.264401][T15795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 817.268581][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 817.270422][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 817.276123][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 817.290447][T15876] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 817.336522][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3077'. [ 817.382403][T15886] loop4: detected capacity change from 0 to 256 [ 817.400365][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 817.404438][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 817.408185][T15795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.409743][T15886] exfat: Deprecated parameter 'namecase' [ 817.425730][T15890] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3080'. [ 817.432542][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 817.434366][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 817.437162][T15886] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 817.447746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 817.449508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 817.451552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 817.452942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 817.458377][T15795] device veth0_vlan entered promiscuous mode [ 817.467144][T15795] device veth1_vlan entered promiscuous mode [ 817.489191][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 817.490959][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 817.493794][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 817.496351][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 817.506269][T15795] device veth0_macvtap entered promiscuous mode [ 817.523111][T15795] device veth1_macvtap entered promiscuous mode [ 817.535748][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.542035][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.543657][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.545520][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.554212][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.555961][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.562485][T15795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.563750][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 817.565520][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 817.567054][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.582259][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 817.585181][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.586807][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.588489][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.633678][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.635322][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.637318][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.639971][T15795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.642710][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.644463][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.661460][T15795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.677612][T15795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.684143][T15795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.689248][T15795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.833733][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.835406][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.837016][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 817.858386][ T6018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.859819][ T6018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.863554][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 817.968411][T15910] loop1: detected capacity change from 0 to 128 [ 817.988289][T15910] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 818.002258][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 818.316980][T15919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3090'. [ 818.480838][T15940] loop0: detected capacity change from 0 to 1024 [ 818.487475][T15940] EXT4-fs: Ignoring removed bh option [ 818.514168][T15940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 818.563165][T14829] EXT4-fs (loop0): unmounting filesystem. [ 819.587916][T15966] bridge0: port 1(vlan2) entered blocking state [ 819.589112][T15966] bridge0: port 1(vlan2) entered disabled state [ 820.021935][T15968] fuse: Bad value for 'fd' [ 820.168811][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.169988][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.254827][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 822.338818][T15960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.437053][ T27] audit: type=1326 audit(803.832:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.3.3115" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3177a28 code=0x0 [ 822.473082][T15999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3127'. [ 822.507840][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 823.914363][T16047] loop0: detected capacity change from 0 to 128 [ 823.935673][T16054] binder: 16053:16054 ioctl c00c6211 0 returned -14 [ 823.944974][T16047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 824.084240][T14829] EXT4-fs (loop0): unmounting filesystem. [ 824.214109][T16065] nvme_fabrics: missing parameter 'transport=%s' [ 824.215555][T16065] nvme_fabrics: missing parameter 'nqn=%s' [ 825.447637][T16113] loop1: detected capacity change from 0 to 512 [ 825.467802][T16113] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 825.470713][T16113] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000103) [ 825.474395][T16115] loop5: detected capacity change from 0 to 128 [ 825.607682][T16128] loop1: detected capacity change from 0 to 256 [ 825.619074][T16128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 825.688141][T16130] loop1: detected capacity change from 0 to 4096 [ 825.774412][T15795] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 825.776718][T15795] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 825.776940][T16138] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 826.297241][T16168] loop1: detected capacity change from 0 to 2048 [ 826.301979][T16168] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 826.307824][T16170] loop0: detected capacity change from 0 to 2048 [ 826.313181][T16170] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 826.317758][T16170] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 826.319789][T16170] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 826.322168][T16170] UDF-fs: Scanning with blocksize 512 failed [ 826.325549][T16170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.341065][T15189] udevd[15189]: incorrect nilfs2 checksum on /dev/loop1 [ 826.343431][T16171] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 826.358814][T16168] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 826.363180][T16168] Remounting filesystem read-only [ 826.897861][T15367] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 827.539843][T16240] netlink: 'syz.0.3216': attribute type 12 has an invalid length. [ 827.589916][T16240] loop0: detected capacity change from 0 to 164 [ 827.717346][T15367] Bluetooth: hci3: SCO packet for unknown connection handle 3840 [ 827.834103][ T4326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 827.841219][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 827.843213][ T4326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 827.845991][ T4326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 827.847424][ T4326] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 827.850367][ T4326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.936295][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 827.972050][T16253] chnl_net:caif_netlink_parms(): no params data found [ 828.029312][T16253] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.037330][T16253] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.041420][T16253] device bridge_slave_0 entered promiscuous mode [ 828.045628][T16253] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.048732][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.050595][T16253] device bridge_slave_1 entered promiscuous mode [ 828.072009][T16253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.074775][T16253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.094243][T16253] team0: Port device team_slave_0 added [ 828.098628][T16253] team0: Port device team_slave_1 added [ 828.104545][T16253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.105751][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.110772][T16253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.113336][T16253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.114603][T16253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.396201][T16253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.446456][T16253] device hsr_slave_0 entered promiscuous mode [ 828.487551][T16253] device hsr_slave_1 entered promiscuous mode [ 828.501513][T16253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.502936][T16253] Cannot create hsr debugfs directory [ 829.525323][T16253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 829.571830][T16253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 829.615345][T16253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 829.627917][T16253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 829.729978][T16253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.829261][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 829.831043][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.834072][T16253] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.848232][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 829.850062][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.851686][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.853774][T13642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.861057][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 829.867376][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.868995][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.870152][T13642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.871659][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 829.880056][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 829.881913][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.886698][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 829.888777][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 829.891398][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 829.893176][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 829.914339][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 830.047704][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 830.173900][T16253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 830.175755][T16253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.191174][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 830.194317][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 830.198765][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 830.201610][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 830.204537][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 830.228647][T16337] netlink: 'syz.5.3257': attribute type 1 has an invalid length. [ 830.239300][T16337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 830.306433][T16337] bond1: (slave ip6gretap1): making interface the new active one [ 830.310814][T16337] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 830.313345][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 830.316620][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 830.319061][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 830.323097][T16253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.338763][T16253] device veth0_vlan entered promiscuous mode [ 830.340944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.342745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.344428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.345910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.349195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.351616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.356592][T16253] device veth1_vlan entered promiscuous mode [ 830.386583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 830.388400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 830.390026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 830.391744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 830.398861][T16253] device veth0_macvtap entered promiscuous mode [ 830.413668][T16253] device veth1_macvtap entered promiscuous mode [ 830.419390][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.421119][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.422841][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.424542][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.426936][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.428595][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.430430][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.432217][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.436998][T16253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.439104][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.440791][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.442755][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.444441][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.446292][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.448773][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.450489][T16253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.452196][T16253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.454683][T16253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.455910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 830.457807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 830.464151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 830.466087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 830.469945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 830.481613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 830.484957][T16253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.486439][T16253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.488049][T16253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.489462][T16253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.519074][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.521183][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.532848][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 830.540749][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.542142][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.543517][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 831.005744][T16373] netlink: 'syz.3.3268': attribute type 1 has an invalid length. [ 831.069418][T16380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.071159][T16380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.798650][T16406] netlink: 'syz.5.3280': attribute type 10 has an invalid length. [ 831.804064][T16406] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 831.887084][T16406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.907872][T16406] device bond_slave_0 entered promiscuous mode [ 831.909176][T16406] device bond_slave_1 entered promiscuous mode [ 831.910327][T16406] device syz_tun entered promiscuous mode [ 831.926271][T16406] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 831.942770][T16406] bond2: (slave macvlan2): unknown ethtool speed (20010) for port 1 (set it to 0) [ 831.944277][T16406] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 831.973905][T16406] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 831.989669][T16422] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 832.001132][T16422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 832.030537][T16422] bond1: (slave ip6gretap1): making interface the new active one [ 832.032778][T16422] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 832.036533][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 832.086033][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 832.304529][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 832.338014][T16451] device syzkaller1 entered promiscuous mode [ 832.698620][T15367] Bluetooth: Wrong link type (-22) [ 832.759446][T16468] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 832.770991][T16468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 832.773148][T16471] netlink: 'syz.1.3295': attribute type 10 has an invalid length. [ 832.786945][T16471] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 832.805435][T16468] bond1: (slave ip6gretap1): making interface the new active one [ 832.808025][T16468] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 832.833592][T16471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.835918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 832.895450][T16460] device bond_slave_0 entered promiscuous mode [ 832.896556][T16460] device bond_slave_1 entered promiscuous mode [ 832.897548][T16460] device syz_tun entered promiscuous mode [ 832.901288][T16460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 832.902762][T16460] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 832.904471][T16460] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 832.951787][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 833.639455][T16503] loop1: detected capacity change from 0 to 1024 [ 833.662229][T16505] fuse: Bad value for 'fd' [ 833.695216][T16503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 833.914707][T16518] netlink: 'syz.0.3312': attribute type 1 has an invalid length. [ 833.919952][T16518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.067495][T16525] loop0: detected capacity change from 0 to 256 [ 834.092594][T16525] FAT-fs (loop0): Directory bread(block 64) failed [ 834.094599][T16525] FAT-fs (loop0): Directory bread(block 65) failed [ 834.096921][T16525] FAT-fs (loop0): Directory bread(block 66) failed [ 834.104783][T16525] FAT-fs (loop0): Directory bread(block 67) failed [ 834.106138][T16525] FAT-fs (loop0): Directory bread(block 68) failed [ 834.109654][T16525] FAT-fs (loop0): Directory bread(block 69) failed [ 834.110908][T16525] FAT-fs (loop0): Directory bread(block 70) failed [ 834.112058][T16525] FAT-fs (loop0): Directory bread(block 71) failed [ 834.113258][T16525] FAT-fs (loop0): Directory bread(block 72) failed [ 834.114371][T16525] FAT-fs (loop0): Directory bread(block 73) failed [ 834.476859][ T4511] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 834.483739][ T4511] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 834.485617][ T4511] EXT4-fs (loop1): This should not happen!! Data will be lost [ 834.485617][ T4511] [ 834.490266][ T4511] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 834.499316][ T4511] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 834.501422][ T4511] EXT4-fs (loop1): This should not happen!! Data will be lost [ 834.501422][ T4511] [ 834.563851][T15367] Bluetooth: hci0: command 0x040f tx timeout [ 834.660327][T16548] netlink: 'syz.3.3320': attribute type 10 has an invalid length. [ 834.677502][T16548] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 834.695182][T16548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.710294][T16548] device bond_slave_0 entered promiscuous mode [ 834.711348][T16548] device bond_slave_1 entered promiscuous mode [ 834.712315][T16548] device syz_tun entered promiscuous mode [ 834.713454][T16548] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 834.714960][T16548] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 834.717303][T16548] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 834.850814][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 834.852876][T16562] netlink: 'syz.5.3324': attribute type 1 has an invalid length. [ 834.868587][ T4326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.874624][ T4326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.876391][ T4326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.889672][ T4326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.899655][ T4326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 834.901585][ T4326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.901879][T16562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 835.121359][T15795] EXT4-fs (loop1): unmounting filesystem. [ 835.229017][T15367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 835.231835][T15367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 835.233492][T15367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 835.234959][T15367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 835.237130][T15367] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 835.238575][T15367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.312511][T16566] chnl_net:caif_netlink_parms(): no params data found [ 835.677448][T16566] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.679463][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.681250][T16566] device bridge_slave_0 entered promiscuous mode [ 835.683771][T16566] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.685030][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.687946][T16566] device bridge_slave_1 entered promiscuous mode [ 835.720909][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.754415][T16616] netlink: 'syz.5.3339': attribute type 1 has an invalid length. [ 835.762908][T16616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.770947][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.794179][T16566] team0: Port device team_slave_0 added [ 835.801018][T16566] team0: Port device team_slave_1 added [ 835.815879][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.817093][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.822624][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.203755][ T6216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.207936][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.209206][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.213933][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.246554][T16566] device hsr_slave_0 entered promiscuous mode [ 836.287010][T16566] device hsr_slave_1 entered promiscuous mode [ 836.329248][T16566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.330512][T16566] Cannot create hsr debugfs directory [ 836.373955][ T6216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.378504][T16586] chnl_net:caif_netlink_parms(): no params data found [ 836.404691][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.406071][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.408455][T16586] device bridge_slave_0 entered promiscuous mode [ 836.411575][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.412840][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.414986][T16586] device bridge_slave_1 entered promiscuous mode [ 836.460945][ T6216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.472429][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.476102][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.492683][T16586] team0: Port device team_slave_0 added [ 836.494947][T16586] team0: Port device team_slave_1 added [ 836.513161][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.514438][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.519914][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.522261][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.525380][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.529670][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.571280][ T6216] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.575099][T16566] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 836.634827][T16566] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 836.687946][T16566] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 836.757748][T16566] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 836.807148][T15367] Bluetooth: hci0: command 0x0419 tx timeout [ 836.861211][T16586] device hsr_slave_0 entered promiscuous mode [ 836.903615][T16586] device hsr_slave_1 entered promiscuous mode [ 836.946728][T16586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.948003][T16586] Cannot create hsr debugfs directory [ 837.029049][T16586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 837.056489][T16586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 837.114498][T16586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 837.152726][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 837.156338][T16586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 837.205347][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.234898][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 837.236427][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 837.246699][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.261414][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 837.263152][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.264640][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.265772][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.267140][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 837.268705][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.270126][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.271300][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.284638][T16586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.286053][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.287869][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 837.424337][T15367] Bluetooth: hci5: command 0x0409 tx timeout [ 837.521416][ T6216] bond1: (slave ip6gretap1): Releasing active interface [ 837.585236][T16586] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.595531][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 837.602665][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 837.606219][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 837.608334][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 837.609758][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 837.611224][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 837.612885][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 837.614321][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 837.615922][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.617436][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.618722][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.620881][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 837.622285][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.690194][T16586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 837.691987][T16586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.695128][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 837.696682][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 837.698144][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 837.699689][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.701103][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 837.702710][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.704166][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.705358][T13642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.710162][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 837.711986][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 837.713811][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 837.717014][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 837.718658][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 837.720432][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 837.721932][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 837.723464][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 837.725156][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 837.728002][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.731789][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 837.733296][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 837.736266][T16566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 837.871759][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.874468][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.877316][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.883275][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.884645][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.886130][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.012354][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 838.013967][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 838.044845][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 838.046585][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.048455][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.049959][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.057462][T16586] device veth0_vlan entered promiscuous mode [ 838.065788][T16586] device veth1_vlan entered promiscuous mode [ 838.114504][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 838.116096][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 838.118203][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 838.119902][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 838.128358][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 838.130050][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.131727][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.133081][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.138668][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.140411][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.145800][T16586] device veth0_macvtap entered promiscuous mode [ 838.148300][T16586] device veth1_macvtap entered promiscuous mode [ 838.156452][T16566] device veth0_vlan entered promiscuous mode [ 838.209797][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.211582][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.213186][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.215658][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.217165][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.218795][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.220287][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.222007][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.223773][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.226110][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.228685][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.230997][T16566] device veth1_vlan entered promiscuous mode [ 838.235847][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 838.238339][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.239900][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.242064][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.243772][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.249117][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.250735][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.252243][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.253815][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.255534][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.257229][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.259727][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.261394][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.263110][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.264901][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.267252][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.270603][T16586] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.271873][T16586] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.273299][T16586] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.274852][T16586] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.349817][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 838.351422][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 838.353080][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.364718][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.367227][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.370394][T16566] device veth0_macvtap entered promiscuous mode [ 838.392979][T16566] device veth1_macvtap entered promiscuous mode [ 838.465559][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.467376][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.469018][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.470858][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.472495][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.479679][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.481214][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.482965][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.484554][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.487742][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.489401][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.491197][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.493885][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.502320][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.503958][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.505471][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.507903][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.792753][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.794364][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.795884][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.797715][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.800039][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.800431][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.803063][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.804634][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.806301][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.808070][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.812593][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.814147][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.815746][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.817607][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.820147][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.833984][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 838.835559][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 838.837256][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.884460][T16566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.886174][T13642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.886190][T13642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.889621][T16566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.890948][T16566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.892522][T16566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.895269][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 839.274168][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.275459][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.280230][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 839.292489][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.293799][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.295174][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 839.391840][ T6216] device hsr_slave_0 left promiscuous mode [ 839.405690][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 839.416807][ T6216] device hsr_slave_1 left promiscuous mode [ 839.482357][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.483688][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.486841][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.488046][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.489593][ T6216] device bridge_slave_1 left promiscuous mode [ 839.494185][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.509925][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3341'. [ 839.538918][ T6216] device bridge_slave_0 left promiscuous mode [ 839.540123][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.645088][ T6216] device veth1_macvtap left promiscuous mode [ 839.646219][ T6216] device veth0_macvtap left promiscuous mode [ 839.647382][ T6216] device veth1_vlan left promiscuous mode [ 839.648469][ T6216] device veth0_vlan left promiscuous mode [ 839.666640][T15367] Bluetooth: hci5: command 0x041b tx timeout [ 840.275906][T16748] loop7: detected capacity change from 0 to 64 [ 840.415760][ T6216] bond2 (unregistering): Released all slaves [ 841.128923][ T6216] bond1 (unregistering): Released all slaves [ 841.669464][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 841.929390][ T4326] Bluetooth: hci5: command 0x040f tx timeout [ 843.372562][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 843.568244][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 843.738871][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.911575][T15367] Bluetooth: hci2: command 0x0419 tx timeout [ 843.987844][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.171649][T15367] Bluetooth: hci5: command 0x0419 tx timeout [ 845.667835][ T6216] bond0 (unregistering): Released all slaves [ 846.056771][T16713] netlink: 'syz.1.3349': attribute type 1 has an invalid length. [ 846.064985][T16732] netlink: 'syz.6.3340': attribute type 10 has an invalid length. [ 846.080804][T16732] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 846.232936][T16771] loop3: detected capacity change from 0 to 1024 [ 846.323417][T16771] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8015c01c, mo2=0002] [ 846.629106][T16771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 846.642257][T16787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.645170][T16787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.667460][T16253] EXT4-fs (loop3): unmounting filesystem. [ 846.734920][T16795] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 847.149650][T16828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.155313][T16828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.860574][T16872] netlink: 'syz.7.3365': attribute type 10 has an invalid length. [ 847.883987][T16872] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 848.243607][T16882] loop3: detected capacity change from 0 to 512 [ 848.253525][T16882] EXT4-fs: Ignoring removed oldalloc option [ 848.259448][T16882] EXT4-fs: Ignoring removed orlov option [ 848.259843][T16872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 848.283717][T16882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.3371: inode #15947535: comm syz.3.3371: iget: illegal inode # [ 848.292283][T16882] EXT4-fs (loop3): Remounting filesystem read-only [ 848.294382][T16882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3371: error while reading EA inode 15947535 err=-117 [ 848.307078][T16884] device bond_slave_0 entered promiscuous mode [ 848.308135][T16884] device bond_slave_1 entered promiscuous mode [ 848.309268][T16884] device syz_tun entered promiscuous mode [ 848.310454][T16884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 848.311858][T16884] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 848.313467][T16884] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 848.314058][T16882] EXT4-fs (loop3): Remounting filesystem read-only [ 848.318239][T16882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.3371: inode #261888: comm syz.3.3371: iget: illegal inode # [ 848.325481][T16882] EXT4-fs (loop3): Remounting filesystem read-only [ 848.326968][T16882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3371: error while reading EA inode 261888 err=-117 [ 848.330422][T16888] netlink: 'syz.6.3373': attribute type 1 has an invalid length. [ 848.343231][T16882] EXT4-fs (loop3): Remounting filesystem read-only [ 848.349245][T16882] EXT4-fs (loop3): 1 orphan inode deleted [ 848.352571][T16882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 848.369381][T16888] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 848.384552][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 848.402457][T16882] EXT4-fs (loop3): shut down requested (1) [ 848.450545][T16253] EXT4-fs (loop3): unmounting filesystem. [ 848.578852][T16909] loop7: detected capacity change from 0 to 128 [ 848.603195][T16909] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 848.606119][T16909] hpfs: filesystem error: improperly stopped [ 848.607056][T16909] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 848.608502][T16909] hpfs: You really don't want any checks? You are crazy... [ 848.611002][T16909] hpfs: hpfs_map_sector(): read error [ 848.611758][T16909] hpfs: code page support is disabled [ 848.619144][T16909] hpfs: hpfs_map_4sectors(): unaligned read [ 848.620372][T16909] hpfs: hpfs_map_4sectors(): unaligned read [ 848.621374][T16909] hpfs: filesystem error: unable to find root dir [ 848.749141][T16915] overlayfs: failed to clone upperpath [ 848.751639][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 848.888200][T16923] loop6: detected capacity change from 0 to 512 [ 848.894963][T16923] EXT4-fs: inline encryption not supported [ 848.920333][T16923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 848.921771][T16923] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 848.931857][T16923] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 1 [ 848.934249][T16923] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 848.935948][T16923] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.3384: Failed to acquire dquot type 1 [ 848.940919][T16925] netlink: 'syz.5.3385': attribute type 1 has an invalid length. [ 848.943522][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.946546][T16923] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 848.951178][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.952459][T16923] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.3384: corrupted inode contents [ 848.955052][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.955807][T16925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 848.956088][T16923] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.3384: mark_inode_dirty error [ 848.968978][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.970736][T16923] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.3384: corrupted inode contents [ 848.972951][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.974059][T16923] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.3384: mark_inode_dirty error [ 848.976118][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.977221][T16923] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.3384: corrupted inode contents [ 848.984450][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.985625][T16923] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 848.987390][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.988594][T16923] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.3384: corrupted inode contents [ 848.990810][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 848.995377][T16923] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.3384: mark_inode_dirty error [ 849.000802][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 849.001803][T16923] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 849.007002][T16923] EXT4-fs (loop6): Remounting filesystem read-only [ 849.008278][T16923] EXT4-fs (loop6): 1 truncate cleaned up [ 849.009372][T16923] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 849.082565][T16566] EXT4-fs (loop6): unmounting filesystem. [ 849.368167][T16959] netlink: 'syz.7.3396': attribute type 1 has an invalid length. [ 849.466541][T16963] loop1: detected capacity change from 0 to 2048 [ 849.495182][T16963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.526328][T16977] netlink: 'syz.6.3414': attribute type 1 has an invalid length. [ 849.610111][T16984] loop7: detected capacity change from 0 to 2048 [ 849.629264][T16984] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 849.635830][T16757] udevd[16757]: incorrect nilfs2 checksum on /dev/loop7 [ 849.670780][T16988] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 849.680080][T16984] NILFS error (device loop7): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 849.684278][T16984] Remounting filesystem read-only [ 849.965562][T17010] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 850.016275][T17010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 850.236387][T17027] loop3: detected capacity change from 0 to 256 [ 850.290794][T17036] netlink: 'syz.6.3427': attribute type 10 has an invalid length. [ 850.325258][T17036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.483636][T17052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 850.754944][T17079] loop7: detected capacity change from 0 to 136 [ 850.773340][T17079] Attempt to read inode for relocated directory [ 850.848877][T17090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 850.910953][T17100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.912543][T17100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.940638][T17104] bond1: option mode: unable to set because the bond device has slaves [ 850.951864][T17100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.981842][T17100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.241501][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3462'. [ 851.377139][T17153] bond1: option mode: unable to set because the bond device has slaves [ 851.417353][T17159] overlayfs: failed to clone upperpath [ 851.576106][T17178] validate_nla: 6 callbacks suppressed [ 851.576121][T17178] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 851.614032][T17178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 851.817991][T17213] netlink: 'syz.3.3485': attribute type 10 has an invalid length. [ 851.829037][T17213] bond1: option mode: unable to set because the bond device has slaves [ 851.905049][T17225] loop7: detected capacity change from 0 to 256 [ 851.948127][T17228] netlink: 'syz.6.3492': attribute type 1 has an invalid length. [ 851.953371][T17225] FAT-fs (loop7): Directory bread(block 64) failed [ 851.954610][T17225] FAT-fs (loop7): Directory bread(block 65) failed [ 851.955873][T17225] FAT-fs (loop7): Directory bread(block 66) failed [ 851.956695][T17228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.958784][T17225] FAT-fs (loop7): Directory bread(block 67) failed [ 851.972535][T17225] FAT-fs (loop7): Directory bread(block 68) failed [ 851.973949][T17225] FAT-fs (loop7): Directory bread(block 69) failed [ 851.981682][T17225] FAT-fs (loop7): Directory bread(block 70) failed [ 851.986366][T17225] FAT-fs (loop7): Directory bread(block 71) failed [ 851.989955][T17225] FAT-fs (loop7): Directory bread(block 72) failed [ 851.990967][T17225] FAT-fs (loop7): Directory bread(block 73) failed [ 852.106453][T17242] netlink: 'syz.6.3498': attribute type 29 has an invalid length. [ 852.107952][T17242] netlink: 'syz.6.3498': attribute type 29 has an invalid length. [ 852.110090][T17242] netlink: 'syz.6.3498': attribute type 29 has an invalid length. [ 852.475816][T17260] netlink: 'syz.5.3503': attribute type 10 has an invalid length. [ 852.485930][T17260] bond2: option mode: unable to set because the bond device has slaves [ 852.905476][T17304] netlink: 'syz.6.3514': attribute type 10 has an invalid length. [ 852.907551][T17304] bond1: option mode: unable to set because the bond device is up [ 852.921554][T17302] device veth0_macvtap left promiscuous mode [ 853.204425][ T27] audit: type=1326 audit(832.239:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17237 comm="syz.7.3497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87777a28 code=0x7fc00000 [ 854.192583][T17369] netlink: 'syz.5.3530': attribute type 10 has an invalid length. [ 854.194930][T17369] bond2: option mode: unable to set because the bond device has slaves [ 854.251194][T17376] loop1: detected capacity change from 0 to 512 [ 854.252690][T17376] EXT4-fs: Ignoring removed mblk_io_submit option [ 854.261134][T17376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 854.271729][T17374] device syzkaller1 entered promiscuous mode [ 854.286670][T17376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 854.299864][ T3990] device veth0_macvtap entered promiscuous mode [ 854.301371][T17376] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3535: Invalid inode bitmap blk 4 in block_group 0 [ 854.309781][T17376] EXT4-fs (loop1): Remounting filesystem read-only [ 854.329498][T17376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 854.361867][T15795] EXT4-fs (loop1): unmounting filesystem. [ 866.239140][T17411] overlayfs: failed to resolve './bus': -2 [ 866.265189][T17406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 866.293764][T17428] binder: 17427:17428 tried to acquire reference to desc 0, got 1 instead [ 866.304653][T17406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.313679][T17407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 866.321007][T17428] binder: 17427:17428 got transaction with too large buffer [ 866.326121][T17428] binder: 17427:17428 transaction call to 17427:0 failed 20/29201/-22, size 88-24 line 3504 [ 866.331941][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 866.349835][T17407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.353362][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3546'. [ 866.354900][T17425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.357113][T17425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.358841][T17425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.360172][T17425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.481734][T17445] netlink: 'syz.7.3550': attribute type 10 has an invalid length. [ 866.492507][T17445] bond1: option mode: unable to set because the bond device has slaves [ 866.549260][T17458] loop1: detected capacity change from 0 to 512 [ 866.641759][T17458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 866.714718][T15795] EXT4-fs (loop1): unmounting filesystem. [ 866.797487][T17484] overlayfs: failed to resolve './bus': -2 [ 866.889826][T17490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.891367][T17490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.278607][T17512] netlink: 'syz.1.3565': attribute type 10 has an invalid length. [ 867.284753][T17512] bond2: option mode: unable to set because the bond device has slaves [ 867.344376][T17524] overlayfs: failed to clone upperpath [ 867.378503][T17527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.383502][T17527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.496111][T17539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 867.795225][T17562] netlink: 'syz.3.3584': attribute type 10 has an invalid length. [ 867.806519][T17562] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 868.033789][T17573] netlink: 'syz.5.3588': attribute type 1 has an invalid length. [ 868.043895][T17573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.338881][T17581] bond0: (slave syz_tun): Releasing backup interface [ 868.369799][T17595] overlayfs: failed to clone upperpath [ 868.458035][T17606] loop7: detected capacity change from 0 to 512 [ 868.476054][T17606] EXT4-fs (loop7): Unsupported blocksize for fs-verity [ 868.622073][ T4326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 868.626519][ T4326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 868.629248][ T4326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 868.633059][ T4326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 868.634898][ T4326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 868.641587][ T4326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.688363][T11710] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.699188][T17608] netlink: 'syz.5.3596': attribute type 10 has an invalid length. [ 868.703624][T17611] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 868.713840][T17624] netlink: 'syz.1.3602': attribute type 1 has an invalid length. [ 868.727077][T17624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 868.830539][T11710] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.970127][T11710] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.004833][T17628] chnl_net:caif_netlink_parms(): no params data found [ 869.101097][T11710] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.103879][T17673] netlink: 'syz.5.3613': attribute type 1 has an invalid length. [ 869.122670][T17673] 8021q: adding VLAN 0 to HW filter on device bond8 [ 869.143858][T17628] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.145419][T17628] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.147467][T17628] device bridge_slave_0 entered promiscuous mode [ 869.157314][T17628] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.158554][T17628] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.160273][T17628] device bridge_slave_1 entered promiscuous mode [ 869.168645][T17628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.171339][T17628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.180854][T17628] team0: Port device team_slave_0 added [ 869.183271][T17628] team0: Port device team_slave_1 added [ 869.188886][T17628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.189968][T17628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.195996][T17628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.199385][T17628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.200711][T17628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.213076][T17628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.271081][T17628] device hsr_slave_0 entered promiscuous mode [ 869.291017][T17628] device hsr_slave_1 entered promiscuous mode [ 869.312622][T17628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.313779][T17628] Cannot create hsr debugfs directory [ 869.315301][T17691] netlink: 'syz.5.3616': attribute type 10 has an invalid length. [ 869.338462][T17691] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 869.459334][T17628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 869.487553][T17628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 869.703745][T17723] loop1: detected capacity change from 0 to 512 [ 869.710013][T17723] EXT4-fs: Ignoring removed oldalloc option [ 869.713433][T17723] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 869.715873][T11710] bond0: (slave ip6gretap1): Releasing backup interface [ 869.730612][T15795] EXT4-fs (loop1): unmounting filesystem. [ 869.741084][T17628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 869.779556][T17628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 869.999581][T17747] netlink: 'syz.5.3628': attribute type 10 has an invalid length. [ 870.025303][T17754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.026908][T17754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.032581][T17747] 8021q: adding VLAN 0 to HW filter on device bond9 [ 870.107863][T17747] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 870.120109][T17628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.126035][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 870.128268][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 870.147681][T17628] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.259143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 870.267757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 870.272310][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.273584][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.275313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 870.279452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 870.283082][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.284191][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.306285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 870.308176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 870.315833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 870.317702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 870.323656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 870.326798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 870.432132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 870.433870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 870.483350][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.484969][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 870.486630][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.488310][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 870.493379][T17628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 870.702637][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.704113][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.724424][T17628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.861536][T15367] Bluetooth: hci2: command 0x0409 tx timeout [ 870.897182][T17829] netlink: 'syz.3.3645': attribute type 10 has an invalid length. [ 870.912960][T17835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 870.969322][T17829] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 871.036172][T15367] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 871.037498][T15367] Bluetooth: hci0: Injecting HCI hardware error event [ 871.039508][T15367] Bluetooth: hci0: hardware error 0x00 [ 871.979004][T17900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.980510][T17900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.262615][T17919] netlink: 'syz.3.3659': attribute type 10 has an invalid length. [ 872.270428][T17908] 8021q: adding VLAN 0 to HW filter on device bond3 [ 872.273680][T17922] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 872.277366][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 872.279128][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 872.288570][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 872.290323][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 872.359501][T11710] device hsr_slave_0 left promiscuous mode [ 872.402623][T11710] device hsr_slave_1 left promiscuous mode [ 872.486535][T11710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.487726][T11710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.490036][T11710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.491847][T11710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.494415][T11710] device bridge_slave_1 left promiscuous mode [ 872.495566][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.554030][T11710] device bridge_slave_0 left promiscuous mode [ 872.555109][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.713763][T11710] device veth1_macvtap left promiscuous mode [ 872.714920][T11710] device veth0_macvtap left promiscuous mode [ 872.715955][T11710] device veth1_vlan left promiscuous mode [ 872.716977][T11710] device veth0_vlan left promiscuous mode [ 873.114428][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 873.461139][T15367] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 873.505667][T11710] bond2 (unregistering): Released all slaves [ 874.232496][T11710] bond1 (unregistering): Released all slaves [ 875.367630][T15367] Bluetooth: hci2: command 0x040f tx timeout [ 875.629465][T10148] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 875.637039][ T14] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 875.638313][ T14] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 876.453796][T11710] team0 (unregistering): Port device team_slave_1 removed [ 876.671737][T11710] team0 (unregistering): Port device team_slave_0 removed [ 876.863585][T11710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.079959][T11710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.631442][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 878.704690][T11710] bond0 (unregistering): Released all slaves [ 879.042574][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 879.044206][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 879.046423][T17628] device veth0_vlan entered promiscuous mode [ 879.074690][T17628] device veth1_vlan entered promiscuous mode [ 879.082384][T17628] device veth0_macvtap entered promiscuous mode [ 879.092675][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 879.109967][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 879.113894][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 879.119388][T17628] device veth1_macvtap entered promiscuous mode [ 879.154419][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.156044][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.157665][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.162377][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.163901][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.165673][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.172743][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.174423][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.183991][T17628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.185400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 879.187050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 879.188587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 879.216153][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.217954][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.219773][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.221603][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.225602][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.230339][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.231899][T17628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.233607][T17628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.242556][T17628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.248729][T17980] netlink: 'syz.3.3670': attribute type 10 has an invalid length. [ 879.250309][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 879.252041][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 879.276277][T17980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 879.289981][T17628] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.291479][T17628] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.293036][T17628] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.294500][T17628] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.335046][T13642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.336300][T13642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.339808][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.341358][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.346361][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.420117][T13642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.422111][T13642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.423888][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.461388][T17999] tipc: Started in network mode [ 879.466458][T17999] tipc: Node identity , cluster identity 4711 [ 879.467448][T17999] tipc: Failed to set node id, please configure manually [ 879.468620][T17999] tipc: Enabling of bearer rejected, failed to enable media [ 880.121829][T18066] netlink: 'syz.7.3684': attribute type 10 has an invalid length. [ 880.137300][T18066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 880.531343][T18106] loop8: detected capacity change from 0 to 4096 [ 880.551184][T18119] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3699'. [ 880.575744][T18123] netlink: 'syz.5.3697': attribute type 10 has an invalid length. [ 880.600641][T18123] 8021q: adding VLAN 0 to HW filter on device bond10 [ 880.658737][T18134] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 880.704634][T18134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 880.923014][T18164] loop8: detected capacity change from 0 to 512 [ 880.968835][T18164] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 881.013828][T18164] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 881.017154][T18164] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 881.021098][T18164] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.3708: Failed to acquire dquot type 0 [ 881.037814][T18164] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 881.039291][T18181] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 881.042116][T18164] overlayfs: failed to verify upper root origin [ 881.044863][T18181] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 881.052953][T18181] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.3708: Failed to acquire dquot type 0 [ 881.074151][T17628] EXT4-fs (loop8): unmounting filesystem. [ 881.161797][T18194] overlayfs: failed to clone upperpath [ 881.245526][T18199] netlink: 'syz.5.3715': attribute type 1 has an invalid length. [ 881.253960][T18199] 8021q: adding VLAN 0 to HW filter on device bond11 [ 881.688074][T18240] netlink: 'syz.5.3718': attribute type 10 has an invalid length. [ 881.709384][T18240] 8021q: adding VLAN 0 to HW filter on device bond12 [ 881.729313][T18247] loop7: detected capacity change from 0 to 512 [ 881.742725][T18240] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 881.768846][T18247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 881.827083][T18247] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 881.829158][T18247] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 881.830782][T18247] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.3721: Failed to acquire dquot type 0 [ 881.832942][T18247] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 881.837666][T18247] overlayfs: failed to verify upper root origin [ 881.885732][T18247] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 881.894959][T18247] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 881.896743][T18247] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.3721: Failed to acquire dquot type 0 [ 881.917318][T16586] EXT4-fs (loop7): unmounting filesystem. [ 881.998030][T18273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.999120][T18274] loop7: detected capacity change from 0 to 1024 [ 881.999805][T18273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.090405][T18281] overlayfs: failed to clone upperpath [ 882.141441][T18287] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 882.162600][T18287] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.295251][T18304] netlink: 'syz.3.3732': attribute type 10 has an invalid length. [ 882.314699][T18304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 882.339509][T18304] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 882.633481][T18325] loop1: detected capacity change from 0 to 256 [ 882.640057][T18325] exfat: Deprecated parameter 'utf8' [ 882.641801][T18325] exfat: Deprecated parameter 'utf8' [ 882.643646][T18325] exfat: Deprecated parameter 'utf8' [ 882.655072][T18325] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 882.678511][T18329] overlayfs: failed to resolve './bus': -2 [ 882.750307][T18335] netlink: 'syz.5.3743': attribute type 1 has an invalid length. [ 882.761050][T18335] 8021q: adding VLAN 0 to HW filter on device bond13 [ 882.775064][T18341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 882.820640][T18341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.825606][T18350] netlink: 'syz.7.3744': attribute type 10 has an invalid length. [ 882.837027][T18350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 882.843695][T18350] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 883.022683][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.024314][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.027857][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.029191][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.659354][T18373] loop1: detected capacity change from 0 to 512 [ 883.680727][T18375] overlayfs: failed to resolve './bus': -2 [ 883.694022][T18373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 883.720590][T18373] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 883.729969][T18373] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 883.734228][T18373] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3749: Failed to acquire dquot type 0 [ 883.738751][T18373] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 883.746666][T18373] overlayfs: failed to verify upper root origin [ 883.755876][T18373] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3749: Failed to acquire dquot type 0 [ 883.770618][T15795] EXT4-fs (loop1): unmounting filesystem. [ 883.787803][T18384] 8021q: adding VLAN 0 to HW filter on device bond14 [ 883.860328][T18394] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 883.892897][T18394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.918007][T18401] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 884.064702][T18416] loop3: detected capacity change from 0 to 1024 [ 884.066484][T18416] EXT4-fs: Ignoring removed bh option [ 884.087865][T18416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 884.097426][T18416] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 884.113377][T16253] EXT4-fs (loop3): unmounting filesystem. [ 884.198950][T18424] 8021q: adding VLAN 0 to HW filter on device bond8 [ 884.401410][T18436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 884.455724][T18436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.508709][T18447] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 884.612369][T18458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.618127][T18458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.807859][T18478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 884.845573][T18478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.869463][T18484] [ 884.869907][T18484] ====================================================== [ 884.871105][T18484] WARNING: possible circular locking dependency detected [ 884.872421][T18484] syzkaller #0 Not tainted [ 884.873225][T18484] ------------------------------------------------------ [ 884.874354][T18484] syz.5.3789/18484 is trying to acquire lock: [ 884.875414][T18484] ffff0000e3c1aad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 884.877479][T18484] [ 884.877479][T18484] but task is already holding lock: [ 884.878733][T18484] ffff0000e3c197b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 884.880322][T18484] [ 884.880322][T18484] which lock already depends on the new lock. [ 884.880322][T18484] [ 884.882110][T18484] [ 884.882110][T18484] the existing dependency chain (in reverse order) is: [ 884.883621][T18484] [ 884.883621][T18484] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 884.885076][T18484] lock_sock_nested+0x70/0x130 [ 884.886034][T18484] smc_listen_out+0x114/0x3a4 [ 884.886890][T18484] smc_listen_work+0x490/0xde0 [ 884.887798][T18484] process_one_work+0x7f8/0x13a4 [ 884.888691][T18484] worker_thread+0x8c4/0xfec [ 884.889595][T18484] kthread+0x250/0x2d8 [ 884.890354][T18484] ret_from_fork+0x10/0x20 [ 884.891224][T18484] [ 884.891224][T18484] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 884.893014][T18484] __lock_acquire+0x2880/0x6800 [ 884.893964][T18484] lock_acquire+0x20c/0x63c [ 884.894806][T18484] __flush_work+0x10c/0x1ec [ 884.895680][T18484] __cancel_work_timer+0x300/0x458 [ 884.896660][T18484] cancel_work_sync+0x24/0x38 [ 884.897579][T18484] smc_clcsock_release+0x64/0xe8 [ 884.898496][T18484] __smc_release+0x568/0x6bc [ 884.899359][T18484] smc_close_non_accepted+0xd8/0x254 [ 884.900403][T18484] smc_close_active+0x9c4/0xd24 [ 884.901365][T18484] __smc_release+0x48c/0x6bc [ 884.902287][T18484] smc_release+0x258/0x50c [ 884.903160][T18484] sock_close+0xb4/0x1f8 [ 884.904013][T18484] __fput+0x1bc/0x7b8 [ 884.904825][T18484] ____fput+0x20/0x30 [ 884.905648][T18484] task_work_run+0x1ec/0x278 [ 884.906488][T18484] do_notify_resume+0x1fa0/0x2aa4 [ 884.907445][T18484] el0_svc+0x98/0x128 [ 884.908248][T18484] el0t_64_sync_handler+0x84/0xf0 [ 884.909151][T18484] el0t_64_sync+0x18c/0x190 [ 884.910020][T18484] [ 884.910020][T18484] other info that might help us debug this: [ 884.910020][T18484] [ 884.911650][T18484] Possible unsafe locking scenario: [ 884.911650][T18484] [ 884.912951][T18484] CPU0 CPU1 [ 884.913963][T18484] ---- ---- [ 884.914887][T18484] lock(sk_lock-AF_SMC/1); [ 884.915678][T18484] lock((work_completion)(&new_smc->smc_listen_work)); [ 884.917288][T18484] lock(sk_lock-AF_SMC/1); [ 884.918497][T18484] lock((work_completion)(&new_smc->smc_listen_work)); [ 884.919706][T18484] [ 884.919706][T18484] *** DEADLOCK *** [ 884.919706][T18484] [ 884.921176][T18484] 2 locks held by syz.5.3789/18484: [ 884.922086][T18484] #0: ffff0000f5bc0810 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 884.923839][T18484] #1: ffff0000e3c197b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x50c [ 884.925524][T18484] [ 884.925524][T18484] stack backtrace: [ 884.926538][T18484] CPU: 1 PID: 18484 Comm: syz.5.3789 Not tainted syzkaller #0 [ 884.927796][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 884.929525][T18484] Call trace: [ 884.930066][T18484] dump_backtrace+0x1c0/0x1ec [ 884.930885][T18484] show_stack+0x2c/0x3c [ 884.931579][T18484] __dump_stack+0x30/0x40 [ 884.932362][T18484] dump_stack_lvl+0xf4/0x15c [ 884.933137][T18484] dump_stack+0x1c/0x5c [ 884.933780][T18484] print_circular_bug+0x148/0x1b0 [ 884.934687][T18484] check_noncircular+0x264/0x2f8 [ 884.935543][T18484] __lock_acquire+0x2880/0x6800 [ 884.936388][T18484] lock_acquire+0x20c/0x63c [ 884.937158][T18484] __flush_work+0x10c/0x1ec [ 884.937905][T18484] __cancel_work_timer+0x300/0x458 [ 884.938779][T18484] cancel_work_sync+0x24/0x38 [ 884.939597][T18484] smc_clcsock_release+0x64/0xe8 [ 884.940484][T18484] __smc_release+0x568/0x6bc [ 884.941270][T18484] smc_close_non_accepted+0xd8/0x254 [ 884.942133][T18484] smc_close_active+0x9c4/0xd24 [ 884.942982][T18484] __smc_release+0x48c/0x6bc [ 884.943743][T18484] smc_release+0x258/0x50c [ 884.944564][T18484] sock_close+0xb4/0x1f8 [ 884.945285][T18484] __fput+0x1bc/0x7b8 [ 884.945960][T18484] ____fput+0x20/0x30 [ 884.946639][T18484] task_work_run+0x1ec/0x278 [ 884.947476][T18484] do_notify_resume+0x1fa0/0x2aa4 [ 884.948378][T18484] el0_svc+0x98/0x128 [ 884.949067][T18484] el0t_64_sync_handler+0x84/0xf0 [ 884.949969][T18484] el0t_64_sync+0x18c/0x190 [ 886.719603][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 886.720836][ T2061] ieee802154 phy1 wpan1: encryption failed: -22