Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. 2021/02/23 18:31:49 fuzzer started 2021/02/23 18:31:49 dialing manager at 10.128.0.163:35359 2021/02/23 18:31:49 syscalls: 3541 2021/02/23 18:31:49 code coverage: enabled 2021/02/23 18:31:49 comparison tracing: enabled 2021/02/23 18:31:49 extra coverage: enabled 2021/02/23 18:31:49 setuid sandbox: enabled 2021/02/23 18:31:49 namespace sandbox: enabled 2021/02/23 18:31:49 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/23 18:31:49 fault injection: enabled 2021/02/23 18:31:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/23 18:31:49 net packet injection: enabled 2021/02/23 18:31:49 net device setup: enabled 2021/02/23 18:31:49 concurrency sanitizer: enabled 2021/02/23 18:31:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/23 18:31:49 USB emulation: enabled 2021/02/23 18:31:49 hci packet injection: enabled 2021/02/23 18:31:49 wifi device emulation: enabled 2021/02/23 18:31:49 802.15.4 emulation: enabled 2021/02/23 18:31:51 suppressing KCSAN reports in functions: 'isolate_migratepages_block' '__mark_inode_dirty' 'do_nanosleep' 'start_this_handle' 'n_tty_receive_buf_common' '__send_signal' 'blk_mq_dispatch_rq_list' 'xas_clear_mark' 'ext4_writepages' 'wbt_done' 'prandom_seed' 'ext4_mb_good_group' 'ext4_free_inode' 'generic_write_end' 'do_signal_stop' 'complete_signal' 'jbd2_journal_commit_transaction' '__xa_clear_mark' 'do_sys_poll' 'wbt_issue' 'pcpu_alloc' 'ext4_free_inodes_count' 'blk_mq_rq_ctx_init' 'futex_wait_queue_me' 'find_get_pages_range_tag' 'do_select' 'alloc_pid' 'jbd2_journal_dirty_metadata' 'ext4_mark_iloc_dirty' 2021/02/23 18:31:51 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/23 18:31:52 fetching corpus: 48, signal 15104/18871 (executing program) 2021/02/23 18:31:52 fetching corpus: 98, signal 26712/32100 (executing program) 2021/02/23 18:31:52 fetching corpus: 148, signal 31643/38692 (executing program) 2021/02/23 18:31:52 fetching corpus: 198, signal 40257/48736 (executing program) 2021/02/23 18:31:52 fetching corpus: 248, signal 46829/56718 (executing program) 2021/02/23 18:31:52 fetching corpus: 298, signal 52306/63562 (executing program) 2021/02/23 18:31:52 fetching corpus: 348, signal 56418/69004 (executing program) 2021/02/23 18:31:52 fetching corpus: 398, signal 61690/75468 (executing program) 2021/02/23 18:31:52 fetching corpus: 448, signal 65227/80259 (executing program) 2021/02/23 18:31:52 fetching corpus: 498, signal 68236/84486 (executing program) 2021/02/23 18:31:52 fetching corpus: 548, signal 71259/88706 (executing program) 2021/02/23 18:31:52 fetching corpus: 598, signal 74651/93205 (executing program) 2021/02/23 18:31:52 fetching corpus: 648, signal 77278/97003 (executing program) 2021/02/23 18:31:52 fetching corpus: 698, signal 80126/100933 (executing program) 2021/02/23 18:31:52 fetching corpus: 748, signal 82490/104398 (executing program) 2021/02/23 18:31:52 fetching corpus: 798, signal 84159/107179 (executing program) 2021/02/23 18:31:53 fetching corpus: 848, signal 87631/111515 (executing program) 2021/02/23 18:31:53 fetching corpus: 898, signal 90039/114891 (executing program) 2021/02/23 18:31:53 fetching corpus: 948, signal 92026/117885 (executing program) 2021/02/23 18:31:53 fetching corpus: 998, signal 94113/120939 (executing program) 2021/02/23 18:31:53 fetching corpus: 1048, signal 96549/124282 (executing program) 2021/02/23 18:31:53 fetching corpus: 1098, signal 98221/126889 (executing program) 2021/02/23 18:31:53 fetching corpus: 1147, signal 99893/129525 (executing program) 2021/02/23 18:31:53 fetching corpus: 1197, signal 102254/132648 (executing program) 2021/02/23 18:31:53 fetching corpus: 1247, signal 103730/135034 (executing program) 2021/02/23 18:31:53 fetching corpus: 1297, signal 105662/137756 (executing program) 2021/02/23 18:31:53 fetching corpus: 1347, signal 107544/140451 (executing program) 2021/02/23 18:31:54 fetching corpus: 1396, signal 109300/142986 (executing program) 2021/02/23 18:31:54 fetching corpus: 1446, signal 110253/144885 (executing program) 2021/02/23 18:31:54 fetching corpus: 1496, signal 111610/147075 (executing program) 2021/02/23 18:31:54 fetching corpus: 1546, signal 112948/149209 (executing program) 2021/02/23 18:31:54 fetching corpus: 1595, signal 114294/151368 (executing program) 2021/02/23 18:31:54 fetching corpus: 1644, signal 116941/154427 (executing program) 2021/02/23 18:31:54 fetching corpus: 1694, signal 118376/156553 (executing program) 2021/02/23 18:31:54 fetching corpus: 1744, signal 120657/159269 (executing program) 2021/02/23 18:31:54 fetching corpus: 1794, signal 122866/161921 (executing program) 2021/02/23 18:31:54 fetching corpus: 1844, signal 124222/163923 (executing program) 2021/02/23 18:31:54 fetching corpus: 1894, signal 125544/165944 (executing program) 2021/02/23 18:31:54 fetching corpus: 1943, signal 127017/167978 (executing program) 2021/02/23 18:31:54 fetching corpus: 1993, signal 128269/169852 (executing program) 2021/02/23 18:31:54 fetching corpus: 2043, signal 129580/171751 (executing program) 2021/02/23 18:31:54 fetching corpus: 2093, signal 130487/173351 (executing program) 2021/02/23 18:31:54 fetching corpus: 2143, signal 131261/174878 (executing program) 2021/02/23 18:31:55 fetching corpus: 2193, signal 132765/176900 (executing program) 2021/02/23 18:31:55 fetching corpus: 2243, signal 133897/178621 (executing program) 2021/02/23 18:31:55 fetching corpus: 2293, signal 135458/180598 (executing program) 2021/02/23 18:31:55 fetching corpus: 2343, signal 136269/182040 (executing program) 2021/02/23 18:31:55 fetching corpus: 2393, signal 137234/183603 (executing program) 2021/02/23 18:31:55 fetching corpus: 2443, signal 138710/185472 (executing program) 2021/02/23 18:31:55 fetching corpus: 2493, signal 139311/186734 (executing program) 2021/02/23 18:31:55 fetching corpus: 2543, signal 140666/188434 (executing program) 2021/02/23 18:31:55 fetching corpus: 2593, signal 141575/189890 (executing program) 2021/02/23 18:31:55 fetching corpus: 2643, signal 142812/191484 (executing program) 2021/02/23 18:31:55 fetching corpus: 2693, signal 144140/193168 (executing program) 2021/02/23 18:31:55 fetching corpus: 2743, signal 144944/194484 (executing program) 2021/02/23 18:31:55 fetching corpus: 2793, signal 146851/196475 (executing program) 2021/02/23 18:31:55 fetching corpus: 2843, signal 147885/197885 (executing program) 2021/02/23 18:31:55 fetching corpus: 2893, signal 148883/199314 (executing program) 2021/02/23 18:31:55 fetching corpus: 2943, signal 150135/200828 (executing program) 2021/02/23 18:31:55 fetching corpus: 2993, signal 150909/202118 (executing program) 2021/02/23 18:31:56 fetching corpus: 3043, signal 151596/203295 (executing program) 2021/02/23 18:31:56 fetching corpus: 3093, signal 152949/204830 (executing program) 2021/02/23 18:31:56 fetching corpus: 3143, signal 154256/206358 (executing program) 2021/02/23 18:31:56 fetching corpus: 3193, signal 155274/207708 (executing program) 2021/02/23 18:31:56 fetching corpus: 3243, signal 156201/208874 (executing program) 2021/02/23 18:31:56 fetching corpus: 3293, signal 157039/210077 (executing program) 2021/02/23 18:31:56 fetching corpus: 3343, signal 157871/211255 (executing program) 2021/02/23 18:31:56 fetching corpus: 3393, signal 158702/212436 (executing program) 2021/02/23 18:31:56 fetching corpus: 3443, signal 160202/213851 (executing program) 2021/02/23 18:31:56 fetching corpus: 3493, signal 161055/214987 (executing program) 2021/02/23 18:31:56 fetching corpus: 3543, signal 162142/216211 (executing program) 2021/02/23 18:31:56 fetching corpus: 3593, signal 162966/217313 (executing program) 2021/02/23 18:31:56 fetching corpus: 3643, signal 163682/218374 (executing program) 2021/02/23 18:31:56 fetching corpus: 3693, signal 164425/219416 (executing program) 2021/02/23 18:31:56 fetching corpus: 3743, signal 165023/220363 (executing program) 2021/02/23 18:31:56 fetching corpus: 3793, signal 165870/221421 (executing program) 2021/02/23 18:31:57 fetching corpus: 3843, signal 166835/222555 (executing program) 2021/02/23 18:31:57 fetching corpus: 3893, signal 167757/223588 (executing program) 2021/02/23 18:31:57 fetching corpus: 3943, signal 168878/224724 (executing program) 2021/02/23 18:31:57 fetching corpus: 3993, signal 169392/225589 (executing program) 2021/02/23 18:31:57 fetching corpus: 4043, signal 170073/226515 (executing program) 2021/02/23 18:31:57 fetching corpus: 4093, signal 170609/227413 (executing program) 2021/02/23 18:31:57 fetching corpus: 4143, signal 171356/228400 (executing program) 2021/02/23 18:31:57 fetching corpus: 4193, signal 172483/229452 (executing program) 2021/02/23 18:31:58 fetching corpus: 4243, signal 173270/230363 (executing program) 2021/02/23 18:31:58 fetching corpus: 4293, signal 174412/231412 (executing program) 2021/02/23 18:31:58 fetching corpus: 4343, signal 175180/232316 (executing program) 2021/02/23 18:31:58 fetching corpus: 4393, signal 175930/233191 (executing program) 2021/02/23 18:31:58 fetching corpus: 4443, signal 176547/234036 (executing program) 2021/02/23 18:31:58 fetching corpus: 4493, signal 177425/234923 (executing program) 2021/02/23 18:31:58 fetching corpus: 4543, signal 178211/235771 (executing program) 2021/02/23 18:31:58 fetching corpus: 4593, signal 180242/236896 (executing program) 2021/02/23 18:31:58 fetching corpus: 4643, signal 181082/237709 (executing program) 2021/02/23 18:31:58 fetching corpus: 4693, signal 184261/239116 (executing program) 2021/02/23 18:31:58 fetching corpus: 4743, signal 184716/239803 (executing program) 2021/02/23 18:31:58 fetching corpus: 4793, signal 185840/240637 (executing program) 2021/02/23 18:31:58 fetching corpus: 4843, signal 186966/241457 (executing program) 2021/02/23 18:31:58 fetching corpus: 4893, signal 187773/242202 (executing program) 2021/02/23 18:31:58 fetching corpus: 4943, signal 188537/242908 (executing program) 2021/02/23 18:31:58 fetching corpus: 4993, signal 189117/243538 (executing program) 2021/02/23 18:31:59 fetching corpus: 5043, signal 190423/244353 (executing program) 2021/02/23 18:31:59 fetching corpus: 5093, signal 191048/245009 (executing program) 2021/02/23 18:31:59 fetching corpus: 5143, signal 191764/245701 (executing program) 2021/02/23 18:31:59 fetching corpus: 5193, signal 192396/246315 (executing program) 2021/02/23 18:31:59 fetching corpus: 5243, signal 193228/246996 (executing program) 2021/02/23 18:31:59 fetching corpus: 5293, signal 193923/247644 (executing program) 2021/02/23 18:31:59 fetching corpus: 5343, signal 195033/248290 (executing program) 2021/02/23 18:31:59 fetching corpus: 5393, signal 195579/248898 (executing program) 2021/02/23 18:31:59 fetching corpus: 5443, signal 196205/249484 (executing program) 2021/02/23 18:31:59 fetching corpus: 5493, signal 196866/250049 (executing program) 2021/02/23 18:31:59 fetching corpus: 5543, signal 197419/250613 (executing program) 2021/02/23 18:31:59 fetching corpus: 5593, signal 198061/251153 (executing program) 2021/02/23 18:31:59 fetching corpus: 5643, signal 198903/251736 (executing program) 2021/02/23 18:31:59 fetching corpus: 5693, signal 199561/252275 (executing program) 2021/02/23 18:31:59 fetching corpus: 5743, signal 200072/252792 (executing program) 2021/02/23 18:31:59 fetching corpus: 5793, signal 201018/253357 (executing program) 2021/02/23 18:32:00 fetching corpus: 5843, signal 201694/253858 (executing program) 2021/02/23 18:32:00 fetching corpus: 5893, signal 202282/254377 (executing program) 2021/02/23 18:32:00 fetching corpus: 5943, signal 202752/254855 (executing program) 2021/02/23 18:32:00 fetching corpus: 5993, signal 203513/255364 (executing program) 2021/02/23 18:32:00 fetching corpus: 6043, signal 204005/255841 (executing program) 2021/02/23 18:32:00 fetching corpus: 6093, signal 204648/256296 (executing program) 2021/02/23 18:32:00 fetching corpus: 6143, signal 205211/256766 (executing program) 2021/02/23 18:32:00 fetching corpus: 6193, signal 206003/257197 (executing program) 2021/02/23 18:32:00 fetching corpus: 6243, signal 206618/257616 (executing program) 2021/02/23 18:32:00 fetching corpus: 6293, signal 207088/258011 (executing program) 2021/02/23 18:32:00 fetching corpus: 6343, signal 207619/258016 (executing program) 2021/02/23 18:32:00 fetching corpus: 6393, signal 208399/258016 (executing program) 2021/02/23 18:32:00 fetching corpus: 6443, signal 208821/258016 (executing program) 2021/02/23 18:32:00 fetching corpus: 6493, signal 209449/258105 (executing program) 2021/02/23 18:32:01 fetching corpus: 6543, signal 211288/258105 (executing program) 2021/02/23 18:32:01 fetching corpus: 6593, signal 211920/258107 (executing program) 2021/02/23 18:32:01 fetching corpus: 6643, signal 212278/258109 (executing program) 2021/02/23 18:32:01 fetching corpus: 6693, signal 212863/258131 (executing program) 2021/02/23 18:32:01 fetching corpus: 6743, signal 213540/258131 (executing program) 2021/02/23 18:32:01 fetching corpus: 6793, signal 214206/258133 (executing program) 2021/02/23 18:32:01 fetching corpus: 6843, signal 214753/258134 (executing program) 2021/02/23 18:32:01 fetching corpus: 6893, signal 215258/258134 (executing program) 2021/02/23 18:32:01 fetching corpus: 6943, signal 216047/258176 (executing program) 2021/02/23 18:32:01 fetching corpus: 6993, signal 216697/258176 (executing program) 2021/02/23 18:32:01 fetching corpus: 7043, signal 217269/258176 (executing program) 2021/02/23 18:32:01 fetching corpus: 7093, signal 217730/258176 (executing program) 2021/02/23 18:32:01 fetching corpus: 7142, signal 218260/258209 (executing program) 2021/02/23 18:32:01 fetching corpus: 7192, signal 218656/258212 (executing program) 2021/02/23 18:32:01 fetching corpus: 7242, signal 219183/258212 (executing program) 2021/02/23 18:32:01 fetching corpus: 7292, signal 219912/258212 (executing program) 2021/02/23 18:32:01 fetching corpus: 7342, signal 220484/258212 (executing program) 2021/02/23 18:32:02 fetching corpus: 7392, signal 221447/258223 (executing program) 2021/02/23 18:32:02 fetching corpus: 7442, signal 222113/258230 (executing program) 2021/02/23 18:32:02 fetching corpus: 7492, signal 222979/258230 (executing program) 2021/02/23 18:32:02 fetching corpus: 7542, signal 223930/258234 (executing program) 2021/02/23 18:32:02 fetching corpus: 7592, signal 224775/258234 (executing program) 2021/02/23 18:32:02 fetching corpus: 7642, signal 225237/258237 (executing program) 2021/02/23 18:32:02 fetching corpus: 7692, signal 225725/258245 (executing program) 2021/02/23 18:32:02 fetching corpus: 7742, signal 226216/258248 (executing program) 2021/02/23 18:32:02 fetching corpus: 7792, signal 226600/258248 (executing program) 2021/02/23 18:32:02 fetching corpus: 7842, signal 227330/258259 (executing program) 2021/02/23 18:32:02 fetching corpus: 7892, signal 227844/258259 (executing program) 2021/02/23 18:32:02 fetching corpus: 7942, signal 228440/258264 (executing program) 2021/02/23 18:32:02 fetching corpus: 7992, signal 228957/258271 (executing program) 2021/02/23 18:32:02 fetching corpus: 8042, signal 229389/258271 (executing program) 2021/02/23 18:32:02 fetching corpus: 8092, signal 230115/258271 (executing program) 2021/02/23 18:32:03 fetching corpus: 8142, signal 230435/258271 (executing program) 2021/02/23 18:32:03 fetching corpus: 8192, signal 230954/258271 (executing program) 2021/02/23 18:32:03 fetching corpus: 8242, signal 231374/258296 (executing program) 2021/02/23 18:32:03 fetching corpus: 8292, signal 231791/258296 (executing program) 2021/02/23 18:32:03 fetching corpus: 8342, signal 232371/258296 (executing program) 2021/02/23 18:32:03 fetching corpus: 8392, signal 232867/258307 (executing program) 2021/02/23 18:32:03 fetching corpus: 8442, signal 233407/258310 (executing program) 2021/02/23 18:32:03 fetching corpus: 8492, signal 233900/258315 (executing program) 2021/02/23 18:32:03 fetching corpus: 8542, signal 234383/258341 (executing program) 2021/02/23 18:32:03 fetching corpus: 8592, signal 235122/258344 (executing program) 2021/02/23 18:32:03 fetching corpus: 8642, signal 235497/258346 (executing program) 2021/02/23 18:32:03 fetching corpus: 8692, signal 235933/258352 (executing program) 2021/02/23 18:32:03 fetching corpus: 8741, signal 236467/258352 (executing program) 2021/02/23 18:32:03 fetching corpus: 8791, signal 237027/258363 (executing program) 2021/02/23 18:32:04 fetching corpus: 8841, signal 237412/258363 (executing program) 2021/02/23 18:32:04 fetching corpus: 8891, signal 237829/258363 (executing program) 2021/02/23 18:32:04 fetching corpus: 8941, signal 238326/258365 (executing program) 2021/02/23 18:32:04 fetching corpus: 8991, signal 238799/258369 (executing program) 2021/02/23 18:32:04 fetching corpus: 9040, signal 239269/258370 (executing program) 2021/02/23 18:32:04 fetching corpus: 9090, signal 239801/258371 (executing program) 2021/02/23 18:32:04 fetching corpus: 9140, signal 240403/258371 (executing program) 2021/02/23 18:32:04 fetching corpus: 9190, signal 240901/258371 (executing program) 2021/02/23 18:32:04 fetching corpus: 9240, signal 241463/258371 (executing program) 2021/02/23 18:32:04 fetching corpus: 9290, signal 241781/258371 (executing program) 2021/02/23 18:32:04 fetching corpus: 9340, signal 242167/258371 (executing program) 2021/02/23 18:32:04 fetching corpus: 9390, signal 242596/258373 (executing program) 2021/02/23 18:32:04 fetching corpus: 9440, signal 242983/258379 (executing program) 2021/02/23 18:32:04 fetching corpus: 9490, signal 243408/258381 (executing program) 2021/02/23 18:32:05 fetching corpus: 9540, signal 243802/258383 (executing program) 2021/02/23 18:32:05 fetching corpus: 9590, signal 244340/258383 (executing program) 2021/02/23 18:32:05 fetching corpus: 9640, signal 244837/258385 (executing program) 2021/02/23 18:32:05 fetching corpus: 9690, signal 245169/258389 (executing program) 2021/02/23 18:32:05 fetching corpus: 9740, signal 245659/258389 (executing program) 2021/02/23 18:32:05 fetching corpus: 9790, signal 246058/258391 (executing program) 2021/02/23 18:32:05 fetching corpus: 9840, signal 246407/258391 (executing program) 2021/02/23 18:32:05 fetching corpus: 9890, signal 246899/258400 (executing program) 2021/02/23 18:32:05 fetching corpus: 9940, signal 247328/258412 (executing program) 2021/02/23 18:32:05 fetching corpus: 9990, signal 248032/258414 (executing program) 2021/02/23 18:32:05 fetching corpus: 10040, signal 248710/258432 (executing program) 2021/02/23 18:32:05 fetching corpus: 10090, signal 249006/258434 (executing program) 2021/02/23 18:32:05 fetching corpus: 10140, signal 249963/258441 (executing program) 2021/02/23 18:32:05 fetching corpus: 10190, signal 250438/258443 (executing program) 2021/02/23 18:32:06 fetching corpus: 10240, signal 251141/258443 (executing program) 2021/02/23 18:32:06 fetching corpus: 10290, signal 251542/258443 (executing program) 2021/02/23 18:32:06 fetching corpus: 10340, signal 251853/258443 (executing program) 2021/02/23 18:32:06 fetching corpus: 10390, signal 252515/258449 (executing program) 2021/02/23 18:32:06 fetching corpus: 10440, signal 252828/258449 (executing program) 2021/02/23 18:32:06 fetching corpus: 10490, signal 253292/258449 (executing program) 2021/02/23 18:32:06 fetching corpus: 10540, signal 253726/258449 (executing program) 2021/02/23 18:32:06 fetching corpus: 10590, signal 254180/258449 (executing program) 2021/02/23 18:32:06 fetching corpus: 10640, signal 254541/258449 (executing program) 2021/02/23 18:32:06 fetching corpus: 10680, signal 254836/258465 (executing program) 2021/02/23 18:32:06 fetching corpus: 10680, signal 254836/258465 (executing program) 2021/02/23 18:32:08 starting 6 fuzzer processes 18:32:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "562fee29b221a597383a4171808feafb", "f3341d94d65d586f96e9d01d0f564110", "313fbf72622621eb724ec5164b67ef2a", "9f66d13aee7b21e46adaa7b103dd6659"}}}, 0x4a) 18:32:08 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e54465320202020e407", 0xd}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)) 18:32:09 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\vHm', 0x0, 0x0, 0x0, @empty, @private0}}}}, 0x0) 18:32:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000200000000000000000000000024a60000000000000000000000000200002003001900fc01100000008f159000000000c2fb936b000000080000006801000068014000680148c8680124caf117d5"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 18:32:09 executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@private=0x5]}]}}}], 0x68}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\xff\x1a\xec\xb5\x12\x03F\xd9\x0e\x00\xff\x05\x00 \x00\x00\x00\x00(\x00\x05\xff,\t\xfdj\xe3\x85\xe3\xd6\xe0|6+\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5%f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa3N\xc7\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') 18:32:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\b\x00'}) r4 = syz_open_pts(r3, 0x0) r5 = dup2(r4, r2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1b) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 50.693374][ T8360] IPVS: ftp: loaded support on port[0] = 21 [ 50.776396][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 50.806484][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.813688][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.827803][ T8360] device bridge_slave_0 entered promiscuous mode [ 50.841344][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.849197][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.866723][ T8360] device bridge_slave_1 entered promiscuous mode [ 50.882305][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.893169][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.894522][ T8362] IPVS: ftp: loaded support on port[0] = 21 [ 50.911560][ T8360] team0: Port device team_slave_0 added [ 50.920883][ T8360] team0: Port device team_slave_1 added [ 50.950359][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.957810][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.987459][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.001306][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.008553][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.036689][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.063743][ T8360] device hsr_slave_0 entered promiscuous mode [ 51.070596][ T8360] device hsr_slave_1 entered promiscuous mode [ 51.112327][ T8364] IPVS: ftp: loaded support on port[0] = 21 [ 51.130926][ T8362] chnl_net:caif_netlink_parms(): no params data found [ 51.206646][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.217421][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.226315][ T8362] device bridge_slave_0 entered promiscuous mode [ 51.246699][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.263877][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.271936][ T8362] device bridge_slave_1 entered promiscuous mode [ 51.301607][ T8360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.311151][ T8366] IPVS: ftp: loaded support on port[0] = 21 [ 51.328470][ T8362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.339763][ T8362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.349728][ T8360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.360832][ T8360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.407108][ T8360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.428954][ T8362] team0: Port device team_slave_0 added [ 51.439111][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.446486][ T8360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.454375][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.461515][ T8360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.484162][ T8368] IPVS: ftp: loaded support on port[0] = 21 [ 51.486479][ T8362] team0: Port device team_slave_1 added [ 51.571821][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 51.588635][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.597793][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.634499][ T8362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.647017][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.654569][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.681081][ T8362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.694751][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 51.723032][ T8362] device hsr_slave_0 entered promiscuous mode [ 51.729843][ T8362] device hsr_slave_1 entered promiscuous mode [ 51.736605][ T8362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.745531][ T8362] Cannot create hsr debugfs directory [ 51.768831][ T8370] IPVS: ftp: loaded support on port[0] = 21 [ 51.775500][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.783507][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.837877][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.848634][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.859908][ T8364] device bridge_slave_0 entered promiscuous mode [ 51.890463][ T8368] chnl_net:caif_netlink_parms(): no params data found [ 51.901250][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.908491][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.916486][ T8364] device bridge_slave_1 entered promiscuous mode [ 51.923249][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.931192][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.939589][ T8366] device bridge_slave_0 entered promiscuous mode [ 51.948800][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.956399][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.964491][ T8366] device bridge_slave_1 entered promiscuous mode [ 51.982808][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.006919][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.018802][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.057998][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.068137][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.076141][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.088114][ T8362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.099152][ T8362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.109610][ T8366] team0: Port device team_slave_0 added [ 52.121627][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.130857][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.158217][ T8362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.167903][ T8366] team0: Port device team_slave_1 added [ 52.187925][ T8364] team0: Port device team_slave_0 added [ 52.198606][ T8362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.239048][ T8364] team0: Port device team_slave_1 added [ 52.252175][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.262302][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.271806][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.279586][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.292232][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.301384][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.310303][ T8368] device bridge_slave_0 entered promiscuous mode [ 52.318779][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 52.339071][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.346831][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.373392][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.385523][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.395582][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.404573][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.411625][ T9033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.421557][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.429188][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.457473][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.470913][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.478101][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.485987][ T8368] device bridge_slave_1 entered promiscuous mode [ 52.508375][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.515570][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.542742][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.555795][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.562858][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.590053][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.606036][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.635999][ T8364] device hsr_slave_0 entered promiscuous mode [ 52.644022][ T8364] device hsr_slave_1 entered promiscuous mode [ 52.650802][ T8364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.659192][ T8364] Cannot create hsr debugfs directory [ 52.666896][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.681644][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.688877][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.697357][ T8370] device bridge_slave_0 entered promiscuous mode [ 52.708697][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.716402][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.724287][ T8370] device bridge_slave_1 entered promiscuous mode [ 52.733827][ T9359] Bluetooth: hci0: command 0x0409 tx timeout [ 52.741198][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.784178][ T8368] team0: Port device team_slave_0 added [ 52.794162][ T8366] device hsr_slave_0 entered promiscuous mode [ 52.801374][ T8366] device hsr_slave_1 entered promiscuous mode [ 52.808703][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.816515][ T8366] Cannot create hsr debugfs directory [ 52.826360][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.837203][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.847115][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.856607][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.873654][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.882444][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.891805][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.893807][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 52.900357][ T9033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.916252][ T8368] team0: Port device team_slave_1 added [ 52.923622][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.945777][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.967215][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.976590][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.986359][ T8364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.002309][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.024883][ T8364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.034909][ T8364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.046734][ T8364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.058368][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.065420][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.091997][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.105966][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.112999][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.140351][ T7974] Bluetooth: hci2: command 0x0409 tx timeout [ 53.143175][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.165731][ T8370] team0: Port device team_slave_0 added [ 53.176435][ T8370] team0: Port device team_slave_1 added [ 53.201365][ T8368] device hsr_slave_0 entered promiscuous mode [ 53.208867][ T8368] device hsr_slave_1 entered promiscuous mode [ 53.215866][ T8368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.224670][ T8368] Cannot create hsr debugfs directory [ 53.242294][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.250441][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.258545][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.265948][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.294671][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.296094][ T19] Bluetooth: hci3: command 0x0409 tx timeout [ 53.307887][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.319557][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.346472][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.376908][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.410891][ T8366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.420581][ T8366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.439098][ T8370] device hsr_slave_0 entered promiscuous mode [ 53.446098][ T8370] device hsr_slave_1 entered promiscuous mode [ 53.452940][ T8370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.453628][ T9489] Bluetooth: hci4: command 0x0409 tx timeout [ 53.461272][ T8370] Cannot create hsr debugfs directory [ 53.480438][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.514447][ T8366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.524773][ T8366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.541794][ T8362] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.553776][ T8368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.566845][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.576049][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.585203][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.592911][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.600947][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.609929][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.618988][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.623593][ T9359] Bluetooth: hci5: command 0x0409 tx timeout [ 53.627450][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.645237][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.660312][ T8360] device veth0_vlan entered promiscuous mode [ 53.667194][ T8368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.683113][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.692282][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.703189][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.711300][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.724213][ T8368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.741062][ T8368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.753536][ T9565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.761986][ T9565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.772015][ T9565] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.779273][ T9565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.791547][ T8360] device veth1_vlan entered promiscuous mode [ 53.805860][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.814739][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.822737][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.845860][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.854605][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.864756][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.873736][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.882321][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.891511][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.901741][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.910574][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.920770][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.939267][ T8362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.951471][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.967417][ T8360] device veth0_macvtap entered promiscuous mode [ 53.979111][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.988351][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.996753][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.006602][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.015567][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.023162][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.031704][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.050974][ T8360] device veth1_macvtap entered promiscuous mode [ 54.061153][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.069633][ T8370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.111968][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.120127][ T8370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.131166][ T8370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.143169][ T8370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.153473][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.161392][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.169823][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.179685][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.188961][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.202467][ T8362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.234925][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.243849][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.252478][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.261991][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.269241][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.277412][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.286562][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.295071][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.302204][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.310053][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.319077][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.327916][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.336652][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.345326][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.354981][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.364513][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.373415][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.382855][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.391607][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.401782][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.422022][ T8360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.431549][ T8360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.442013][ T8360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.452053][ T8360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.477171][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.485039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.495598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.504056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.513169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.523100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.532107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.542419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.550511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.560013][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.571167][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.588502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.600031][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.608743][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.618102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.634452][ T8362] device veth0_vlan entered promiscuous mode [ 54.650516][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.662131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.681801][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.716023][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.725941][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.736279][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.743499][ T9672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.751409][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.761125][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.769891][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.776974][ T9672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.785610][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.795926][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.805503][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.814960][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.822212][ T9672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.823620][ T34] Bluetooth: hci0: command 0x041b tx timeout [ 54.830257][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.845224][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.855123][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.862309][ T9672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.870845][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.880430][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.888752][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.909423][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.922369][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.934770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.942530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.945430][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.952009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.967499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.976249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.985303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.994666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.002724][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.011649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.020333][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.029403][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.038842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.047655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.055894][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 55.057562][ T8362] device veth1_vlan entered promiscuous mode [ 55.078941][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.088163][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.120835][ T8366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.135014][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.149569][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.158698][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.167710][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.176531][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.187570][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.196327][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.205601][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.215927][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.225915][ T7974] Bluetooth: hci2: command 0x041b tx timeout [ 55.235154][ T3112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.245276][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.252614][ T3112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.263605][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.272763][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.281606][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.289695][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.302121][ T8362] device veth0_macvtap entered promiscuous mode [ 55.322379][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.332395][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.354159][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.363916][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.372900][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.373691][ T9654] Bluetooth: hci3: command 0x041b tx timeout [ 55.384578][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "562fee29b221a597383a4171808feafb", "f3341d94d65d586f96e9d01d0f564110", "313fbf72622621eb724ec5164b67ef2a", "9f66d13aee7b21e46adaa7b103dd6659"}}}, 0x4a) [ 55.415928][ T8362] device veth1_macvtap entered promiscuous mode [ 55.458316][ T8364] device veth0_vlan entered promiscuous mode [ 55.481058][ T8362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.494077][ T8362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "562fee29b221a597383a4171808feafb", "f3341d94d65d586f96e9d01d0f564110", "313fbf72622621eb724ec5164b67ef2a", "9f66d13aee7b21e46adaa7b103dd6659"}}}, 0x4a) [ 55.508063][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.526885][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.534486][ T9489] Bluetooth: hci4: command 0x041b tx timeout [ 55.548355][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 18:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "562fee29b221a597383a4171808feafb", "f3341d94d65d586f96e9d01d0f564110", "313fbf72622621eb724ec5164b67ef2a", "9f66d13aee7b21e46adaa7b103dd6659"}}}, 0x4a) [ 55.558777][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.568817][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.583065][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 18:32:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) [ 55.608278][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.620246][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.630438][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.643481][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.651496][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.659823][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.668118][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.678140][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.686974][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.695233][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.703775][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.726377][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.733248][ T8780] Bluetooth: hci5: command 0x041b tx timeout [ 55.735566][ T8362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 55.751780][ T8362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.764312][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.796156][ T8366] device veth0_vlan entered promiscuous mode [ 55.804054][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.812135][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.827913][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.838118][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.848006][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.857262][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.866532][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.873723][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.881871][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.890764][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.899470][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.907082][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.914911][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.923888][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.933046][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.944591][ T8364] device veth1_vlan entered promiscuous mode [ 55.976406][ T8366] device veth1_vlan entered promiscuous mode [ 55.985131][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.995271][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.005643][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.015207][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.024206][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.032933][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.044080][ T8362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.052824][ T8362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 18:32:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) [ 56.068955][ T8362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.081666][ T8362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.117681][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.130602][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.141638][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.164576][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.207964][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.217363][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.231415][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.241735][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.256020][ T8364] device veth0_macvtap entered promiscuous mode [ 56.297117][ T8364] device veth1_macvtap entered promiscuous mode [ 56.314812][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.323803][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.331976][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.340899][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.353642][ C0] hrtimer: interrupt took 35979 ns [ 56.354734][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.375424][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.383965][ T8368] device veth0_vlan entered promiscuous mode 18:32:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) [ 56.397642][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.406768][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.436869][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.448327][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.456753][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.473504][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.481385][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.497024][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.508658][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.521266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.535548][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.556431][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.567431][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.578752][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.590740][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.617406][ T8366] device veth0_macvtap entered promiscuous mode [ 56.627958][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.641111][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.650432][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.662191][ T8368] device veth1_vlan entered promiscuous mode [ 56.672601][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.685544][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.695869][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.709216][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.720723][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.748601][ T1944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.759161][ T8366] device veth1_macvtap entered promiscuous mode [ 56.767989][ T1944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.769900][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.784531][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.792645][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.802290][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:32:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) [ 56.811634][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.822081][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.831308][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.844018][ T8364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.861371][ T8364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.877146][ T8364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.892157][ T8364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.904883][ T8780] Bluetooth: hci0: command 0x040f tx timeout [ 56.912659][ T8370] device veth0_vlan entered promiscuous mode [ 56.932194][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.955143][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.965538][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.976500][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.987602][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.998403][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.010619][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.019089][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.030137][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.047252][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.049053][ T9762] loop1: detected capacity change from 64 to 0 [ 57.057184][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.070720][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.079367][ T9762] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 57.080018][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.097960][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.101328][ T9762] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 57.131407][ T9762] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 57.139634][ T9359] Bluetooth: hci1: command 0x040f tx timeout [ 57.154818][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.175161][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.186274][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.199127][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.215182][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.227769][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.239700][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.265121][ T9762] loop1: detected capacity change from 64 to 0 [ 57.272687][ T8370] device veth1_vlan entered promiscuous mode [ 57.284312][ T9762] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 57.293919][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.303346][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.306100][ T9640] Bluetooth: hci2: command 0x040f tx timeout [ 57.311933][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.321028][ T9762] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 57.326939][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.346935][ T9762] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 57.351283][ T8366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.366774][ T8366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 18:32:16 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e54465320202020e407", 0xd}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)) [ 57.376372][ T8366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.385413][ T8366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.397574][ T8368] device veth0_macvtap entered promiscuous mode [ 57.415680][ T1944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.418486][ T8368] device veth1_macvtap entered promiscuous mode [ 57.454264][ T9779] loop1: detected capacity change from 64 to 0 [ 57.454873][ T9640] Bluetooth: hci3: command 0x040f tx timeout [ 57.462752][ T9779] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 57.476752][ T1944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.479078][ T9779] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 57.522279][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.534781][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.545133][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.547428][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.565847][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.571610][ T9779] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 57.585179][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.597654][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.619942][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.623016][ T1969] Bluetooth: hci4: command 0x040f tx timeout [ 57.630216][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.647778][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.659374][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.683871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.695759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.735067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.763572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.772162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.783076][ T1969] Bluetooth: hci5: command 0x040f tx timeout [ 57.789179][ T8370] device veth0_macvtap entered promiscuous mode [ 57.801893][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.814089][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.824136][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.835702][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.849707][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.861002][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.871575][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.882490][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.894526][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.913398][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.922585][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.924075][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.934754][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.943015][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.951814][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.964790][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.972593][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.985082][ T8368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.996664][ T8368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.006117][ T8368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.016170][ T8368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.034481][ T8370] device veth1_macvtap entered promiscuous mode [ 58.042200][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 18:32:17 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\vHm', 0x0, 0x0, 0x0, @empty, @private0}}}}, 0x0) [ 58.105250][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.142289][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.155837][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 58.166866][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.177162][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.183008][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.197972][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 58.213652][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.225701][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 58.238046][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.250332][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 58.270442][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.283604][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 58.295763][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.307063][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.316137][ T9640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.324679][ T9640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.333417][ T9640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.342167][ T9640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.356877][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 58.370218][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.380722][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 58.393793][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.404425][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 58.417315][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.428998][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 58.444805][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.457100][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 58.468657][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.481973][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.495232][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.505227][ T1944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.505684][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.523378][ T1944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.555871][ T8370] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.577540][ T8370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.595942][ T8370] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.608828][ T8370] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.639931][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.658685][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.668342][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.689233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.725893][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.740138][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.761406][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.772089][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.781897][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.792034][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.874887][ T9876] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.983582][ T34] Bluetooth: hci0: command 0x0419 tx timeout [ 59.213219][ T34] Bluetooth: hci1: command 0x0419 tx timeout [ 59.375151][ T34] Bluetooth: hci2: command 0x0419 tx timeout [ 59.533970][ T34] Bluetooth: hci3: command 0x0419 tx timeout [ 59.704238][ T9640] Bluetooth: hci4: command 0x0419 tx timeout [ 59.853690][ T9359] Bluetooth: hci5: command 0x0419 tx timeout [ 61.062859][ T9640] Bluetooth: hci0: command 0x0445 tx timeout 18:32:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000200000000000000000000000024a60000000000000000000000000200002003001900fc01100000008f159000000000c2fb936b000000080000006801000068014000680148c8680124caf117d5"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 18:32:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) 18:32:20 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e54465320202020e407", 0xd}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)) 18:32:20 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\vHm', 0x0, 0x0, 0x0, @empty, @private0}}}}, 0x0) 18:32:20 executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@private=0x5]}]}}}], 0x68}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\xff\x1a\xec\xb5\x12\x03F\xd9\x0e\x00\xff\x05\x00 \x00\x00\x00\x00(\x00\x05\xff,\t\xfdj\xe3\x85\xe3\xd6\xe0|6+\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5%f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa3N\xc7\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') 18:32:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\b\x00'}) r4 = syz_open_pts(r3, 0x0) r5 = dup2(r4, r2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1b) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:32:20 executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@private=0x5]}]}}}], 0x68}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\xff\x1a\xec\xb5\x12\x03F\xd9\x0e\x00\xff\x05\x00 \x00\x00\x00\x00(\x00\x05\xff,\t\xfdj\xe3\x85\xe3\xd6\xe0|6+\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5%f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa3N\xc7\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') 18:32:20 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\vHm', 0x0, 0x0, 0x0, @empty, @private0}}}}, 0x0) 18:32:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\b\x00'}) r4 = syz_open_pts(r3, 0x0) r5 = dup2(r4, r2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1b) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:32:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(&(0x7f0000000ec0)={0x3, 0x70, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7}, 0x12, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='trusted.overlay.upper\x00', &(0x7f00000013c0)=ANY=[], 0xd8, 0x0) r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x88001) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) r1 = socket(0x11, 0x2, 0x0) bind(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff00d) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 61.618653][ T9895] loop1: detected capacity change from 64 to 0 [ 61.696735][ T9895] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 61.720463][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:32:20 executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@private=0x5]}]}}}], 0x68}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\xff\x1a\xec\xb5\x12\x03F\xd9\x0e\x00\xff\x05\x00 \x00\x00\x00\x00(\x00\x05\xff,\t\xfdj\xe3\x85\xe3\xd6\xe0|6+\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5%f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa3N\xc7\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') [ 61.751912][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:32:20 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xd00) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) [ 61.802609][ T9915] loop2: detected capacity change from 4096 to 0 [ 61.886363][ T9915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.964641][ T9915] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 63.132536][ T9672] Bluetooth: hci0: command 0x0445 tx timeout 18:32:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000200000000000000000000000024a60000000000000000000000000200002003001900fc01100000008f159000000000c2fb936b000000080000006801000068014000680148c8680124caf117d5"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 18:32:23 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e54465320202020e407", 0xd}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)) 18:32:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) 18:32:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\b\x00'}) r4 = syz_open_pts(r3, 0x0) r5 = dup2(r4, r2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1b) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:32:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xd00) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 18:32:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(&(0x7f0000000ec0)={0x3, 0x70, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7}, 0x12, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='trusted.overlay.upper\x00', &(0x7f00000013c0)=ANY=[], 0xd8, 0x0) r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x88001) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) r1 = socket(0x11, 0x2, 0x0) bind(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff00d) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:32:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xd00) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) [ 64.642465][ T9951] loop1: detected capacity change from 64 to 0 [ 64.658437][ T9951] __ntfs_error: 2 callbacks suppressed [ 64.658454][ T9951] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 64.669408][ T9952] loop2: detected capacity change from 4096 to 0 [ 64.683920][ T9951] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 64.698356][ T9951] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. 18:32:23 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) clone(0x7a900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@loopback, @broadcast, 0x0, 0x0, 0x0, 0xe, {@mac=@broadcast}, {@mac=@broadcast}, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 64.738009][ T9952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.811751][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.820681][ T3233] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.820713][ T3233] ieee802154 phy1 wpan1: encryption failed: -22 18:32:24 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xd00) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 18:32:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000014480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001400051f93ed3492ba649a9634dab8fb58b12dd25a80648c639b4c0ff94bfafb98e67ad1940d0300fc60", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001380)="80b820bfe6add7ed5fe0a67a14b453f846784cc992125fe6355ff8c9ea3c848d9a1c3b581ffcf8bfec1c285d6b", 0x2d}, {&(0x7f0000001580)="7cd22ff58fd521888fec3fb5b3b1d4b8cd19c73af90fe51f5f5ce26f74495486aef6b5a249101b4323cb9fd0d885f40ea355e3b336054ab2379b23de81852715f76ee4e2de20de730ccf2cab5331b5a81d88af6f7cdf0daf", 0x58}, {&(0x7f0000001600)="a029805bfb8ef6ee32e033be480740ca229def872cfc8224ad624c308295a0c9f5e38ff2cbdffd567994320d16f06dd082a28688a785301b83722df73b25378acb1feb29caf5f2bd5b4efb884fbec2d09c70db3a255bf12a6f92db76c3732534881dd44e018fc8ae6144193f96252920b580c7d844", 0x75}, {&(0x7f0000001680)="419a03ed1745a69116f147ce4709a4c7b0f007f9b72f54c9a03762687f62e62475c7bf2c772621c55b7320e0662b3fd5956c491ead85dc2fc7379651a0df6273ab2a4d9f15ea87481ff05f8cfdab1b3b1940d6b5b09ef44b7399751119095ebc24bbf8cdd22ece17aec54038f15a452b48c0a9abfcd9b87afcd8492163c20304e702338dc97a1197ddfc136bee5a6e68efb48cddf940e03d4bec6ed7b098e97ec56b630d93fae03a7dbe78c6ae1f9f841156bd4fed150ab8663428e2c06c07b8bb50176327678019939c296157b636e37ff7d3bb39ddd1c0a27f81d2a5e271b3051b140477e428cc", 0xe8}], 0x5}, 0x20048094) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008110040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x40040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) 18:32:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(&(0x7f0000000ec0)={0x3, 0x70, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7}, 0x12, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='trusted.overlay.upper\x00', &(0x7f00000013c0)=ANY=[], 0xd8, 0x0) r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x88001) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) r1 = socket(0x11, 0x2, 0x0) bind(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff00d) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:32:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x4], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x78) [ 64.906997][ T9975] x_tables: duplicate underflow at hook 1 [ 64.915213][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.003625][ T9985] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.055155][ T9989] loop2: detected capacity change from 4096 to 0 [ 65.090291][ T9989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.104675][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.113075][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.133548][ T9985] device bridge0 entered promiscuous mode [ 65.151418][ T9989] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 65.212257][ T9359] Bluetooth: hci0: command 0x0445 tx timeout [ 65.277025][ T9985] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.282556][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.298382][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.305685][ T9985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.313771][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.320974][ T9985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.331776][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.352180][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.359390][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.292171][ T9640] Bluetooth: hci0: command 0x0445 tx timeout 18:32:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000200000000000000000000000024a60000000000000000000000000200002003001900fc01100000008f159000000000c2fb936b000000080000006801000068014000680148c8680124caf117d5"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 18:32:26 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) clone(0x7a900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@loopback, @broadcast, 0x0, 0x0, 0x0, 0xe, {@mac=@broadcast}, {@mac=@broadcast}, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 18:32:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf0, &(0x7f0000000140)="5cf24bb9900c8658ab8dcf26b76af2f3c921bf3cb1d8c1fc07fe0dc8800cb5424458e2f1c9c0d88f2140f489da6844d807b530b2b880323ab8a72eefaf25482732360500000010f8fec78ce6ff46a237feac24846962135863f013e48f5d03af0ca5d4da0a43b0237c68eba79ae5860cd649a12a4ab5382d66a638b9a43e106a0b04e196fc851fad0a8cbd55147f81d257303334eb01dcddcfe88f19df16979fe59e3c2dd156da85f966c3027fcc6573a7daa9219d85e02dcb55ab03ccb4a664e1090e0b0f97df3f1366666b3b88db49806b3358621694adfd63947be4920070c60aa1d5dd1765ee113514fb117245a6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:32:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000", 0x1e, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000000880)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(&(0x7f0000000ec0)={0x3, 0x70, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7}, 0x12, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='trusted.overlay.upper\x00', &(0x7f00000013c0)=ANY=[], 0xd8, 0x0) r0 = open(0x0, 0x141042, 0x0) ftruncate(r0, 0x88001) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) r1 = socket(0x11, 0x2, 0x0) bind(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff00d) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:32:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000540)=""/4, 0x4) 18:32:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000014480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001400051f93ed3492ba649a9634dab8fb58b12dd25a80648c639b4c0ff94bfafb98e67ad1940d0300fc60", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001400)="7d0b09d5dea5da3427e0936ee7675a9b189cef5aa88a939ce3fe320020dfdabf928138c551c67b56dba6c893b722b7570b689d39d53523396b29921ed3becf3bce252a76ed4d2f2f2ee3ab35d79657092d4eead5a4dc05b22b6b38737893b92303df122d09a9ecb5aa89418c94e6cc2a564c9274f075c872c19b53bcff0178b6a27c2f3a48bae2abdcfd5ec17ddd4c0000fcc2a46c4c44343658026b8d90d274fee5c1057fae0a96e07306bd45089627272f62b2703a13fe208ba6877e83660662c620d0ba868310509347be105ff1235fbaca7458be9208359ae1bfcc23e86e59e41c40d2aca93a891553c3bf0986ab3f1a394aecd52c49febde1", 0xfb}, {&(0x7f0000001380)="80b820bfe6add7ed5fe0a67a14b453f846784cc992125fe6355ff8c9ea3c848d9a1c3b581ffcf8bfec1c285d6b", 0x2d}, {&(0x7f0000001580)="7cd22ff58fd521888fec3fb5b3b1d4b8cd19c73af90fe51f5f5ce26f74495486aef6b5a249101b4323cb9fd0d885f40ea355e3b336054ab2379b23de81852715f76ee4e2de20de730ccf2cab5331b5a81d88af6f7cdf0daf", 0x58}, {&(0x7f0000001600)="a029805bfb8ef6ee32e033be480740ca229def872cfc8224ad624c308295a0c9f5e38ff2cbdffd567994320d16f06dd082a28688a785301b83722df73b25378acb1feb29caf5f2bd5b4efb884fbec2d09c70db3a255bf12a6f92db76c3732534881dd44e018fc8ae6144193f96252920b580c7d844", 0x75}, {&(0x7f0000001680)="419a03ed1745a69116f147ce4709a4c7b0f007f9b72f54c9a03762687f62e62475c7bf2c772621c55b7320e0662b3fd5956c491ead85dc2fc7379651a0df6273ab2a4d9f15ea87481ff05f8cfdab1b3b1940d6b5b09ef44b7399751119095ebc24bbf8cdd22ece17aec54038f15a452b48c0a9abfcd9b87afcd8492163c20304e702338dc97a1197ddfc136bee5a6e68efb48cddf940e03d4bec6ed7b098e97ec56b630d93fae03a7dbe78c6ae1f9f841156bd4fed150ab8663428e2c06c07b8bb50176327678019939c296157b636e37ff7d3bb39ddd1c0a27f81d2a5e271b3051b140477e428cc", 0xe8}], 0x5}, 0x20048094) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008110040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x40040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) 18:32:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000540)=""/4, 0x4) [ 67.765540][T10019] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.767400][T10020] x_tables: duplicate underflow at hook 1 [ 67.793573][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.800779][T10019] bridge0: port 2(bridge_slave_1) entered forwarding state 18:32:26 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) clone(0x7a900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@loopback, @broadcast, 0x0, 0x0, 0x0, 0xe, {@mac=@broadcast}, {@mac=@broadcast}, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 18:32:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000540)=""/4, 0x4) [ 67.809580][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.817654][T10019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.833796][T10021] loop2: detected capacity change from 4096 to 0 [ 67.871954][T10021] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.908959][T10039] x_tables: duplicate underflow at hook 1 18:32:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000540)=""/4, 0x4) [ 67.922449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.956762][T10029] bridge0: port 2(bridge_slave_1) entered disabled state 18:32:27 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) clone(0x7a900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x2e0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@loopback, @broadcast, 0x0, 0x0, 0x0, 0xe, {@mac=@broadcast}, {@mac=@broadcast}, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) 18:32:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000014480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001400051f93ed3492ba649a9634dab8fb58b12dd25a80648c639b4c0ff94bfafb98e67ad1940d0300fc60", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001380)="80b820bfe6add7ed5fe0a67a14b453f846784cc992125fe6355ff8c9ea3c848d9a1c3b581ffcf8bfec1c285d6b", 0x2d}, {&(0x7f0000001580)="7cd22ff58fd521888fec3fb5b3b1d4b8cd19c73af90fe51f5f5ce26f74495486aef6b5a249101b4323cb9fd0d885f40ea355e3b336054ab2379b23de81852715f76ee4e2de20de730ccf2cab5331b5a81d88af6f7cdf0daf", 0x58}, {&(0x7f0000001600)="a029805bfb8ef6ee32e033be480740ca229def872cfc8224ad624c308295a0c9f5e38ff2cbdffd567994320d16f06dd082a28688a785301b83722df73b25378acb1feb29caf5f2bd5b4efb884fbec2d09c70db3a255bf12a6f92db76c3732534881dd44e018fc8ae6144193f96252920b580c7d844", 0x75}, {&(0x7f0000001680)="419a03ed1745a69116f147ce4709a4c7b0f007f9b72f54c9a03762687f62e62475c7bf2c772621c55b7320e0662b3fd5956c491ead85dc2fc7379651a0df6273ab2a4d9f15ea87481ff05f8cfdab1b3b1940d6b5b09ef44b7399751119095ebc24bbf8cdd22ece17aec54038f15a452b48c0a9abfcd9b87afcd8492163c20304e702338dc97a1197ddfc136bee5a6e68efb48cddf940e03d4bec6ed7b098e97ec56b630d93fae03a7dbe78c6ae1f9f841156bd4fed150ab8663428e2c06c07b8bb50176327678019939c296157b636e37ff7d3bb39ddd1c0a27f81d2a5e271b3051b140477e428cc", 0xe8}], 0x5}, 0x20048094) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008110040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x40040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) [ 67.966976][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.088036][T10049] x_tables: duplicate underflow at hook 1 [ 68.127019][T10046] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.202174][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.209940][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.232469][T10046] device bridge0 entered promiscuous mode [ 69.372071][ T7] Bluetooth: hci0: command 0x0445 tx timeout 18:32:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf0, &(0x7f0000000140)="5cf24bb9900c8658ab8dcf26b76af2f3c921bf3cb1d8c1fc07fe0dc8800cb5424458e2f1c9c0d88f2140f489da6844d807b530b2b880323ab8a72eefaf25482732360500000010f8fec78ce6ff46a237feac24846962135863f013e48f5d03af0ca5d4da0a43b0237c68eba79ae5860cd649a12a4ab5382d66a638b9a43e106a0b04e196fc851fad0a8cbd55147f81d257303334eb01dcddcfe88f19df16979fe59e3c2dd156da85f966c3027fcc6573a7daa9219d85e02dcb55ab03ccb4a664e1090e0b0f97df3f1366666b3b88db49806b3358621694adfd63947be4920070c60aa1d5dd1765ee113514fb117245a6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:32:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 18:32:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f0000000280)="2000000040000000030000003000000d0f000000000000000200000002000000000e00000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284d3", 0x63, 0x400}], 0x0, &(0x7f0000000200)) 18:32:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000014480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001400051f93ed3492ba649a9634dab8fb58b12dd25a80648c639b4c0ff94bfafb98e67ad1940d0300fc60", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001380)="80b820bfe6add7ed5fe0a67a14b453f846784cc992125fe6355ff8c9ea3c848d9a1c3b581ffcf8bfec1c285d6b", 0x2d}, {&(0x7f0000001580)="7cd22ff58fd521888fec3fb5b3b1d4b8cd19c73af90fe51f5f5ce26f74495486aef6b5a249101b4323cb9fd0d885f40ea355e3b336054ab2379b23de81852715f76ee4e2de20de730ccf2cab5331b5a81d88af6f7cdf0daf", 0x58}, {&(0x7f0000001600)="a029805bfb8ef6ee32e033be480740ca229def872cfc8224ad624c308295a0c9f5e38ff2cbdffd567994320d16f06dd082a28688a785301b83722df73b25378acb1feb29caf5f2bd5b4efb884fbec2d09c70db3a255bf12a6f92db76c3732534881dd44e018fc8ae6144193f96252920b580c7d844", 0x75}, {&(0x7f0000001680)="419a03ed1745a69116f147ce4709a4c7b0f007f9b72f54c9a03762687f62e62475c7bf2c772621c55b7320e0662b3fd5956c491ead85dc2fc7379651a0df6273ab2a4d9f15ea87481ff05f8cfdab1b3b1940d6b5b09ef44b7399751119095ebc24bbf8cdd22ece17aec54038f15a452b48c0a9abfcd9b87afcd8492163c20304e702338dc97a1197ddfc136bee5a6e68efb48cddf940e03d4bec6ed7b098e97ec56b630d93fae03a7dbe78c6ae1f9f841156bd4fed150ab8663428e2c06c07b8bb50176327678019939c296157b636e37ff7d3bb39ddd1c0a27f81d2a5e271b3051b140477e428cc", 0xe8}], 0x5}, 0x20048094) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008110040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x40040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) 18:32:29 executing program 5: syz_open_dev$vcsu(&(0x7f0000000f00)='/dev/vcsu#\x00', 0x40000000, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000f00)='/dev/vcsu#\x00', 0x40000000, 0x0) pselect6(0x40, &(0x7f0000000080)={0x1f}, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') dup3(r1, r0, 0x0) 18:32:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000014480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001400051f93ed3492ba649a9634dab8fb58b12dd25a80648c639b4c0ff94bfafb98e67ad1940d0300fc60", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001380)="80b820bfe6add7ed5fe0a67a14b453f846784cc992125fe6355ff8c9ea3c848d9a1c3b581ffcf8bfec1c285d6b", 0x2d}, {&(0x7f0000001580)="7cd22ff58fd521888fec3fb5b3b1d4b8cd19c73af90fe51f5f5ce26f74495486aef6b5a249101b4323cb9fd0d885f40ea355e3b336054ab2379b23de81852715f76ee4e2de20de730ccf2cab5331b5a81d88af6f7cdf0daf", 0x58}, {&(0x7f0000001600)="a029805bfb8ef6ee32e033be480740ca229def872cfc8224ad624c308295a0c9f5e38ff2cbdffd567994320d16f06dd082a28688a785301b83722df73b25378acb1feb29caf5f2bd5b4efb884fbec2d09c70db3a255bf12a6f92db76c3732534881dd44e018fc8ae6144193f96252920b580c7d844", 0x75}, {&(0x7f0000001680)="419a03ed1745a69116f147ce4709a4c7b0f007f9b72f54c9a03762687f62e62475c7bf2c772621c55b7320e0662b3fd5956c491ead85dc2fc7379651a0df6273ab2a4d9f15ea87481ff05f8cfdab1b3b1940d6b5b09ef44b7399751119095ebc24bbf8cdd22ece17aec54038f15a452b48c0a9abfcd9b87afcd8492163c20304e702338dc97a1197ddfc136bee5a6e68efb48cddf940e03d4bec6ed7b098e97ec56b630d93fae03a7dbe78c6ae1f9f841156bd4fed150ab8663428e2c06c07b8bb50176327678019939c296157b636e37ff7d3bb39ddd1c0a27f81d2a5e271b3051b140477e428cc", 0xe8}], 0x5}, 0x20048094) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008110040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x40040) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) 18:32:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x271) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 70.819973][T10067] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.842098][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.849410][T10067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.856812][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.864313][T10067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.871104][T10075] loop3: detected capacity change from 4 to 0 [ 70.881643][T10075] EXT4-fs (loop3): Can't mount with encoding and encryption [ 70.890371][T10069] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.909895][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.917381][T10069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.924723][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.931768][T10069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.943582][T10070] ================================================================== [ 70.951712][T10070] BUG: KCSAN: data-race in mm_update_next_owner / stop_this_handle [ 70.959710][T10070] [ 70.962041][T10070] write to 0xffff88813656b02c of 4 bytes by task 10065 on cpu 0: [ 70.970680][T10070] stop_this_handle+0x2ae/0x2f0 [ 70.975568][T10070] jbd2_journal_stop+0x573/0x6d0 [ 70.981734][T10070] __ext4_journal_stop+0x99/0x110 [ 70.986785][T10070] ext4_dirty_inode+0x9a/0xa0 [ 70.991488][T10070] __mark_inode_dirty+0x72/0x6f0 [ 70.996965][T10070] file_update_time+0x3a4/0x3e0 [ 71.001847][T10070] ext4_page_mkwrite+0x146/0xf50 [ 71.017408][T10070] do_shared_fault+0x218/0x680 [ 71.022233][T10070] handle_mm_fault+0x12f0/0x18a0 [ 71.027271][T10070] do_user_addr_fault+0x60c/0xc00 [ 71.032420][T10070] exc_page_fault+0x94/0x2a0 [ 71.037110][T10070] asm_exc_page_fault+0x1e/0x30 [ 71.041982][T10070] [ 71.044435][T10070] read to 0xffff88813656b02c of 4 bytes by task 10070 on cpu 1: [ 71.052072][T10070] mm_update_next_owner+0x1d9/0x4e0 [ 71.057391][T10070] exit_mm+0x33c/0x430 [ 71.061480][T10070] do_exit+0x41f/0x1690 [ 71.066170][T10070] do_group_exit+0xce/0x180 [ 71.071256][T10070] get_signal+0xdce/0x14e0 [ 71.075715][T10070] arch_do_signal_or_restart+0x2a/0x270 [ 71.081292][T10070] exit_to_user_mode_prepare+0x11a/0x1b0 [ 71.086961][T10070] syscall_exit_to_user_mode+0x20/0x40 [ 71.092440][T10070] do_syscall_64+0x45/0x80 [ 71.096869][T10070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.102791][T10070] [ 71.105442][T10070] Reported by Kernel Concurrency Sanitizer on: [ 71.112901][T10070] CPU: 1 PID: 10070 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 71.121614][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.131700][T10070] ================================================================== [ 71.139884][T10070] Kernel panic - not syncing: panic_on_warn set ... [ 71.146484][T10070] CPU: 1 PID: 10070 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 71.155684][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.166036][T10070] Call Trace: [ 71.169466][T10070] dump_stack+0x137/0x19d [ 71.173820][T10070] panic+0x1e7/0x5fa [ 71.177727][T10070] ? vprintk_emit+0x2fa/0x3e0 [ 71.207629][T10070] kcsan_report+0x67b/0x680 [ 71.213388][T10070] ? kcsan_setup_watchpoint+0x40b/0x470 [ 71.219289][T10070] ? mm_update_next_owner+0x1d9/0x4e0 [ 71.224948][T10070] ? exit_mm+0x33c/0x430 [ 71.230176][T10070] ? do_exit+0x41f/0x1690 [ 71.234529][T10070] ? do_group_exit+0xce/0x180 [ 71.239255][T10070] ? get_signal+0xdce/0x14e0 [ 71.244121][T10070] ? arch_do_signal_or_restart+0x2a/0x270 [ 71.250004][T10070] ? exit_to_user_mode_prepare+0x11a/0x1b0 [ 71.255971][T10070] ? syscall_exit_to_user_mode+0x20/0x40 [ 71.266177][T10070] ? do_syscall_64+0x45/0x80 [ 71.270965][T10070] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.277249][T10070] ? finish_task_switch+0x1b2/0x2a0 [ 71.282646][T10070] ? __schedule+0x3c1/0x580 [ 71.287178][T10070] ? plist_add+0x276/0x2c0 [ 71.292326][T10070] kcsan_setup_watchpoint+0x40b/0x470 [ 71.297759][T10070] mm_update_next_owner+0x1d9/0x4e0 [ 71.302992][T10070] exit_mm+0x33c/0x430 [ 71.307213][T10070] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 71.313077][T10070] ? taskstats_exit+0x334/0x730 [ 71.318516][T10070] ? acct_collect+0x3a4/0x400 [ 71.323241][T10070] do_exit+0x41f/0x1690 [ 71.327414][T10070] ? do_futex+0x1062/0x1cd0 [ 71.331957][T10070] do_group_exit+0xce/0x180 [ 71.336501][T10070] get_signal+0xdce/0x14e0 [ 71.341058][T10070] ? putname+0xa5/0xc0 [ 71.345251][T10070] ? kmem_cache_free+0x59/0x100 [ 71.350135][T10070] arch_do_signal_or_restart+0x2a/0x270 [ 71.355814][T10070] ? __se_sys_futex+0x2a8/0x390 [ 71.360691][T10070] exit_to_user_mode_prepare+0x11a/0x1b0 [ 71.366524][T10070] syscall_exit_to_user_mode+0x20/0x40 [ 71.372026][T10070] do_syscall_64+0x45/0x80 [ 71.376677][T10070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.382621][T10070] RIP: 0033:0x465ef9 [ 71.386544][T10070] Code: Unable to access opcode bytes at RIP 0x465ecf. [ 71.394010][T10070] RSP: 002b:00007f11a215c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.403427][T10070] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000465ef9 [ 71.411932][T10070] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 71.420735][T10070] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 71.429432][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 71.437699][T10070] R13: 00007ffe7d3f696f R14: 00007f11a215c300 R15: 0000000000022000 [ 71.448035][T10070] Kernel Offset: disabled [ 71.453436][T10070] Rebooting in 86400 seconds..