last executing test programs: 4m15.832527197s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m36.264762008s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m45.022912216s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m13.213610108s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m35.229604695s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 42.266504008s ago: executing program 3 (id=1065): creat(0x0, 0xc3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x8, {0x2}, 0x1}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x22d1, 0x0) close(r0) ioctl$TCSETSW2(r1, 0x5425, 0x0) unshare(0x68040200) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x3, 0xff}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 39.250357404s ago: executing program 3 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000005000000497b0800080000002849f4ff010000008489f8ff08d4020000100100f0ffffff5467e0ff08000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa10000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x34, &(0x7f00000005c0)=""/52, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x2, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000880)=[r0, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x4, 0x4}, {0x0, 0x4, 0x0, 0x2}, {0x4, 0x5, 0xd, 0x8}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x7}, {0x2, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x8, 0xc}, {0x5, 0x2, 0x4, 0x5}, {0x1, 0x2, 0x0, 0x2}], 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 38.20258731s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 36.581857005s ago: executing program 3 (id=1074): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0xff7ffff7) r4 = eventfd(0x4) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3, 0xffffffff, 0x2, r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.077274332s ago: executing program 3 (id=1077): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xb, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.395828353s ago: executing program 3 (id=1078): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES64=r4, @ANYRES32, @ANYRES32=r2], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x1}, 0x1}, 0x18) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0xce32, 0x4) r4 = openat$ttynull(0xffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) connect$packet(r5, &(0x7f0000000000)={0x11, 0xf6, r1, 0x1, 0x8, 0x6, @local}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={0xfd00, @l2tp={0x2, 0x0, @empty, 0x3, 0x1000000}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, @llc={0x1a, 0x205, 0x8, 0x2, 0xf8, 0x1, @remote}, 0x4fe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfd, 0xffffffff, 0xfffd}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) listen(0xffffffffffffffff, 0xfffffff7) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x20000) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4018641b, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x10, 0x200, &(0x7f0000000180)="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"}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2}, 0x10) 9.16110104s ago: executing program 1 (id=1121): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x3, 0x4}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000005000000497b0800080000002849f4ff010000008489f8ff08d4020000100100f0ffffff5467e0ff08000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa10000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x34, &(0x7f00000005c0)=""/52, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x2, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x4, 0x4}, {0x0, 0x4, 0x0, 0x2}, {0x4, 0x5, 0xd, 0x8}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x7}, {0x2, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x8, 0xc}, {0x5, 0x2, 0x4, 0x5}, {0x1, 0x2, 0x0, 0x2}], 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 6.996764963s ago: executing program 1 (id=1122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xd, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.859896535s ago: executing program 1 (id=1123): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES64=r4, @ANYRES32, @ANYRES32=r2], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r4, 0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) unlink(&(0x7f0000000340)='./file0\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 6.250930205s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r6, 0x8b30, 0x0) 6.013866238s ago: executing program 1 (id=1127): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x7, 0x1}, 0x0, {0xfd, 0x8}, 0xfe, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(0x0, 0x7) 5.300389269s ago: executing program 0 (id=1128): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) 5.132528962s ago: executing program 2 (id=1129): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048481) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.664186819s ago: executing program 0 (id=1130): timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) 4.159537366s ago: executing program 2 (id=1131): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x3, 0x4}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000005000000497b0800080000002849f4ff010000008489f8ff08d4020000100100f0ffffff5467e0ff08000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa10000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x34, &(0x7f00000005c0)=""/52, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x2, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x4, 0x4}, {0x0, 0x4, 0x0, 0x2}, {0x4, 0x5, 0xd, 0x8}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x7}, {0x2, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x8, 0xc}, {0x5, 0x2, 0x4, 0x5}, {0x1, 0x2, 0x0, 0x2}], 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 4.072078948s ago: executing program 1 (id=1132): r0 = socket(0x10, 0x3, 0x0) getpeername$netrom(r0, &(0x7f0000000000)={{}, [@bcast, @netrom, @rose, @remote, @bcast, @rose, @null, @bcast]}, &(0x7f00000000c0)=0x48) r1 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000080000000000000bde15415ae1c7bbf7ee68621696c6f3c50a9e3fb398fa97b3b22657ecb3e641ed4a33a2ad12a8848c75b47bd2c8232382f57b951356787154e205d74be10fdcfbaac08efc921fad437da12899e9162cf2017772a9c57690f4a2ca611ffaa536111a10811e5d3a01c3a38f7f490741ee5c3ddbcd4e56a8e4e5c18df31f055e7e1f784f8676088f8688b32cfd1906d93cf9451079c1309c5c1e3fdd4139fdbba727a5c"], 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2501000000040007801fd53db22d2574f7082fcbf8649b9c3606a6540d819f1a60727ad0c0507a387fb534e24d8c7f5e0740aa3dd593990749f29fbf95d4ebd0543d2d9346a38b64a92a021593defdd69ecf8d2921b5ab1e4516ac4c0c3b78d4a02c223256b01c6b05fbdb5d948e1a37381c663d522b405a4fea11688f5f2b03f47fc01f063c1c430b6962893e3f7fb78d31c2778d4625b23046c7000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000160000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x14}]}}]}, 0x3c}}, 0x0) 2.118626448s ago: executing program 2 (id=1133): socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r1}, 0x18) socket$kcm(0x10, 0x2, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x8000000000000000, 0x8, 0x31, 0x7ffffffc}, 0x0, 0x0) 1.788080962s ago: executing program 0 (id=1134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x3, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x7, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x5, 0x0, [{0x731b62bb40bcb0f6, 0x9, 0x3, 0x4, 0x800, 0xfffffc01, 0x7}, {0xc0000001, 0x8, 0x0, 0x8001, 0xb8c8, 0x8001, 0x7}, {0x40000001, 0x0, 0x3, 0x2, 0x8, 0x0, 0xfffffff5}, {0x0, 0xffff8000, 0x0, 0xeb1b, 0x10, 0x27, 0x8}, {0xa, 0x28b, 0x2, 0x2, 0x2, 0x1, 0x5}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.704016994s ago: executing program 2 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r2], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) 1.607160685s ago: executing program 0 (id=1136): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) shutdown(0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 0 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.430274][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.558389][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.636305][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.667607][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.736407][ T6014] bond0 speed is unknown, defaulting to 1000 [ 246.745043][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.782264][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.816834][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.854107][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.871659][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.070572][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.121928][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.133951][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.152306][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.877568][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.907330][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.101852][ T5760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.110799][ T5760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.162874][ T5760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.171715][ T5760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.435005][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.460491][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.486500][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.591056][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.620796][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.878956][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.134248][ T6049] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 249.767731][ T6048] overlayfs: failed to resolve './file1': -2 [ 250.380720][ T6063] Bluetooth: hci0: service_discovery: too big uuid_count value 65062 [ 250.769220][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.987278][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.139841][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.293526][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.526765][ T6076] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 251.540295][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.468'. [ 251.564281][ T6076] bond1: (slave vcan1): Error -95 calling set_mac_address [ 251.646336][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 251.967750][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.468'. [ 252.365462][ T6078] Process accounting resumed [ 254.854472][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.862742][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.864375][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.875522][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.877379][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 254.878402][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.035150][ T1042] block nbd1: Attempted send on invalid socket [ 255.035870][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.069575][ T6115] efs: cannot read volume header [ 255.179545][ T6118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 255.678480][ T6110] bond0 speed is unknown, defaulting to 1000 [ 255.846432][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853499][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886580][ T6118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 256.063355][ T6103] loop3: detected capacity change from 0 to 32768 [ 256.139055][ T6103] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.474 (6103) [ 256.357235][ T6103] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.376399][ T6103] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 256.390957][ T6103] BTRFS info (device loop3): enabling auto defrag [ 256.398336][ T6103] BTRFS info (device loop3): doing ref verification [ 256.407953][ T6103] BTRFS info (device loop3): use no compression [ 256.414762][ T6103] BTRFS info (device loop3): force clearing of disk cache [ 256.422089][ T6103] BTRFS info (device loop3): max_inline at 4096 [ 256.491179][ T6103] BTRFS info (device loop3): disabling free space tree [ 256.697089][ T6103] BTRFS error (device loop3): open_ctree failed: -12 [ 256.967969][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 257.168458][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4377) [ 257.848549][ T6164] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 257.945880][ T6164] bond1: (slave vcan1): Error -95 calling set_mac_address [ 258.031545][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 258.096286][ T6110] chnl_net:caif_netlink_parms(): no params data found [ 258.695305][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 259.053499][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 259.098198][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 259.327159][ T46] device hsr_slave_0 left promiscuous mode [ 259.427933][ T6181] Process accounting resumed [ 259.920440][ T46] device hsr_slave_1 left promiscuous mode [ 259.965691][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 260.048661][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.078541][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.254420][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.279383][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.655322][ T46] device bridge_slave_1 left promiscuous mode [ 260.693750][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.848571][ T1042] block nbd2: Attempted send on invalid socket [ 260.854955][ T1042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.882605][ T6209] efs: cannot read volume header [ 261.123048][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 262.202027][ T46] device bridge_slave_0 left promiscuous mode [ 262.210355][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.320059][ T46] device veth1_macvtap left promiscuous mode [ 262.333523][ T46] device veth0_macvtap left promiscuous mode [ 262.353666][ T46] device veth1_vlan left promiscuous mode [ 262.361087][ T46] device veth0_vlan left promiscuous mode [ 262.653275][ T6202] loop3: detected capacity change from 0 to 32768 [ 262.720778][ T6202] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.789247][ T6202] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 262.806970][ T6202] BTRFS info (device loop3): enabling auto defrag [ 262.844954][ T6202] BTRFS info (device loop3): doing ref verification [ 262.866853][ T6202] BTRFS info (device loop3): use no compression [ 262.903023][ T6202] BTRFS info (device loop3): force clearing of disk cache [ 262.910263][ T6202] BTRFS info (device loop3): max_inline at 4096 [ 262.942583][ T6202] BTRFS info (device loop3): disabling free space tree [ 263.203208][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 263.290798][ T6202] BTRFS error (device loop3): open_ctree failed: -12 [ 263.298861][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4377) [ 264.025966][ T46] team0 (unregistering): Port device team_slave_1 removed [ 264.074890][ T46] team0 (unregistering): Port device team_slave_0 removed [ 264.125220][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.179677][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.740669][ T46] bond0 (unregistering): Released all slaves [ 264.835532][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 264.851018][ T6257] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 264.888271][ T6258] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 264.904313][ T6258] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 264.935434][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 264.964504][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.982114][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.999209][ T6110] device bridge_slave_0 entered promiscuous mode [ 265.025517][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.066010][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.267599][ T6110] device bridge_slave_1 entered promiscuous mode [ 265.462123][ T6110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.488428][ T6110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.035562][ T6110] team0: Port device team_slave_0 added [ 266.320929][ T6110] team0: Port device team_slave_1 added [ 266.492989][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.500101][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.872083][ T6285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 266.881943][ T6110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.914429][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.230343][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.504644][ T6285] Process accounting resumed [ 268.479546][ T6110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.683504][ T6110] device hsr_slave_0 entered promiscuous mode [ 268.709797][ T6110] device hsr_slave_1 entered promiscuous mode [ 268.765343][ T6110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.785519][ T6110] Cannot create hsr debugfs directory [ 269.368168][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.509'. [ 269.384355][ T6290] loop3: detected capacity change from 0 to 32768 [ 269.468427][ T6290] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.522505][ T6290] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 269.553328][ T6290] BTRFS info (device loop3): enabling auto defrag [ 269.559850][ T6290] BTRFS info (device loop3): doing ref verification [ 269.640985][ T6290] BTRFS info (device loop3): use no compression [ 269.681236][ T6290] BTRFS info (device loop3): force clearing of disk cache [ 269.705174][ T6290] BTRFS info (device loop3): max_inline at 4096 [ 269.721954][ T6290] BTRFS info (device loop3): disabling free space tree [ 269.756731][ T6310] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 270.069121][ T6290] BTRFS info (device loop3): enabling ssd optimizations [ 270.088766][ T6316] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 270.144666][ T6316] bond1: (slave vcan1): Error -95 calling set_mac_address [ 270.152041][ T6290] BTRFS info (device loop3): rebuilding free space tree [ 270.247765][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 270.557643][ T6290] BTRFS info (device loop3): disabling free space tree [ 270.610587][ T6290] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 270.710165][ T6290] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 270.894986][ T6110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.001541][ T6110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.059509][ T4251] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.076213][ T6110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.109758][ T6110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.491374][ T6356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.516'. [ 272.600744][ T6336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.511'. [ 273.739102][ T6361] bond0 speed is unknown, defaulting to 1000 [ 274.042773][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.059959][ T6356] Process accounting resumed [ 274.237496][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.300245][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.377237][ T6110] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.422998][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 274.505849][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.554307][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.874176][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.881418][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.283230][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.575914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.621666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.661471][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.668791][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.811258][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.867085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.913495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.105206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.188692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.208784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.227645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.243373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.275573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.294641][ T6395] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 276.307538][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.317668][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.332202][ T6110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.357668][ T6399] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 276.371764][ T6399] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 276.397127][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 277.756133][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.768081][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.839636][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.530'. [ 278.043350][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.798182][ T6422] Process accounting resumed [ 278.928855][ T6429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.531'. [ 279.004934][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'. [ 279.278128][ T6408] loop0: detected capacity change from 0 to 32768 [ 279.351685][ T6408] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.527 (6408) [ 279.471714][ T6408] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.570330][ T6408] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 279.640181][ T6408] BTRFS info (device loop0): enabling auto defrag [ 279.675680][ T6408] BTRFS info (device loop0): doing ref verification [ 279.831805][ T6408] BTRFS info (device loop0): use no compression [ 279.882631][ T6408] BTRFS info (device loop0): force clearing of disk cache [ 279.922736][ T6408] BTRFS info (device loop0): max_inline at 4096 [ 279.942411][ T6408] BTRFS info (device loop0): disabling free space tree [ 280.091871][ T6408] BTRFS error (device loop0): open_ctree failed: -12 [ 280.101059][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4377) [ 281.139321][ T6478] bond0 speed is unknown, defaulting to 1000 [ 282.178601][ T6485] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 282.229058][ T6485] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 282.272800][ T6485] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 282.541082][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 282.575317][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.605840][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.775238][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.785696][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.888235][ T6110] device veth0_vlan entered promiscuous mode [ 282.908853][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.924120][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.002883][ T6110] device veth1_vlan entered promiscuous mode [ 283.121252][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'. [ 283.374648][ T6110] device veth0_macvtap entered promiscuous mode [ 283.418477][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.430715][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.545'. [ 283.431430][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.564483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.602364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.690408][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.401173][ T6508] Process accounting resumed [ 284.449625][ T6110] device veth1_macvtap entered promiscuous mode [ 284.647954][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.759680][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.770157][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.788806][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.799187][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.810735][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.821121][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.832351][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.889653][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.920067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.961126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.012267][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.082379][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.132635][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.198645][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.256016][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.542075][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.938513][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.102672][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.287621][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.362066][ T6110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.429380][ T6110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.503371][ T6110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.541260][ T6110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.586493][ T6533] bond0 speed is unknown, defaulting to 1000 [ 287.593008][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.604677][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.706555][ T6541] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 287.753660][ T6542] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 287.792747][ T6542] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 287.879416][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 287.930154][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.970647][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.067135][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.106997][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.119823][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.138208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.571847][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.555'. [ 291.030877][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 291.342181][ T6569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 292.264021][ T6569] Process accounting resumed [ 292.638373][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.727122][ T6583] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 292.781137][ T6586] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 292.793924][ T6586] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 292.813081][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 292.938736][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.376842][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.931554][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.614799][ T6594] loop0: detected capacity change from 0 to 32768 [ 294.663619][ T6594] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.735557][ T6594] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 294.810655][ T6594] BTRFS info (device loop0): enabling auto defrag [ 294.993063][ T6594] BTRFS info (device loop0): doing ref verification [ 295.000185][ T6594] BTRFS info (device loop0): use no compression [ 295.045324][ T6594] BTRFS info (device loop0): force clearing of disk cache [ 295.056549][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.066753][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.077249][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.087347][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.095328][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.102906][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.231099][ T6625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.572'. [ 295.287832][ T6624] netlink: 32 bytes leftover after parsing attributes in process `syz.3.573'. [ 295.392593][ T6594] BTRFS info (device loop0): max_inline at 4096 [ 295.528569][ T6622] bond0 speed is unknown, defaulting to 1000 [ 295.633150][ T6594] BTRFS info (device loop0): disabling free space tree [ 295.822633][ T6594] BTRFS info (device loop0): enabling ssd optimizations [ 295.885526][ T6594] BTRFS info (device loop0): rebuilding free space tree [ 295.994270][ T6594] BTRFS info (device loop0): disabling free space tree [ 296.048992][ T6624] Process accounting resumed [ 296.082504][ T6594] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.181316][ T6594] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 297.103681][ T6655] bond0 speed is unknown, defaulting to 1000 [ 297.202598][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 297.238649][ T4260] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.796050][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 297.821016][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 297.863676][ T6662] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 297.885375][ T6662] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 297.927794][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 297.942171][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (4377) [ 299.371138][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 299.691505][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.703565][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.711902][ T6622] device bridge_slave_0 entered promiscuous mode [ 300.252863][ T6705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.586'. [ 300.264679][ T6707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.585'. [ 300.666404][ T6705] Process accounting resumed [ 301.075004][ T1042] block nbd1: Attempted send on invalid socket [ 301.081790][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.103987][ T6718] efs: cannot read volume header [ 301.470622][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 301.581285][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.599382][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.642296][ T6622] device bridge_slave_1 entered promiscuous mode [ 301.968291][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.998662][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.233264][ T6622] team0: Port device team_slave_0 added [ 302.288850][ T6622] team0: Port device team_slave_1 added [ 302.479583][ T6714] loop0: detected capacity change from 0 to 32768 [ 302.534261][ T6714] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.591515][ T6714] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 302.630774][ T6714] BTRFS info (device loop0): enabling auto defrag [ 302.670436][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.695645][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.703163][ T6714] BTRFS info (device loop0): doing ref verification [ 302.843757][ T6714] BTRFS info (device loop0): use no compression [ 302.853001][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.872713][ T6714] BTRFS info (device loop0): force clearing of disk cache [ 302.890167][ T6714] BTRFS info (device loop0): max_inline at 4096 [ 302.906240][ T6714] BTRFS info (device loop0): disabling free space tree [ 303.258439][ T4352] device hsr_slave_0 left promiscuous mode [ 303.266461][ T4352] device hsr_slave_1 left promiscuous mode [ 303.279719][ T6714] BTRFS info (device loop0): enabling ssd optimizations [ 303.287757][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.296762][ T6714] BTRFS info (device loop0): rebuilding free space tree [ 303.303386][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.529477][ T6714] BTRFS info (device loop0): disabling free space tree [ 303.537659][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 303.599387][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.685221][ T6714] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 303.738294][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.870571][ T6714] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 303.986344][ T4352] device bridge_slave_1 left promiscuous mode [ 304.015197][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.094491][ T4352] device bridge_slave_0 left promiscuous mode [ 304.121323][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.151747][ T4260] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.514740][ T4352] device veth1_macvtap left promiscuous mode [ 304.521051][ T4352] device veth0_macvtap left promiscuous mode [ 304.581170][ T4352] device veth1_vlan left promiscuous mode [ 304.633170][ T4352] device veth0_vlan left promiscuous mode [ 304.911898][ T1042] block nbd1: Attempted send on invalid socket [ 304.921026][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.948226][ T6781] efs: cannot read volume header [ 305.440169][ T6783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.598'. [ 305.879566][ T6783] Process accounting resumed [ 307.384117][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 307.460591][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 307.557048][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.769672][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.370342][ T4352] bond0 (unregistering): Released all slaves [ 308.509720][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 308.529085][ T6738] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 308.540358][ T6738] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 308.564944][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 308.602634][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.609839][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.645221][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.776272][ T6622] device hsr_slave_0 entered promiscuous mode [ 309.633767][ T6622] device hsr_slave_1 entered promiscuous mode [ 309.654254][ T6622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.938183][ T6622] Cannot create hsr debugfs directory [ 311.234111][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.612'. [ 311.976556][ T6816] Process accounting resumed [ 313.550021][ T1042] block nbd1: Attempted send on invalid socket [ 313.556356][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 313.995071][ T6839] efs: cannot read volume header [ 314.712532][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 316.398191][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 317.215499][ T6622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.287502][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.303191][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.361215][ T6879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'. [ 317.491015][ T6622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.549825][ T6622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.569062][ T6885] binder: BINDER_SET_CONTEXT_MGR already set [ 317.585772][ T6885] binder: 6884:6885 ioctl 4018620d 2000000001c0 returned -16 [ 317.622172][ T6622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.718735][ T6879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'. [ 318.075331][ T6879] Process accounting resumed [ 318.170002][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.249774][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.271105][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.336988][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.424152][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.451871][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.483710][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.490876][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.583620][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.631836][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.670136][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.860368][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.867598][ T6835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.942959][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.973338][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.054265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.080247][ T6901] loop2: detected capacity change from 0 to 32768 [ 319.107329][ T6901] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.628 (6901) [ 319.130135][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.156195][ T6901] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.180610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.213614][ T6901] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 319.233179][ T6901] BTRFS info (device loop2): enabling auto defrag [ 319.239691][ T6901] BTRFS info (device loop2): doing ref verification [ 319.297360][ T6622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.409422][ T6901] BTRFS info (device loop2): use no compression [ 319.427819][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.472534][ T6901] BTRFS info (device loop2): force clearing of disk cache [ 319.481104][ T6901] BTRFS info (device loop2): max_inline at 4096 [ 319.499212][ T6901] BTRFS info (device loop2): disabling free space tree [ 319.732227][ T6901] BTRFS info (device loop2): enabling ssd optimizations [ 320.129944][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.154124][ T6901] BTRFS info (device loop2): rebuilding free space tree [ 320.157755][ T52] block nbd1: Attempted send on invalid socket [ 320.167483][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.202600][ T6923] efs: cannot read volume header [ 320.213694][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.259569][ T6901] BTRFS info (device loop2): disabling free space tree [ 320.292866][ T6901] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 320.294516][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.333771][ T6901] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 320.344149][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.345725][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.426120][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.488139][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.670088][ T26] kauditd_printk_skb: 318 callbacks suppressed [ 320.670109][ T26] audit: type=1800 audit(1751156538.352:338): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.628" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 321.078146][ T6949] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 321.133266][ T6949] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 321.183260][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 321.947585][ T6955] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 322.127723][ T26] audit: type=1800 audit(1751156539.812:339): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.628" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 322.166868][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.190108][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.239934][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.822599][ T6970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.638'. [ 322.995558][ T6973] binder: BINDER_SET_CONTEXT_MGR already set [ 323.016192][ T4252] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 323.033278][ T6973] binder: 6972:6973 ioctl 4018620d 2000000001c0 returned -16 [ 323.544486][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.555394][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.601148][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.620013][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.632472][ T6622] device veth0_vlan entered promiscuous mode [ 323.641003][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.650476][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.681063][ T6622] device veth1_vlan entered promiscuous mode [ 323.736163][ T6970] Process accounting resumed [ 323.876433][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.927323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.078151][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.413353][ T1042] block nbd3: Attempted send on invalid socket [ 324.537196][ T1042] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.553743][ T6996] efs: cannot read volume header [ 324.749642][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.798308][ T6622] device veth0_macvtap entered promiscuous mode [ 324.859658][ T6622] device veth1_macvtap entered promiscuous mode [ 324.958071][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.971608][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.112287][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.212519][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.383195][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.416206][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.250018][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.292451][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.367854][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.626505][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.793284][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.870559][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.911785][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.953260][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.998165][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.040928][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.106294][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.149540][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.185520][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.231765][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.255702][ T7016] netlink: 'syz.3.646': attribute type 4 has an invalid length. [ 329.278263][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.313706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.350046][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.397039][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.463687][ T6622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.496579][ T6622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.524489][ T6622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.621327][ T6622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.035828][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.068707][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.121304][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.188709][ T4873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.247930][ T4873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.324896][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.457989][ T7043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.653'. [ 330.856109][ T7043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.653'. [ 331.760362][ T7043] Process accounting resumed [ 332.027175][ T7037] loop0: detected capacity change from 0 to 32768 [ 332.248111][ T7037] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.652 (7037) [ 332.268509][ T52] block nbd1: Attempted send on invalid socket [ 332.275592][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.289643][ T7063] efs: cannot read volume header [ 332.438329][ T7037] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 332.618005][ T7037] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 332.661455][ T4440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.682540][ T7037] BTRFS info (device loop0): enabling auto defrag [ 332.690339][ T7037] BTRFS info (device loop0): doing ref verification [ 332.726341][ T7037] BTRFS info (device loop0): use no compression [ 332.747607][ T7037] BTRFS info (device loop0): force clearing of disk cache [ 332.778041][ T7037] BTRFS info (device loop0): max_inline at 4096 [ 332.809243][ T7037] BTRFS info (device loop0): disabling free space tree [ 333.235132][ T7037] BTRFS error (device loop0): open_ctree failed: -12 [ 333.235605][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4377) [ 333.366860][ T4440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.628408][ T4440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.328712][ T4440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.371112][ T7098] overlayfs: failed to resolve './file0': -2 [ 336.573616][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.585329][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.594679][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.604907][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.614262][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.621743][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.851510][ T7119] bond0 speed is unknown, defaulting to 1000 [ 337.734271][ T52] block nbd0: Attempted send on invalid socket [ 337.740716][ T52] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 337.750987][ T52] gfs2: error 10 reading superblock [ 337.889295][ T1042] block nbd1: Attempted send on invalid socket [ 337.895557][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.906874][ T7132] efs: cannot read volume header [ 338.647562][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 340.379294][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 340.807959][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 340.817642][ T7162] overlayfs: failed to resolve './file0': -2 [ 341.293460][ T7170] bond0 speed is unknown, defaulting to 1000 [ 341.495542][ T4440] device hsr_slave_0 left promiscuous mode [ 341.529963][ T4440] device hsr_slave_1 left promiscuous mode [ 341.551612][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.570459][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.584003][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.592131][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.608453][ T4440] device bridge_slave_1 left promiscuous mode [ 341.618405][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.636488][ T4440] device bridge_slave_0 left promiscuous mode [ 341.647656][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.719152][ T4440] device veth1_macvtap left promiscuous mode [ 341.726789][ T4440] device veth0_macvtap left promiscuous mode [ 341.736439][ T4440] device veth1_vlan left promiscuous mode [ 341.749433][ T4440] device veth0_vlan left promiscuous mode [ 342.367007][ T7180] loop2: detected capacity change from 0 to 32768 [ 343.510308][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 343.916099][ T7180] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 343.969927][ T7180] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 344.006242][ T7180] BTRFS info (device loop2): enabling auto defrag [ 344.024444][ T7180] BTRFS info (device loop2): doing ref verification [ 344.038235][ T7180] BTRFS info (device loop2): use no compression [ 344.064242][ T7180] BTRFS info (device loop2): force clearing of disk cache [ 344.110990][ T7180] BTRFS info (device loop2): max_inline at 4096 [ 344.242584][ T7180] BTRFS info (device loop2): disabling free space tree [ 345.014648][ T7180] BTRFS error (device loop2): open_ctree failed: -12 [ 345.071070][ T4363] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4363) [ 345.527387][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 345.568813][ T7217] overlayfs: failed to resolve './file0': -2 [ 346.088173][ T52] block nbd2: Attempted send on invalid socket [ 346.095069][ T52] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 346.105317][ T52] gfs2: error 10 reading superblock [ 346.151030][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 346.215429][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 346.339481][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.476000][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.625943][ T4440] bond0 (unregistering): Released all slaves [ 347.731091][ T7175] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 347.741563][ T7175] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 347.750997][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 347.773314][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.780478][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.816832][ T7119] device bridge_slave_0 entered promiscuous mode [ 347.843585][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.861821][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.894622][ T7119] device bridge_slave_1 entered promiscuous mode [ 348.071493][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.384431][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.757269][ T7119] team0: Port device team_slave_0 added [ 350.769474][ T7119] team0: Port device team_slave_1 added [ 351.191410][ T1042] block nbd1: Attempted send on invalid socket [ 351.369905][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.383067][ T7251] efs: cannot read volume header [ 351.460314][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.468099][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.494905][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.520110][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 351.547933][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.590873][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.804856][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 351.870649][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.140041][ T7119] device hsr_slave_0 entered promiscuous mode [ 352.625959][ T7119] device hsr_slave_1 entered promiscuous mode [ 352.745236][ T7119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.422427][ T7119] Cannot create hsr debugfs directory [ 354.202173][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 354.218027][ T7285] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 354.273316][ T7285] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 354.421117][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 354.561256][ T7252] Process accounting resumed [ 357.129306][ T1042] block nbd0: Attempted send on invalid socket [ 357.135610][ T1042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 357.147618][ T7306] efs: cannot read volume header [ 358.672395][ T7119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.927596][ T7119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.319601][ T7119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.370218][ T7119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.582418][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.590059][ T7349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.163925][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.171424][ T7349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.331472][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.722'. [ 363.008996][ T4440] device hsr_slave_0 left promiscuous mode [ 363.088566][ T4440] device hsr_slave_1 left promiscuous mode [ 363.275035][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 363.328787][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.337009][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.622748][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.682848][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 363.690623][ T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 363.719132][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.779327][ T126] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.792654][ T4440] device bridge_slave_1 left promiscuous mode [ 363.819782][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.829908][ T126] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.862434][ T126] usb 3-1: Product: syz [ 363.892638][ T126] usb 3-1: Manufacturer: syz [ 363.911501][ T126] usb 3-1: SerialNumber: syz [ 363.927149][ T4440] device bridge_slave_0 left promiscuous mode [ 363.943485][ T126] usb 3-1: config 0 descriptor?? [ 363.950690][ T7371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.960065][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.003503][ T126] hub 3-1:0.0: bad descriptor, ignoring hub [ 364.009479][ T126] hub: probe of 3-1:0.0 failed with error -5 [ 364.100122][ T4440] device veth1_macvtap left promiscuous mode [ 364.112826][ T4440] device veth0_macvtap left promiscuous mode [ 364.136891][ T4440] device veth1_vlan left promiscuous mode [ 364.152625][ T4440] device veth0_vlan left promiscuous mode [ 365.377765][ T7359] Process accounting resumed [ 366.351230][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 366.444664][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 366.522087][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.597969][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.208640][ T4440] bond0 (unregistering): Released all slaves [ 367.310104][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 367.333430][ T7401] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 367.372697][ T7401] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 367.400141][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 367.423761][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 367.468473][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.598710][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.633778][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.678378][ T4365] usb 3-1: USB disconnect, device number 8 [ 367.684919][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.726270][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.773197][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.808090][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.815290][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.192930][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 368.202695][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.378305][ T7418] netlink: 'syz.2.736': attribute type 4 has an invalid length. [ 368.418396][ T126] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.488023][ T126] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 368.528884][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.580525][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.638680][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.694191][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.701454][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.780127][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 368.908159][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.918032][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 369.026857][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.089747][ T126] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.126214][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.532827][ T126] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.554435][ T126] usb 4-1: Product: syz [ 369.558861][ T126] usb 4-1: Manufacturer: syz [ 369.580039][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 369.590637][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.601370][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 369.633328][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.663644][ T126] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 369.669643][ T126] cdc_wdm 4-1:1.0: Unknown control protocol [ 369.675293][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.707145][ T7119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.736103][ T7119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.768296][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.782110][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.922470][ T4265] Bluetooth: hci5: command 0x1003 tx timeout [ 369.933178][ T4264] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 369.971104][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.000876][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.031251][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.087444][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.018185][ T6471] usb 4-1: USB disconnect, device number 3 [ 373.194966][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 373.338270][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 373.385818][ T7461] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 373.460748][ T7461] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 373.491338][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 373.550599][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.561958][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.609350][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.699308][ T7472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.749'. [ 374.066724][ T7474] bond0 speed is unknown, defaulting to 1000 [ 376.200781][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 376.678613][ T7511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 376.753279][ T7511] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 376.814415][ T7511] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 376.876842][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 376.987314][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.006645][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.466812][ T7119] device veth0_vlan entered promiscuous mode [ 378.506132][ T7519] netlink: 'syz.1.764': attribute type 4 has an invalid length. [ 378.517210][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.546062][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.588591][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.628169][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.701742][ T7119] device veth1_vlan entered promiscuous mode [ 378.725984][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.733086][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.849049][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.915498][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.970465][ T7119] device veth0_macvtap entered promiscuous mode [ 379.020687][ T7119] device veth1_macvtap entered promiscuous mode [ 379.082226][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.104290][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.147584][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.200064][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.233497][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.323518][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.331897][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.419491][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.477284][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.540599][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.566433][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.606704][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.641414][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.698078][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.718858][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.740873][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.804552][ T7119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.840734][ T7119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.879887][ T7119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.912393][ T7119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.192076][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 381.035890][ T7554] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 381.088346][ T7554] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 381.184258][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 381.344969][ T7568] netlink: 'syz.0.779': attribute type 4 has an invalid length. [ 381.378184][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.500882][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.174700][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.308515][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.516473][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.542739][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.081156][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.356092][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.489315][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.610727][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.317299][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 385.349832][ T7618] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 385.402142][ T7618] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 385.441290][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 386.175812][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.186581][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.196163][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.204735][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.214502][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.221866][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.956982][ T7638] bond0 speed is unknown, defaulting to 1000 [ 388.242989][ T7666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.804'. [ 388.672815][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 389.583684][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 389.655302][ T7679] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 389.666178][ T7679] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 389.826290][ T75] device hsr_slave_0 left promiscuous mode [ 389.855175][ T75] device hsr_slave_1 left promiscuous mode [ 389.880591][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.916188][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.950740][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.987554][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.032549][ T75] device bridge_slave_1 left promiscuous mode [ 390.067578][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.128414][ T75] device bridge_slave_0 left promiscuous mode [ 390.155485][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.722383][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 392.803310][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 392.862462][ T75] device veth1_macvtap left promiscuous mode [ 392.888013][ T75] device veth0_macvtap left promiscuous mode [ 392.920782][ T75] device veth1_vlan left promiscuous mode [ 392.938618][ T75] device veth0_vlan left promiscuous mode [ 394.173233][ T75] team0 (unregistering): Port device team_slave_1 removed [ 394.301350][ T75] team0 (unregistering): Port device team_slave_0 removed [ 394.557745][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.884143][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 395.485996][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.214130][ T75] bond0 (unregistering): Released all slaves [ 396.688489][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 396.726082][ T7691] netlink: 'syz.3.808': attribute type 4 has an invalid length. [ 397.703275][ T7722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.816'. [ 397.714993][ T7638] chnl_net:caif_netlink_parms(): no params data found [ 398.013526][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.020879][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.030013][ T7638] device bridge_slave_0 entered promiscuous mode [ 398.039690][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.053130][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.064979][ T7638] device bridge_slave_1 entered promiscuous mode [ 398.217023][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.280872][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.446435][ T7638] team0: Port device team_slave_0 added [ 398.462127][ T7638] team0: Port device team_slave_1 added [ 398.518739][ T7723] syz.2.816 (7723): drop_caches: 1 [ 398.620967][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.680854][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.775877][ T7638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.829564][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.837135][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.988127][ T7638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.220307][ T7638] device hsr_slave_0 entered promiscuous mode [ 399.257117][ T7638] device hsr_slave_1 entered promiscuous mode [ 400.933370][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 400.976412][ T7779] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 401.082854][ T7779] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 401.120481][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 401.784963][ T7638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.808466][ T7638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.877413][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'. [ 402.713750][ T7638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.767083][ T7797] Process accounting resumed [ 402.856628][ T7638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.110807][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.161140][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.173185][ T7816] overlayfs: missing 'lowerdir' [ 404.199044][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.251221][ T7638] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.280522][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.332765][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.363277][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.370475][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.431320][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.458135][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.477838][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.512007][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.519269][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.738135][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.801699][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.626070][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.643956][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.653146][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.664485][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.674276][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.687818][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.721458][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.779210][ T7638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.811321][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.869013][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.908347][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.149391][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 406.191349][ T7845] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 406.232898][ T7845] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 406.284963][ T7851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.844'. [ 406.306429][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 406.856543][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.846'. [ 407.661156][ T7864] Process accounting resumed [ 407.679833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.473527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.494966][ T7638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.605408][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.856'. [ 409.654864][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 409.696834][ T7904] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 409.731392][ T7904] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 409.865229][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 409.904907][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.858'. [ 410.194147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.223271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.300083][ T7638] device veth0_vlan entered promiscuous mode [ 410.325353][ T7638] device veth1_vlan entered promiscuous mode [ 410.354537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.373373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.483656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.546948][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.860'. [ 410.578885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.682805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.214525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.663322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.755135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.819871][ T7638] device veth0_macvtap entered promiscuous mode [ 412.867830][ T7638] device veth1_macvtap entered promiscuous mode [ 412.990550][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.030707][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.067299][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.112203][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.147473][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.170798][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.186983][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.219881][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.255166][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.282140][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.330597][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.347381][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.373135][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.389606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.399904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.419446][ T7638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.447597][ T7638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.478818][ T7638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.509973][ T7638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.815031][ T4692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.835356][ T4692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.907236][ T7956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.868'. [ 413.952488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.010905][ T4692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.028084][ T7958] overlayfs: missing 'lowerdir' [ 414.046541][ T4692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.102398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.163875][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 414.231383][ T7964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.871'. [ 414.232864][ T7966] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 414.355614][ T7966] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 414.580213][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.872'. [ 417.174052][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.378825][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.599237][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.725496][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.716309][ T8030] netlink: 'syz.3.883': attribute type 4 has an invalid length. [ 420.949345][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 421.034456][ T8033] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 421.077822][ T8039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.884'. [ 421.205136][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.215379][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.225233][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.235884][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.243619][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 421.282791][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.489266][ T8040] bond0 speed is unknown, defaulting to 1000 [ 421.823150][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.886'. [ 422.644930][ T8054] overlayfs: missing 'lowerdir' [ 422.721302][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'. [ 423.381158][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 423.602522][ T4352] device hsr_slave_0 left promiscuous mode [ 423.657015][ T4352] device hsr_slave_1 left promiscuous mode [ 423.667740][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.682399][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.710757][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.926172][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.954376][ T4352] device bridge_slave_1 left promiscuous mode [ 423.963457][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.783781][ T4352] device bridge_slave_0 left promiscuous mode [ 424.790092][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.442840][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 426.569759][ T4352] device veth1_macvtap left promiscuous mode [ 426.618836][ T4352] device veth0_macvtap left promiscuous mode [ 426.660609][ T4352] device veth1_vlan left promiscuous mode [ 426.694951][ T4352] device veth0_vlan left promiscuous mode [ 426.980009][ T8057] Process accounting resumed [ 427.522453][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 428.431903][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 428.486718][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 428.539157][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.592853][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.189836][ T4352] bond0 (unregistering): Released all slaves [ 429.317024][ T8093] netlink: 'syz.1.896': attribute type 4 has an invalid length. [ 429.348063][ T8099] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 429.408471][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 429.435063][ T8078] bond0 speed is unknown, defaulting to 1000 [ 429.602867][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 429.887614][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.900'. [ 430.728980][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 432.442734][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.487611][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.527493][ T8040] device bridge_slave_0 entered promiscuous mode [ 432.561235][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'. [ 432.596715][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.629637][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.642202][ T8040] device bridge_slave_1 entered promiscuous mode [ 432.925643][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.380047][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.405576][ T8161] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 433.436720][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 433.490411][ T8040] team0: Port device team_slave_0 added [ 433.530750][ T8040] team0: Port device team_slave_1 added [ 433.860891][ T8167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.913'. [ 434.549415][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.683537][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.884582][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.930725][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.067812][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.104624][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.957663][ T8040] device hsr_slave_0 entered promiscuous mode [ 435.990240][ T8040] device hsr_slave_1 entered promiscuous mode [ 436.786834][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 436.879195][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 437.175687][ T8200] netlink: 'syz.1.924': attribute type 1 has an invalid length. [ 437.187898][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 437.439754][ T8040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.455308][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.919'. [ 437.570680][ T8040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.673014][ T8040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.729792][ T8040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 437.841115][ T8210] Process accounting resumed [ 438.299134][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.314121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.323407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.335807][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.349469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.359627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.370147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.377375][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.397870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.406510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.427652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.445596][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.452796][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.478520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.519828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.632177][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 438.648158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.668898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.694643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.924235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.945458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.956041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.965679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.987639][ T8040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.103959][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 439.205673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 439.220914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.264207][ T8248] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 439.330180][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 440.164675][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.171149][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.456593][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 442.237629][ T6835] Bluetooth: hci5: Frame reassembly failed (-84) [ 442.477046][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.502104][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.546032][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.198603][ T8284] bond0 speed is unknown, defaulting to 1000 [ 444.242609][ T4264] Bluetooth: hci5: command 0x1003 tx timeout [ 444.250638][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 444.314314][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.940'. [ 444.882036][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'. [ 444.976982][ T8306] overlayfs: missing 'lowerdir' [ 445.149416][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.178696][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.320838][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.347711][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.434362][ T8040] device veth0_vlan entered promiscuous mode [ 445.502138][ T8310] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 445.660311][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 445.916528][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.933310][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.004454][ T8040] device veth1_vlan entered promiscuous mode [ 446.167575][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.183186][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.543756][ T8040] device veth0_macvtap entered promiscuous mode [ 446.562735][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.566125][ T8268] Process accounting resumed [ 446.571788][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.621672][ T8040] device veth1_macvtap entered promiscuous mode [ 446.639980][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.657575][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.684600][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.698115][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.716054][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.728052][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.825178][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.999431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.028889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.047054][ T1042] block nbd3: Attempted send on invalid socket [ 447.053468][ T1042] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 447.063313][ T1042] gfs2: error 10 reading superblock [ 448.927140][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.938567][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.949252][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.959890][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.973273][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.984141][ T8040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.993060][ T8040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.005775][ T8040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.021116][ T8040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.206257][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.328860][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.421627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.455140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.471524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.528058][ T8338] bond0 speed is unknown, defaulting to 1000 [ 449.591139][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.647111][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.725318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 452.936500][ T8352] netlink: 'syz.0.956': attribute type 4 has an invalid length. [ 453.397261][ T8366] overlayfs: missing 'lowerdir' [ 453.917477][ T4599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.033668][ T4599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.115955][ T4599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.302456][ T4599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.443264][ T4266] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 455.443758][ T4265] Bluetooth: hci4: command 0x1003 tx timeout [ 456.413141][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 457.406191][ T8407] bond0 speed is unknown, defaulting to 1000 [ 461.398119][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 461.413450][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 461.423959][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 461.432982][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 461.440806][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 461.449179][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.792433][ T8423] netlink: 'syz.2.970': attribute type 4 has an invalid length. [ 461.955108][ T8425] bond0 speed is unknown, defaulting to 1000 [ 462.228584][ T8439] overlayfs: missing 'lowerdir' [ 463.632665][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 463.778884][ T8451] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 463.945393][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 465.694325][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 466.106250][ T4599] device hsr_slave_0 left promiscuous mode [ 466.123703][ T4599] device hsr_slave_1 left promiscuous mode [ 466.169452][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.196706][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.228479][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.266798][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.294513][ T4599] device bridge_slave_1 left promiscuous mode [ 466.322509][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.367092][ T4599] device bridge_slave_0 left promiscuous mode [ 466.390648][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.609062][ T4599] device veth1_macvtap left promiscuous mode [ 466.628280][ T4599] device veth0_macvtap left promiscuous mode [ 466.651336][ T4599] device veth1_vlan left promiscuous mode [ 466.675184][ T4599] device veth0_vlan left promiscuous mode [ 467.772425][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 467.799610][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 468.307148][ T8473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'. [ 468.333371][ T8488] overlayfs: missing 'workdir' [ 469.097743][ T8496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.989'. [ 469.126360][ T4599] team0 (unregistering): Port device team_slave_1 removed [ 469.277225][ T4599] team0 (unregistering): Port device team_slave_0 removed [ 469.504237][ T4599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.519740][ T1042] block nbd1: Attempted send on invalid socket [ 469.526603][ T1042] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 469.538143][ T1042] gfs2: error 10 reading superblock [ 469.628366][ T4599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.845970][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 469.978649][ T8495] Process accounting resumed [ 473.017961][ T4599] bond0 (unregistering): Released all slaves [ 473.151839][ T8479] bond0 speed is unknown, defaulting to 1000 [ 473.162069][ T8508] netlink: 'syz.0.992': attribute type 4 has an invalid length. [ 473.478513][ T8425] chnl_net:caif_netlink_parms(): no params data found [ 474.626913][ T8536] overlayfs: missing 'workdir' [ 474.945048][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.952220][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.990744][ T8425] device bridge_slave_0 entered promiscuous mode [ 475.074510][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1001'. [ 475.750262][ T8543] Process accounting resumed [ 475.759675][ T8522] loop0: detected capacity change from 0 to 32768 [ 475.811935][ T8522] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 475.830588][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.862621][ T8522] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 475.871350][ T8522] BTRFS info (device loop0): enabling auto defrag [ 475.872676][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.932425][ T8522] BTRFS info (device loop0): doing ref verification [ 475.939201][ T8522] BTRFS info (device loop0): use no compression [ 475.998076][ T8425] device bridge_slave_1 entered promiscuous mode [ 476.006914][ T8522] BTRFS info (device loop0): force clearing of disk cache [ 476.042414][ T8522] BTRFS info (device loop0): max_inline at 4096 [ 476.048752][ T8522] BTRFS info (device loop0): disabling free space tree [ 477.050252][ T8522] BTRFS error (device loop0): open_ctree failed: -12 [ 477.169438][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4377) [ 477.199112][ T8425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.230187][ T8425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.731451][ T8425] team0: Port device team_slave_0 added [ 477.761413][ T52] block nbd2: Attempted send on invalid socket [ 477.767778][ T52] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 477.777527][ T52] gfs2: error 10 reading superblock [ 477.804357][ T8425] team0: Port device team_slave_1 added [ 478.082564][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 478.089527][ T4265] Bluetooth: hci5: command 0x1003 tx timeout [ 480.888460][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.199266][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.309595][ T8425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.967216][ T8585] netlink: 'syz.3.1006': attribute type 4 has an invalid length. [ 482.107159][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.139092][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.303403][ T8425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.395822][ T8602] netlink: 'syz.3.1012': attribute type 1 has an invalid length. [ 482.429116][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 482.746026][ T8425] device hsr_slave_0 entered promiscuous mode [ 482.797948][ T8425] device hsr_slave_1 entered promiscuous mode [ 483.729488][ T8611] loop3: detected capacity change from 0 to 32768 [ 483.821733][ T8611] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 484.017418][ T8611] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 484.982409][ T8611] BTRFS info (device loop3): enabling auto defrag [ 484.988932][ T8611] BTRFS info (device loop3): doing ref verification [ 485.057383][ T8611] BTRFS info (device loop3): use no compression [ 485.096229][ T8611] BTRFS info (device loop3): force clearing of disk cache [ 485.136847][ T8611] BTRFS info (device loop3): max_inline at 4096 [ 485.148617][ T8611] BTRFS info (device loop3): disabling free space tree [ 485.384342][ T8611] BTRFS info (device loop3): enabling ssd optimizations [ 485.400561][ T8611] BTRFS info (device loop3): rebuilding free space tree [ 485.549907][ T8611] BTRFS info (device loop3): disabling free space tree [ 485.579943][ T8611] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 485.643277][ T8611] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 485.726440][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1020'. [ 486.391345][ T8662] Process accounting resumed [ 486.588719][ T4251] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 487.125924][ T52] block nbd1: Attempted send on invalid socket [ 487.132161][ T52] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 487.149001][ T52] gfs2: error 10 reading superblock [ 487.206548][ T8425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.227493][ T8425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.282746][ T4265] Bluetooth: hci5: command 0x1003 tx timeout [ 487.289422][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 487.409289][ T8425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.446367][ T8425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.916276][ T8687] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 487.942131][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 489.242524][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.350336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 489.371637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.454022][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.703218][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.771952][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.881245][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.888512][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.245664][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.319371][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.413462][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.431748][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.438938][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.501871][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.564950][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.584168][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.603548][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.616161][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.738451][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.828526][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.840514][ T8425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.895662][ T8425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.000417][ T8712] loop1: detected capacity change from 0 to 32768 [ 492.011628][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.013655][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1033'. [ 492.030828][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.077237][ T8712] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1034 (8712) [ 492.118613][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.168259][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.233206][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.700528][ T8716] Process accounting resumed [ 492.702587][ T8712] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 492.833250][ T8712] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 492.842004][ T8712] BTRFS info (device loop1): enabling auto defrag [ 492.886051][ T8712] BTRFS info (device loop1): doing ref verification [ 492.920563][ T8712] BTRFS info (device loop1): use no compression [ 492.950454][ T8712] BTRFS info (device loop1): force clearing of disk cache [ 492.992410][ T8712] BTRFS info (device loop1): max_inline at 4096 [ 492.998750][ T8712] BTRFS info (device loop1): disabling free space tree [ 493.287040][ T8748] bond0 speed is unknown, defaulting to 1000 [ 494.443552][ T52] block nbd2: Attempted send on invalid socket [ 494.449918][ T52] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 494.459553][ T52] gfs2: error 10 reading superblock [ 494.466139][ T8712] BTRFS error (device loop1): open_ctree failed: -22 [ 494.693110][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.724097][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.760532][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.829599][ T8767] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 494.904764][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 497.099652][ T8797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1046'. [ 498.736899][ T8812] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 499.639403][ T8819] bond0 speed is unknown, defaulting to 1000 [ 500.778538][ T52] block nbd3: Attempted send on invalid socket [ 500.786864][ T52] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 500.796467][ T52] gfs2: error 10 reading superblock [ 500.997442][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.008026][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.121279][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.213782][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.251565][ T8425] device veth0_vlan entered promiscuous mode [ 501.283720][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.355370][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.368980][ T8425] device veth1_vlan entered promiscuous mode [ 501.605511][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.612068][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.419692][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.673245][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.707719][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.877524][ T8425] device veth0_macvtap entered promiscuous mode [ 502.972399][ T8849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1058'. [ 503.803215][ T8425] device veth1_macvtap entered promiscuous mode [ 503.823113][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.833679][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.844265][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.855154][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.867031][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.889501][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.925160][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.990679][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.090924][ T1042] block nbd1: Attempted send on invalid socket [ 504.101426][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.121829][ T8857] efs: cannot read volume header [ 504.140728][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.411531][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.595752][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.698765][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.722391][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.747690][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.770021][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.785296][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.831510][ T8425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.857617][ T8425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.931503][ T8425] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.049419][ T8425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.982413][ T8872] netlink: 'syz.2.1062': attribute type 4 has an invalid length. [ 508.514858][ T52] block nbd2: Attempted send on invalid socket [ 508.521366][ T52] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 508.531154][ T52] gfs2: error 10 reading superblock [ 508.700438][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.739742][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.817391][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 508.836940][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.880244][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.009029][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 509.940585][ T8910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1070'. [ 510.687497][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.812926][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.063854][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.508899][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.642202][ T8907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1071'. [ 511.945650][ T8907] Process accounting resumed [ 512.573316][ T1042] block nbd0: Attempted send on invalid socket [ 512.580620][ T1042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.599939][ T8940] efs: cannot read volume header [ 513.721048][ T8926] loop2: detected capacity change from 0 to 32768 [ 513.911422][ T8926] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1073 (8926) [ 516.220988][ T8926] BTRFS error (device loop2): open_ctree failed: -4 [ 516.246329][ T8959] bond0 speed is unknown, defaulting to 1000 [ 516.285079][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 516.302908][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 516.313414][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 516.323739][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 516.334308][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 516.341648][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 516.693963][ T4377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4377) [ 517.602503][ T8953] bond0 speed is unknown, defaulting to 1000 [ 517.608030][ T8984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1083'. [ 518.419587][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 521.642585][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 521.717009][ T9006] Process accounting resumed [ 522.089392][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 523.392573][ T9026] 9pnet_virtio: no channels available for device syz [ 523.722519][ T9026] fuse: Bad value for 'fd' [ 523.814393][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 524.471505][ T9031] bond0 speed is unknown, defaulting to 1000 [ 524.653458][ T11] device hsr_slave_0 left promiscuous mode [ 524.672501][ T11] device hsr_slave_1 left promiscuous mode [ 524.679759][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.702316][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.710399][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.731961][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.741029][ T11] device bridge_slave_1 left promiscuous mode [ 524.759958][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.770257][ T11] device bridge_slave_0 left promiscuous mode [ 524.784537][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.856623][ T11] device veth1_macvtap left promiscuous mode [ 524.866587][ T11] device veth0_macvtap left promiscuous mode [ 524.883062][ T11] device veth1_vlan left promiscuous mode [ 524.893631][ T11] device veth0_vlan left promiscuous mode [ 524.974225][ T9035] loop1: detected capacity change from 0 to 32768 [ 524.992140][ T9035] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 525.009056][ T9035] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 525.018540][ T9035] BTRFS info (device loop1): enabling auto defrag [ 525.026548][ T9035] BTRFS info (device loop1): doing ref verification [ 525.034363][ T9035] BTRFS info (device loop1): use no compression [ 525.040723][ T9035] BTRFS info (device loop1): force clearing of disk cache [ 525.048636][ T9035] BTRFS info (device loop1): max_inline at 4096 [ 525.055778][ T9035] BTRFS info (device loop1): disabling free space tree [ 525.216040][ T9035] BTRFS info (device loop1): enabling ssd optimizations [ 525.226159][ T9035] BTRFS info (device loop1): rebuilding free space tree [ 525.280925][ T9035] BTRFS info (device loop1): disabling free space tree [ 525.288633][ T9035] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 525.301508][ T9035] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 525.356473][ T26] audit: type=1800 audit(1751156743.042:340): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1093" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 525.428616][ T52] block nbd0: Attempted send on invalid socket [ 525.435590][ T52] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 525.446371][ T52] gfs2: error 10 reading superblock [ 525.490611][ T26] audit: type=1800 audit(1751156743.172:341): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1093" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 525.852564][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 526.117793][ T4250] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 526.170982][ T11] team0 (unregistering): Port device team_slave_1 removed [ 526.534202][ T11] team0 (unregistering): Port device team_slave_0 removed [ 526.670127][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.903089][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.690558][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1098'. [ 527.796952][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1098'. [ 529.007504][ T11] bond0 (unregistering): Released all slaves [ 530.742761][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.750316][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.758827][ T8953] device bridge_slave_0 entered promiscuous mode [ 530.790735][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.860748][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.943187][ T8953] device bridge_slave_1 entered promiscuous mode [ 531.262044][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.098222][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.340081][ T8953] team0: Port device team_slave_0 added [ 532.444456][ T8953] team0: Port device team_slave_1 added [ 532.650180][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.668057][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.765870][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.788083][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 532.800948][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 532.835403][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 532.847973][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 532.861184][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 532.869422][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.013099][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.032977][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.075328][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.180255][ T9110] bond0 speed is unknown, defaulting to 1000 [ 533.248452][ T8953] device hsr_slave_0 entered promiscuous mode [ 533.258741][ T8953] device hsr_slave_1 entered promiscuous mode [ 533.468269][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.883924][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 536.499449][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.567339][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 537.424529][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.769961][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.922471][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 538.081858][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.094942][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.128420][ T9110] device bridge_slave_0 entered promiscuous mode [ 538.178027][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.191916][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.221434][ T9110] device bridge_slave_1 entered promiscuous mode [ 538.448405][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.504641][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.691697][ T9110] team0: Port device team_slave_0 added [ 538.724540][ T9110] team0: Port device team_slave_1 added [ 539.146509][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.146529][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.146556][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.209478][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.209498][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.209525][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.838063][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 541.233287][ T9110] device hsr_slave_0 entered promiscuous mode [ 541.236028][ T9110] device hsr_slave_1 entered promiscuous mode [ 541.236680][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.236764][ T9110] Cannot create hsr debugfs directory [ 541.326225][ T8953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 541.536026][ T8953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 541.561737][ T8953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 541.565344][ T8953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 542.882748][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 543.026443][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.290471][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 543.318733][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.404882][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.620046][ T9110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.641073][ T9110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 543.664094][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.686683][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.719803][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.727040][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.785625][ T9110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 543.819269][ T9110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.849316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.863998][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.893933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.926823][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.934043][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.963275][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.048108][ T11] device hsr_slave_0 left promiscuous mode [ 544.072862][ T11] device hsr_slave_1 left promiscuous mode [ 544.133052][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.153475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.181931][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.201433][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.235056][ T11] device bridge_slave_1 left promiscuous mode [ 544.241348][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.329973][ T11] device bridge_slave_0 left promiscuous mode [ 544.336359][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.365373][ T11] device veth1_macvtap left promiscuous mode [ 544.371602][ T11] device veth0_macvtap left promiscuous mode [ 544.378501][ T11] device veth1_vlan left promiscuous mode [ 544.384763][ T11] device veth0_vlan left promiscuous mode [ 546.520198][ T11] bond1 (unregistering): Released all slaves [ 548.423159][ T11] team0 (unregistering): Port device team_slave_1 removed [ 548.500581][ T11] team0 (unregistering): Port device team_slave_0 removed [ 548.725626][ T9284] [ 548.728060][ T9284] ====================================================== [ 548.735103][ T9284] WARNING: possible circular locking dependency detected [ 548.742151][ T9284] 6.1.142-syzkaller #0 Not tainted [ 548.747281][ T9284] ------------------------------------------------------ [ 548.754321][ T9284] syz.0.1137/9284 is trying to acquire lock: [ 548.760321][ T9284] ffff888079ea35d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 548.770022][ T9284] [ 548.770022][ T9284] but task is already holding lock: [ 548.777395][ T9284] ffff88807334a870 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 548.788309][ T9284] [ 548.788309][ T9284] which lock already depends on the new lock. [ 548.788309][ T9284] [ 548.798730][ T9284] [ 548.798730][ T9284] the existing dependency chain (in reverse order) is: [ 548.807751][ T9284] [ 548.807751][ T9284] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 548.816486][ T9284] down_write+0x36/0x60 [ 548.821180][ T9284] process_measurement+0x33c/0x1a10 [ 548.826909][ T9284] ima_file_mmap+0x104/0x150 [ 548.832029][ T9284] __se_sys_remap_file_pages+0x53e/0x770 [ 548.838204][ T9284] do_syscall_64+0x4c/0xa0 [ 548.843159][ T9284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.849593][ T9284] [ 548.849593][ T9284] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 548.857164][ T9284] __lock_acquire+0x2cf8/0x7c50 [ 548.862556][ T9284] lock_acquire+0x1b4/0x490 [ 548.867601][ T9284] down_read_killable+0x4c/0x340 [ 548.873075][ T9284] mmap_read_lock_killable+0x1d/0x60 [ 548.878892][ T9284] lock_mm_and_find_vma+0x2b1/0x2f0 [ 548.884625][ T9284] do_user_addr_fault+0x2db/0xb10 [ 548.890184][ T9284] exc_page_fault+0x60/0x100 [ 548.895307][ T9284] asm_exc_page_fault+0x22/0x30 [ 548.900692][ T9284] fault_in_readable+0x13e/0x1f0 [ 548.906167][ T9284] fault_in_iov_iter_readable+0xbb/0x2e0 [ 548.912338][ T9284] generic_perform_write+0x1d2/0x560 [ 548.918165][ T9284] __generic_file_write_iter+0x172/0x430 [ 548.924336][ T9284] generic_file_write_iter+0xab/0x2e0 [ 548.930253][ T9284] do_iter_write+0x62d/0xaf0 [ 548.935419][ T9284] ovl_write_iter+0x828/0xc60 [ 548.940630][ T9284] vfs_write+0x44c/0x960 [ 548.945411][ T9284] ksys_write+0x143/0x240 [ 548.950269][ T9284] do_syscall_64+0x4c/0xa0 [ 548.955231][ T9284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.961672][ T9284] [ 548.961672][ T9284] other info that might help us debug this: [ 548.961672][ T9284] [ 548.971910][ T9284] Possible unsafe locking scenario: [ 548.971910][ T9284] [ 548.979380][ T9284] CPU0 CPU1 [ 548.984755][ T9284] ---- ---- [ 548.990145][ T9284] lock(&sb->s_type->i_mutex_key#12); [ 548.995622][ T9284] lock(&mm->mmap_lock); [ 549.002484][ T9284] lock(&sb->s_type->i_mutex_key#12); [ 549.010475][ T9284] lock(&mm->mmap_lock); [ 549.014815][ T9284] [ 549.014815][ T9284] *** DEADLOCK *** [ 549.014815][ T9284] [ 549.022961][ T9284] 5 locks held by syz.0.1137/9284: [ 549.028080][ T9284] #0: ffff88801e73a5e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 549.037334][ T9284] #1: ffff88807d71a460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 549.046407][ T9284] #2: ffff8880743ec1b8 (&ovl_i_mutex_key[depth]){+.+.}-{3:3}, at: ovl_write_iter+0x129/0xc60 [ 549.056690][ T9284] #3: ffff88807c982460 (sb_writers#5){.+.+}-{0:0}, at: ovl_write_iter+0x80f/0xc60 [ 549.066020][ T9284] #4: ffff88807334a870 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 549.077371][ T9284] [ 549.077371][ T9284] stack backtrace: [ 549.083298][ T9284] CPU: 1 PID: 9284 Comm: syz.0.1137 Not tainted 6.1.142-syzkaller #0 [ 549.091374][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.101453][ T9284] Call Trace: [ 549.104744][ T9284] [ 549.107685][ T9284] dump_stack_lvl+0x168/0x22e [ 549.112385][ T9284] ? load_image+0x3b0/0x3b0 [ 549.116901][ T9284] ? show_regs_print_info+0x12/0x12 [ 549.122120][ T9284] ? print_circular_bug+0x12b/0x1a0 [ 549.127343][ T9284] check_noncircular+0x274/0x310 [ 549.132336][ T9284] ? add_chain_block+0x940/0x940 [ 549.137304][ T9284] ? lockdep_lock+0xdc/0x1e0 [ 549.141913][ T9284] ? _find_first_zero_bit+0xcf/0x100 [ 549.147216][ T9284] __lock_acquire+0x2cf8/0x7c50 [ 549.152100][ T9284] ? verify_lock_unused+0x140/0x140 [ 549.157321][ T9284] ? verify_lock_unused+0x140/0x140 [ 549.162539][ T9284] ? verify_lock_unused+0x140/0x140 [ 549.167754][ T9284] ? mark_lock+0x94/0x320 [ 549.172108][ T9284] lock_acquire+0x1b4/0x490 [ 549.176639][ T9284] ? mmap_read_lock_killable+0x1d/0x60 [ 549.182117][ T9284] ? read_lock_is_recursive+0x10/0x10 [ 549.187506][ T9284] ? cmp_ex_search+0x1a/0x70 [ 549.192140][ T9284] ? bsearch+0x8a/0xb0 [ 549.196219][ T9284] ? fault_in_readable+0x13e/0x1f0 [ 549.201360][ T9284] ? search_extable+0x8c/0xd0 [ 549.206057][ T9284] ? trim_init_extable+0x3b0/0x3b0 [ 549.211188][ T9284] ? mmap_read_lock_killable+0x1d/0x60 [ 549.216661][ T9284] down_read_killable+0x4c/0x340 [ 549.221619][ T9284] ? mmap_read_lock_killable+0x1d/0x60 [ 549.227090][ T9284] mmap_read_lock_killable+0x1d/0x60 [ 549.232394][ T9284] lock_mm_and_find_vma+0x2b1/0x2f0 [ 549.237617][ T9284] do_user_addr_fault+0x2db/0xb10 [ 549.242659][ T9284] ? _raw_spin_unlock_irq+0x1f/0x40 [ 549.247898][ T9284] exc_page_fault+0x60/0x100 [ 549.252516][ T9284] asm_exc_page_fault+0x22/0x30 [ 549.257380][ T9284] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 549.263133][ T9284] Code: 48 8c c3 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 27 8c c3 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 0a 8c [ 549.282777][ T9284] RSP: 0018:ffffc90003f4f830 EFLAGS: 00050287 [ 549.288860][ T9284] RAX: ffffffff81bd4b59 RBX: 0000000000001000 RCX: 0000000000080000 [ 549.296850][ T9284] RDX: ffffc900102e8000 RSI: 000000000007ffff RDI: 0000000000080000 [ 549.304847][ T9284] RBP: 0000000000000000 R08: ffff888050493b80 R09: 0000000000000002 [ 549.312831][ T9284] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000b37000 [ 549.320838][ T9284] R13: dffffc0000000000 R14: 0000200000b35100 R15: 0000200000b36000 [ 549.328827][ T9284] ? fault_in_readable+0x139/0x1f0 [ 549.334057][ T9284] fault_in_iov_iter_readable+0xbb/0x2e0 [ 549.339718][ T9284] generic_perform_write+0x1d2/0x560 [ 549.345111][ T9284] ? atime_needs_update+0x780/0x780 [ 549.350332][ T9284] ? generic_file_direct_write+0x660/0x660 [ 549.356159][ T9284] ? __file_remove_privs+0x5b0/0x5b0 [ 549.361460][ T9284] ? preempt_count_add+0x8d/0x190 [ 549.366503][ T9284] ? rwsem_write_trylock+0x12f/0x1b0 [ 549.371806][ T9284] ? clear_nonspinnable+0x60/0x60 [ 549.376847][ T9284] ? generic_write_checks_count+0x3d9/0x4c0 [ 549.382751][ T9284] __generic_file_write_iter+0x172/0x430 [ 549.388428][ T9284] generic_file_write_iter+0xab/0x2e0 [ 549.393838][ T9284] do_iter_write+0x62d/0xaf0 [ 549.398467][ T9284] ? vfs_iter_write+0xa0/0xa0 [ 549.403172][ T9284] ? rcu_read_lock_any_held+0xb0/0x120 [ 549.408653][ T9284] ? memcpy+0x3c/0x60 [ 549.412654][ T9284] ? vfs_iter_write+0x67/0xa0 [ 549.417347][ T9284] ovl_write_iter+0x828/0xc60 [ 549.422071][ T9284] ? ovl_read_iter+0xe00/0xe00 [ 549.426921][ T9284] vfs_write+0x44c/0x960 [ 549.431220][ T9284] ? file_end_write+0x250/0x250 [ 549.436097][ T9284] ? __fget_files+0x44a/0x4d0 [ 549.440820][ T9284] ? __fdget_pos+0x2ae/0x360 [ 549.445454][ T9284] ? ksys_write+0x71/0x240 [ 549.449889][ T9284] ksys_write+0x143/0x240 [ 549.454231][ T9284] ? __ia32_sys_read+0x80/0x80 [ 549.459025][ T9284] ? lockdep_hardirqs_on+0x94/0x140 [ 549.464251][ T9284] do_syscall_64+0x4c/0xa0 [ 549.468683][ T9284] ? clear_bhb_loop+0x60/0xb0 [ 549.473369][ T9284] ? clear_bhb_loop+0x60/0xb0 [ 549.478064][ T9284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.483984][ T9284] RIP: 0033:0x7f88ec98e929 [ 549.488427][ T9284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.508137][ T9284] RSP: 002b:00007f88ed7c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.516571][ T9284] RAX: ffffffffffffffda RBX: 00007f88ecbb6160 RCX: 00007f88ec98e929 [ 549.524553][ T9284] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005 [ 549.532546][ T9284] RBP: 00007f88eca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 549.540535][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.548514][ T9284] R13: 0000000000000000 R14: 00007f88ecbb6160 R15: 00007ffda1d99b88 [ 549.556504][ T9284] [ 549.756428][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.824205][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.462108][ T11] bond0 (unregistering): Released all slaves [ 550.537737][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.546957][ T9261] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 550.609254][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.638197][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.667886][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.677379][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.690539][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.699431][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.717708][ T8953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.739046][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.758943][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.769690][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 550.778561][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.921491][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.943781][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.956032][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.967237][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.014028][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.025582][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.035746][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.042929][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.050769][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.062574][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.071206][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.078392][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.088391][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.097389][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.118411][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.139928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.158408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.178265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.199519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.224725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.239496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.272608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.282943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.291352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.316059][ T9110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.343347][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.351504][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.377802][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.701001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.710900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.732998][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.771137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.781390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.807027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.816047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.834571][ T8953] device veth0_vlan entered promiscuous mode [ 551.846198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.860201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.873971][ T8953] device veth1_vlan entered promiscuous mode [ 551.896416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 551.907440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 551.918765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.931056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.942677][ T8953] device veth0_macvtap entered promiscuous mode [ 551.951897][ T8953] device veth1_macvtap entered promiscuous mode [ 551.977890][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.003141][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.025495][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.044279][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 552.057223][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 552.070047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.091263][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.115864][ T8953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.136012][ T8953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.148032][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.158072][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.169555][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.185035][ T8953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.202367][ T8953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.211135][ T8953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.240611][ T8953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.285164][ T8953] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 552.318064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 552.330599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 552.362887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 552.383493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.392035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.403044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.418663][ T9110] device veth0_vlan entered promiscuous mode [ 552.428475][ T8953] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 552.428778][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.449425][ T9110] device veth1_vlan entered promiscuous mode [ 552.459094][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.483664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 552.493668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 552.501877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 552.521363][ T9110] device veth0_macvtap entered promiscuous mode [ 552.533885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 552.543734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 552.557680][ T9110] device veth1_macvtap entered promiscuous mode [ 552.565407][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.575303][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.586389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 552.595500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 552.604210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 552.630123][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.654762][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.669167][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.681697][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.717137][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.769821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.778901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.791822][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.819507][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.831174][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.841772][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.855092][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.866360][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.877501][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.890293][ T9110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.899752][ T9110] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.908966][ T9110] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.919792][ T9110] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.968721][ T9110] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 553.002633][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.010528][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.026498][ T9110] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 553.041783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.061781][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.070214][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.081539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.537642][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.357789][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.847183][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.917327][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.599302][ T9] device hsr_slave_0 left promiscuous mode [ 555.612899][ T9] device hsr_slave_1 left promiscuous mode [ 555.623943][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.631416][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.653415][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.660898][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.683366][ T9] device bridge_slave_1 left promiscuous mode [ 555.689875][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.713949][ T9] device bridge_slave_0 left promiscuous mode [ 555.720311][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.752844][ T9] device veth1_macvtap left promiscuous mode [ 555.758955][ T9] device veth0_macvtap left promiscuous mode [ 555.772948][ T9] device veth1_vlan left promiscuous mode [ 555.782669][ T9] device veth0_vlan left promiscuous mode [ 556.050727][ T9] team0 (unregistering): Port device team_slave_1 removed [ 556.064770][ T9] team0 (unregistering): Port device team_slave_0 removed [ 556.111749][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.156513][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.231781][ T9] bond0 (unregistering): Released all slaves