last executing test programs: 1m29.307914554s ago: executing program 4 (id=48): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffffffff000}) 1m29.212923706s ago: executing program 4 (id=49): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000480)=ANY=[@ANYRES8], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000200)=ANY=[], 0x49, 0x0) 1m28.709755364s ago: executing program 4 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x894, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x30, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x10000, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x5, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x894}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 1m28.418989808s ago: executing program 4 (id=54): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x10}, 0x18) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m28.125088113s ago: executing program 4 (id=56): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x10048, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) sendfile(r0, r0, 0x0, 0x7a680000) 1m26.685101805s ago: executing program 4 (id=68): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000020000002b0000000000000712"], 0x30}, 0x0) 1m26.505255008s ago: executing program 32 (id=68): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000020000002b0000000000000712"], 0x30}, 0x0) 41.23140189s ago: executing program 1 (id=300): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000880)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000005000000cf8c1afe24"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 40.683019809s ago: executing program 1 (id=305): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 40.563026011s ago: executing program 1 (id=308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@private2, 0x2}, 0x20) 40.464473222s ago: executing program 1 (id=310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x6c, 0x2, [@TCA_GRED_MAX_P={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x10001}, @TCA_GRED_DPS={0xfffffffb, 0x3, {0x3, 0xb, 0x1, 0x4}}, @TCA_GRED_PARMS={0x38, 0x1, {0xa67, 0x7, 0x3, 0xd, 0x0, 0x0, 0x2e, 0x6, 0x58d, 0x4614, 0x1d, 0x18, 0x16, 0x8, 0x80a, 0x7}}]}}]}, 0x9c}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0x20000000, 0x3, 0x20303159, 0x0, 0xb, [{}, {}, {0x5}, {0xfffffffd}, {}, {}, {0x100000, 0x8000002}, {0x3ff}], 0x4, 0x0, 0x4, 0x0, 0x3}}}) 37.732987284s ago: executing program 0 (id=325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000003c0)="6eba930b4e00fdeb1cc120b009a49a07197abbef25f6a0f5a1b3d5d558c4d79a8d7666f7460d940163991a2bf6f3d168d1eac94353a5cc2789a563e39829000000", 0x41}], 0x1, 0x0, 0x0, 0x840}, 0x8000) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x84d3c000) 35.612997137s ago: executing program 0 (id=331): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r2, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 35.610323217s ago: executing program 0 (id=332): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000eeff000000000000000000007112"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 35.472797609s ago: executing program 0 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 35.208717494s ago: executing program 0 (id=336): close(0x3) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d02000000000000000000000300000000"], 0x0, 0x3e, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000001480)='./file1\x00', 0x220004c, &(0x7f0000000280)=ANY=[], 0x11, 0x6b2, &(0x7f0000000ac0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000740)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$RTC_SET_TIME(r5, 0x5452, &(0x7f0000000280)={0x14, 0x1000036, 0x0, 0x1ffffc, 0x8, 0x0, 0x3, 0xffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0xc040400) 35.082687036s ago: executing program 1 (id=338): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 34.034329462s ago: executing program 0 (id=341): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x323100, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 33.784389776s ago: executing program 33 (id=341): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x323100, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 33.761355426s ago: executing program 1 (id=343): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) syz_read_part_table(0x1047, &(0x7f0000001640)="$eJzszdEJwjAUBdDb1kSLUNzCH7dxUXdwKD8jKa3gBH54DoHc3MB74bfGktZSttf1kQxraqnHfr9ahox72536KdOQlhzOSco8b1+XjM+v6fdlKrWHqd7Ksrdr89kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/vHQAA//9gTAi+") 18.300873055s ago: executing program 34 (id=343): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) syz_read_part_table(0x1047, &(0x7f0000001640)="$eJzszdEJwjAUBdDb1kSLUNzCH7dxUXdwKD8jKa3gBH54DoHc3MB74bfGktZSttf1kQxraqnHfr9ahox72536KdOQlhzOSco8b1+XjM+v6fdlKrWHqd7Ksrdr89kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/vHQAA//9gTAi+") 2.901026104s ago: executing program 2 (id=534): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x4000854) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2.333746144s ago: executing program 6 (id=537): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000003c0)={0x18, 0x0, {0x4, @random="e9e165625ac2", 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000007c0)="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", 0x5eb}], 0x1}}], 0x2, 0x20000800) 2.332976813s ago: executing program 6 (id=539): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="ce3870341d9f9a21", 0x8}], 0x1}}], 0x1, 0x4000) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x802}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) close(r1) 2.292294944s ago: executing program 5 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}, {&(0x7f0000000a00)=""/229, 0xe5}, {&(0x7f0000000000)=""/131, 0x83}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x409}], 0x5, 0x40000020, 0x0) 2.207062335s ago: executing program 2 (id=543): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r0, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x1, 0x800) 2.169433416s ago: executing program 6 (id=545): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000240)="1a329ffa", 0x4}], 0x1, 0x0, 0x0, 0x48040}, 0x1) 2.073067497s ago: executing program 2 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}}, 0x0) 2.003676288s ago: executing program 6 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 1.965980129s ago: executing program 6 (id=548): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.898488301s ago: executing program 2 (id=549): socket$isdn(0x22, 0x2, 0x3) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1.789866642s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000000)=0x9) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.597940935s ago: executing program 3 (id=553): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r4, 0x0, 0x40) connect$rose(r3, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) connect$rose(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.555940965s ago: executing program 3 (id=554): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x100000d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.135428202s ago: executing program 7 (id=555): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e", 0x55}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.093015922s ago: executing program 5 (id=556): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0xc) 999.128804ms ago: executing program 3 (id=557): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x64080}, 0x0) 970.660795ms ago: executing program 5 (id=558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000a00)=""/4096, 0x1000) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000080)="ad5cbf88c9a8bb341958fa68fad4f74f", 0x10}, {&(0x7f00000001c0)="89ae81c8c20c0ed3b3a84ea129b8b0af2792017708215063873b239fa62a9ebc87c06d8edc103a60f0879840978b81638323e7bcec260df2", 0x38}, {&(0x7f0000000300)="e1069441b0a66bfeb39b35f320041cedb14952f24c53c2d5eb71302a1094cb7ad3a0eb9626151556cc0db75b96478c3f191b8897747950b58d2947f40a70939bb035667368ba1684d34a15eb2004a95610561363fcac5fec48c578a2b0f61e9eb3ca03042bfc93b78e58a05e728ae39f86db02f2bff7f47193cb243adb98e6dc63f0214704beb5f69a201501ecf2d157b07884205b85923b0189db153ab84030edf6919b89e74fba36662f2eb0a3643e51518db51fd73313", 0xb8}], 0x3, &(0x7f0000001a80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040800}, 0x48050) 890.683526ms ago: executing program 2 (id=559): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) 805.033577ms ago: executing program 3 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="34000000090601020000000000000000070000000900020073797a310000000005000100070000000c000780080009"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xc080) 804.731777ms ago: executing program 7 (id=561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 741.009318ms ago: executing program 6 (id=562): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000d80)=ANY=[@ANYBLOB="e0f23afb41196dda0814da9f0e0bb9bdacf92c638cf5d1f9992b82bd6ca3502c7847c505d40e56401a00f5e9de865bf6b3e9c48004916243ed34e1c0d800474f25374fa7d4a049ab01dd07ee309d4cae067ca05e226587535736571ccd91bd7e39a2083aef5f8f7bbe344d1bed1139829b4c6e1bb206c9866a384d98580bcb229b6bdf72eabd2214029d204ff369f702eaa4179e8a71fa8a04e43e2150b21271985f0b29a9422829e317112ff494fd18b94b55dcfae1f53bbc29030be9", @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000e80)="$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") r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x38, 0x4000080}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 723.712149ms ago: executing program 3 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) 656.12119ms ago: executing program 7 (id=564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x9, 0x7ed, "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"}, 0x7f5) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 612.83859ms ago: executing program 5 (id=565): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e788d5e85080045f00d80074e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 602.734651ms ago: executing program 3 (id=566): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x1, 0x5, 0x10000, @value}, 0x28) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 517.045322ms ago: executing program 7 (id=567): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 403.940743ms ago: executing program 5 (id=568): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 154.601707ms ago: executing program 5 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB]) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000000)=0x9) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 93.017738ms ago: executing program 7 (id=570): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x20004000, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @local, 0x8}, 0x1c) 0s ago: executing program 7 (id=571): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000200)=@bpq0, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x9, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x400}, 0x0) kernel console output (not intermixed with test programs): cking state [ 46.055940][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.064010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.076968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.080184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.082763][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.084659][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.097339][ T4031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.147283][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.152172][ T4031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.191432][ T4031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.231733][ T4031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.270749][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.286458][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.293222][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.296480][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.309983][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.325001][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.327569][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.332320][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.335285][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.354883][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.369401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.372201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.387015][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.404884][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.407789][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.410892][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.413626][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.416222][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.418253][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.421762][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.424559][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.427072][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.429060][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.432240][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.444319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.449600][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.466125][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.471946][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.475924][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.498961][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.512503][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.515957][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.531188][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.545250][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.548641][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.551459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.554380][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.556434][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.561842][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.564642][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.567252][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.569353][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.572312][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.575651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.585922][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.593578][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.596290][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.599442][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.602346][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.615856][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.622898][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.626715][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.641017][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.643733][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.646597][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.649689][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.651758][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.654198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.656983][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.661297][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.663311][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.665657][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.669999][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.672644][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.682438][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.686172][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.696663][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.700499][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.704054][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.706795][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.710254][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.715065][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.717398][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.736490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.741097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.743768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.750387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.753415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.777395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.782718][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.785702][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.791429][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.796792][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.805858][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.808765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.811664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.822680][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.825335][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.860477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.863305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.869411][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.887525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.894809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.899674][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.904331][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.906516][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.924204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.926969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.933532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.936680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.949181][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.951196][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.963123][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.974470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.991176][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.993917][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.996525][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.998508][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.009285][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.012081][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.030293][ T4024] device veth0_vlan entered promiscuous mode [ 47.034697][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.037350][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.040558][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.044514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.046745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.063576][ T4024] device veth1_vlan entered promiscuous mode [ 47.071485][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.074163][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.093323][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.096854][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.100610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.103454][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.106289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.110771][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.116247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.124001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.126167][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.137194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.141801][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.157562][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.158205][ T4071] Bluetooth: hci1: command 0x041b tx timeout [ 47.165284][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.168989][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.184863][ T4024] device veth0_macvtap entered promiscuous mode [ 47.192739][ T4023] device veth0_vlan entered promiscuous mode [ 47.196539][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.200035][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.202795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.207262][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.211108][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.213845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.220861][ T4024] device veth1_macvtap entered promiscuous mode [ 47.229177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.231583][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.234137][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.237346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.240562][ T4071] Bluetooth: hci0: command 0x041b tx timeout [ 47.242943][ T4071] Bluetooth: hci2: command 0x041b tx timeout [ 47.244790][ T4071] Bluetooth: hci4: command 0x041b tx timeout [ 47.246500][ T4071] Bluetooth: hci3: command 0x041b tx timeout [ 47.250481][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.253246][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.263820][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.279066][ T4023] device veth1_vlan entered promiscuous mode [ 47.284857][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.296439][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.303196][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.306513][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.321377][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.336024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.339490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.342367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.345206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.348604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.357586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.362729][ T4024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.365281][ T4024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.367604][ T4024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370563][ T4024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.377742][ T4030] device veth0_vlan entered promiscuous mode [ 47.413264][ T4030] device veth1_vlan entered promiscuous mode [ 47.434444][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.437146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.441027][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.443799][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.465354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.469362][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.476897][ T4023] device veth0_macvtap entered promiscuous mode [ 47.506926][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.512612][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.515395][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.519800][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.523566][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.526224][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.548552][ T4023] device veth1_macvtap entered promiscuous mode [ 47.552417][ T4032] device veth0_vlan entered promiscuous mode [ 47.595583][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.604304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.606447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.609605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.612442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.622009][ T4030] device veth0_macvtap entered promiscuous mode [ 47.629056][ T4032] device veth1_vlan entered promiscuous mode [ 47.629106][ T4084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.633185][ T4084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.634756][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.641567][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.646598][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.660372][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.663362][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.667402][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.671075][ T4030] device veth1_macvtap entered promiscuous mode [ 47.674475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.679179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.681895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.684541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.687408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.691260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.694181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.725174][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.727711][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.731585][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.732825][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.733799][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.736628][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.752532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.774461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.777316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.787169][ T4032] device veth0_macvtap entered promiscuous mode [ 47.792891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.802651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.806752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.821010][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.824194][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.826877][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.830709][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.835065][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.843430][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.846635][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.899202][ T4032] device veth1_macvtap entered promiscuous mode [ 47.902212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.904805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.907581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.914810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.917632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.936451][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.945783][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.949821][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.952637][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.956702][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.985212][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.988558][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.992758][ T4031] device veth0_vlan entered promiscuous mode [ 47.997500][ T4030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.001481][ T4030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.004909][ T4030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.007324][ T4030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.024154][ T4106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6'. [ 48.032566][ T4105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 48.046205][ T4031] device veth1_vlan entered promiscuous mode [ 48.052280][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.055219][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.063645][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.066570][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.070762][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.073938][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.078356][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.086374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.089410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.092267][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.093578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.094475][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.104204][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.111178][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.114095][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.116888][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.123872][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.126593][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.138052][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.147735][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.165498][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.174736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.177803][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.250397][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.252969][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.255442][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.259136][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.282203][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.286172][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.311480][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.333589][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.341344][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.360319][ T4031] device veth0_macvtap entered promiscuous mode [ 48.387399][ T4031] device veth1_macvtap entered promiscuous mode [ 48.431899][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.434128][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.437620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.446126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.449470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.505867][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.509097][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.511787][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.514694][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.517366][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.538632][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.540936][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.544568][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.547638][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.557868][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.562241][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.573916][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.576692][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.578426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.585296][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.594331][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.597425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.622444][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.625462][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.631301][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.635035][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.639583][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.648076][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.650783][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.653628][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.666989][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.689402][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.691723][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.714639][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.717495][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.723261][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.731177][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.733616][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.735964][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.745189][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.052923][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.055272][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.059342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.070090][ T4124] udc-core: couldn't find an available UDC or it's busy [ 49.079217][ T4124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.083662][ T4122] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 49.085768][ T4122] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 49.087963][ T4122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.146881][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.149880][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.153424][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.239863][ T4073] Bluetooth: hci1: command 0x040f tx timeout [ 49.318825][ T4073] Bluetooth: hci3: command 0x040f tx timeout [ 49.320849][ T4073] Bluetooth: hci4: command 0x040f tx timeout [ 49.325599][ T4073] Bluetooth: hci2: command 0x040f tx timeout [ 49.333886][ T4073] Bluetooth: hci0: command 0x040f tx timeout [ 49.433606][ T4138] nvme_fabrics: missing parameter 'transport=%s' [ 49.435585][ T4138] nvme_fabrics: missing parameter 'nqn=%s' [ 49.516386][ T26] audit: type=1326 audit(49.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4143 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaae2f8a8 code=0x7ffc0000 [ 49.528551][ T26] audit: type=1326 audit(49.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4143 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaae2f8a8 code=0x7ffc0000 [ 49.554148][ T26] audit: type=1326 audit(49.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4143 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaae2f8a8 code=0x7ffc0000 [ 49.577355][ T26] audit: type=1326 audit(49.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4143 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffffaae2f8a8 code=0x7ffc0000 [ 49.594150][ T26] audit: type=1326 audit(49.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4143 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaae2f8a8 code=0x7ffc0000 [ 49.708236][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 49.767180][ T4156] loop4: detected capacity change from 0 to 1024 [ 50.137070][ T4168] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 50.672784][ T4163] mmap: syz.0.14 (4163) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 50.914708][ T4178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 50.923728][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 50.937315][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.955660][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.973750][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.977550][ T4178] device bridge_slave_0 left promiscuous mode [ 50.982961][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.029018][ T4178] device bridge_slave_1 left promiscuous mode [ 51.030994][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.105534][ T4178] bond0: (slave bond_slave_0): Releasing backup interface [ 51.174820][ T4178] bond0: (slave bond_slave_1): Releasing backup interface [ 51.277503][ T4178] team0: Port device team_slave_0 removed [ 51.320200][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 51.347001][ T4178] team0: Port device team_slave_1 removed [ 51.353245][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.355454][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.363524][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.365620][ T4178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.398598][ T4071] Bluetooth: hci0: command 0x0419 tx timeout [ 51.400481][ T4071] Bluetooth: hci2: command 0x0419 tx timeout [ 51.402310][ T4071] Bluetooth: hci4: command 0x0419 tx timeout [ 51.404101][ T4071] Bluetooth: hci3: command 0x0419 tx timeout [ 51.671601][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 51.796333][ T4193] netlink: 72 bytes leftover after parsing attributes in process `syz.4.24'. [ 52.037948][ T4072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.380266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.492886][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.527017][ T4195] bond0: (slave rose0): Enslaving as an active interface with an up link [ 52.592878][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.722431][ T26] audit: type=1326 audit(52.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4205 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 52.839789][ T4207] netlink: 'syz.4.26': attribute type 2 has an invalid length. [ 52.842099][ T4207] netlink: 'syz.4.26': attribute type 8 has an invalid length. [ 52.844225][ T4207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.26'. [ 53.516216][ T26] audit: type=1326 audit(53.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4205 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=446 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 53.587406][ T26] audit: type=1326 audit(53.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4205 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 53.589030][ T4215] device syzkaller0 entered promiscuous mode [ 53.645916][ T26] audit: type=1326 audit(53.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4205 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 53.711763][ T4217] loop0: detected capacity change from 0 to 1024 [ 55.094418][ T4237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'. [ 55.097106][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 55.185402][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.211159][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.226176][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.254200][ T4237] device bridge_slave_0 left promiscuous mode [ 55.265335][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.340043][ T4245] udc-core: couldn't find an available UDC or it's busy [ 55.343358][ T4237] device bridge_slave_1 left promiscuous mode [ 55.345908][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.353941][ T4245] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.403779][ T4237] bond0: (slave bond_slave_0): Releasing backup interface [ 55.466686][ T4237] bond0: (slave bond_slave_1): Releasing backup interface [ 55.588426][ T4237] team0: Port device team_slave_0 removed [ 55.630175][ T4266] ax25_connect(): syz.1.38 uses autobind, please contact jreuter@yaina.de [ 55.666072][ T4237] team0: Port device team_slave_1 removed [ 55.677536][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.691879][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.719884][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.731222][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.803921][ T4266] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 55.878087][ T4071] Bluetooth: hci1: command 0x2016 tx timeout [ 56.141112][ T4290] loop1: detected capacity change from 0 to 512 [ 56.205600][ T4290] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 56.212757][ T4290] EXT4-fs (loop1): invalid journal inode [ 56.214455][ T4290] EXT4-fs (loop1): can't get journal size [ 56.232008][ T4290] EXT4-fs (loop1): 1 truncate cleaned up [ 56.233711][ T4290] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 56.426745][ T4306] loop4: detected capacity change from 0 to 1024 [ 56.516069][ T4306] EXT4-fs (loop4): Ignoring removed orlov option [ 56.524508][ T4306] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 56.585585][ T4306] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 56.628045][ T4069] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.878012][ T4069] usb 1-1: Using ep0 maxpacket: 32 [ 56.965398][ T4318] netlink: 988 bytes leftover after parsing attributes in process `syz.4.51'. [ 57.018379][ T4069] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 57.021201][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.040418][ T4069] usb 1-1: config 0 descriptor?? [ 57.135368][ T4324] loop4: detected capacity change from 0 to 1024 [ 57.153795][ T4324] EXT4-fs (loop4): Ignoring removed oldalloc option [ 57.168779][ T4324] EXT4-fs (loop4): Ignoring removed bh option [ 57.174008][ T4324] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.207604][ T4324] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 57.258728][ T4324] ======================================================= [ 57.258728][ T4324] WARNING: The mand mount option has been deprecated and [ 57.258728][ T4324] and is ignored by this kernel. Remove the mand [ 57.258728][ T4324] option from the mount to silence this warning. [ 57.258728][ T4324] ======================================================= [ 57.318493][ T4069] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 57.326820][ T4069] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 57.368192][ T4069] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 57.370273][ T4069] usb 1-1: media controller created [ 57.400847][ T4069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.478642][ T4331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.57'. [ 57.564876][ T4069] az6027: usb out operation failed. (-71) [ 57.579922][ T4069] az6027: usb out operation failed. (-71) [ 57.588038][ T4069] stb0899_attach: Driver disabled by Kconfig [ 57.589659][ T4069] az6027: no front-end attached [ 57.589659][ T4069] [ 57.609907][ T4069] az6027: usb out operation failed. (-71) [ 57.611575][ T4069] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 57.614488][ T4069] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 57.639450][ T4069] dvb-usb: schedule remote query interval to 400 msecs. [ 57.641458][ T4069] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 57.657926][ T4069] usb 1-1: USB disconnect, device number 2 [ 57.785114][ T4069] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 57.853874][ T4348] udc-core: couldn't find an available UDC or it's busy [ 57.874323][ T4348] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.056527][ T4358] loop0: detected capacity change from 0 to 128 [ 59.082221][ T4358] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.150005][ T4362] loop1: detected capacity change from 0 to 512 [ 59.458730][ T4367] loop0: detected capacity change from 0 to 1764 [ 59.748574][ T4385] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 59.794188][ T4388] loop1: detected capacity change from 0 to 512 [ 59.818073][ T4388] EXT4-fs (loop1): Ignoring removed nobh option [ 59.819873][ T4388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.823475][ T4388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.911313][ T4391] usb usb1: usbfs: process 4391 (syz.0.74) did not claim interface 0 before use [ 60.002123][ T4388] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 60.331993][ T4393] loop3: detected capacity change from 0 to 2048 [ 60.410919][ T4393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.628078][ T4395] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 60.630620][ T4395] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 61.329571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.478301][ T4070] Bluetooth: hci3: command 0x0409 tx timeout [ 61.566308][ T4383] chnl_net:caif_netlink_parms(): no params data found [ 61.633102][ T4364] chnl_net:caif_netlink_parms(): no params data found [ 61.646269][ T4413] loop1: detected capacity change from 0 to 2048 [ 61.700552][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.702758][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.705469][ T4383] device bridge_slave_0 entered promiscuous mode [ 61.709754][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.711860][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.714584][ T4383] device bridge_slave_1 entered promiscuous mode [ 61.745639][ T4413] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.748012][ T4420] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 61.765740][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 61.788212][ T4383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.798188][ T4071] Bluetooth: hci4: command 0x0409 tx timeout [ 61.831376][ T4383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.859502][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.866490][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.889735][ T4364] device bridge_slave_0 entered promiscuous mode [ 61.915424][ T4383] team0: Port device team_slave_0 added [ 61.917537][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.921090][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.923981][ T4364] device bridge_slave_1 entered promiscuous mode [ 61.946957][ T4383] team0: Port device team_slave_1 added [ 62.008119][ T4383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.010187][ T4383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.026226][ T4383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.033421][ T4383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.035483][ T4383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.052607][ T4383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.174171][ T4430] loop3: detected capacity change from 0 to 1024 [ 63.166256][ T4440] loop1: detected capacity change from 0 to 1024 [ 63.167305][ T4442] loop3: detected capacity change from 0 to 512 [ 63.234347][ T4442] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 63.423861][ T4440] hfsplus: can't free extent [ 63.447389][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.212407][ T4073] hid-generic 0008:0007:0005.0001: item fetching failed at offset 0/1 [ 64.213185][ T4070] Bluetooth: hci3: command 0x041b tx timeout [ 64.215307][ T4073] hid-generic: probe of 0008:0007:0005.0001 failed with error -22 [ 64.217607][ T4070] Bluetooth: hci4: command 0x041b tx timeout [ 64.327119][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.400112][ T4383] device hsr_slave_0 entered promiscuous mode [ 64.438611][ T4383] device hsr_slave_1 entered promiscuous mode [ 64.606627][ T4383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.608839][ T4383] Cannot create hsr debugfs directory [ 65.847843][ C0] sched: RT throttling activated [ 65.946081][ T417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.034401][ T4463] loop3: detected capacity change from 0 to 2048 [ 66.108717][ T4364] team0: Port device team_slave_0 added [ 66.117346][ T4463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.143513][ T4364] team0: Port device team_slave_1 added [ 66.174625][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 66.234225][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.236318][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.249621][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.277226][ T417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.281073][ T4069] Bluetooth: hci4: command 0x040f tx timeout [ 66.284367][ T4069] Bluetooth: hci3: command 0x040f tx timeout [ 66.305782][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.309434][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.319951][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.426890][ T417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.222154][ T417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.341945][ T4364] device hsr_slave_0 entered promiscuous mode [ 67.370082][ T4364] device hsr_slave_1 entered promiscuous mode [ 67.408135][ T4364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.410367][ T4364] Cannot create hsr debugfs directory [ 67.667812][ T417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.724827][ T4485] loop1: detected capacity change from 0 to 128 [ 67.753198][ T417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.761108][ T4485] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 68.373239][ T3319] Bluetooth: hci3: command 0x0419 tx timeout [ 68.679174][ T3319] Bluetooth: hci4: command 0x0419 tx timeout [ 68.708953][ T417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.755315][ T417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.790057][ T4485] FAT-fs (loop1): FAT read failed (blocknr 128) [ 69.402483][ T4521] loop1: detected capacity change from 0 to 128 [ 69.940325][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.942359][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.963129][ T4497] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 70.001037][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 70.092531][ T4530] loop0: detected capacity change from 0 to 2048 [ 70.297591][ T4530] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.317739][ T4543] loop1: detected capacity change from 0 to 128 [ 70.365366][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 70.386185][ T4364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.390983][ T4543] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 70.393135][ T4543] FAT-fs (loop1): Filesystem has been set read-only [ 70.440272][ T4364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.471116][ T4547] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 70.474255][ T4364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.556069][ T4364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.861279][ T4383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.910738][ T4383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.954378][ T4383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.001152][ T4383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.161406][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.219386][ T4567] udc-core: couldn't find an available UDC or it's busy [ 71.221303][ T4567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.358769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.362362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.395053][ T4364] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.445352][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.455655][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.467680][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.469810][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.490308][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.496017][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.502961][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.505002][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.517722][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.585156][ T4579] loop0: detected capacity change from 0 to 128 [ 71.648530][ T4579] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 71.698509][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.701533][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.795767][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.800896][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.804610][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.855683][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.880903][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.892393][ T4579] FAT-fs (loop0): FAT read failed (blocknr 128) [ 71.902459][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.923991][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.004281][ T4383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.017046][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.021057][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.027679][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.153450][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.156179][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.221497][ T4383] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.254636][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.257534][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.270468][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.272514][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.296747][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.316590][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.351121][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.353259][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.374699][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.387606][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.405088][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.434625][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.439665][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.443861][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.454868][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.504676][ T4383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.518300][ T4383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.614405][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.617284][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.623672][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.632653][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.641931][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.647225][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.715404][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.726188][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.728820][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.788097][ T4071] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.903862][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.911080][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.994460][ T4614] loop1: detected capacity change from 0 to 2048 [ 73.020014][ T4383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.028347][ T4071] usb 1-1: Using ep0 maxpacket: 16 [ 73.068295][ T4614] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.112531][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.115475][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.149661][ T4071] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 73.151977][ T4071] usb 1-1: config 0 has no interface number 0 [ 73.153692][ T4071] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 73.156545][ T4071] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 73.160155][ T4071] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 73.291898][ T4383] device veth0_vlan entered promiscuous mode [ 73.302012][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.305023][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.309533][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.318462][ T4071] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 73.321016][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.323154][ T4071] usb 1-1: Product: syz [ 73.324348][ T4071] usb 1-1: Manufacturer: syz [ 73.325621][ T4071] usb 1-1: SerialNumber: syz [ 73.329218][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.341856][ T4071] usb 1-1: config 0 descriptor?? [ 73.343814][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.354061][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.358526][ T4592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.360593][ T4592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.444879][ T4628] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 73.453297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.456059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.486875][ T417] device hsr_slave_0 left promiscuous mode [ 73.529580][ T417] device hsr_slave_1 left promiscuous mode [ 73.573142][ T4632] 9pnet: p9_client_clunk (4632): Trying to clunk with invalid fid [ 73.575404][ T4632] CPU: 0 PID: 4632 Comm: syz.1.125 Not tainted 5.15.185-syzkaller #0 [ 73.577764][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.580721][ T4632] Call trace: [ 73.581646][ T4632] dump_backtrace+0x0/0x43c [ 73.582904][ T4632] show_stack+0x2c/0x3c [ 73.584128][ T4632] __dump_stack+0x30/0x40 [ 73.585466][ T4632] dump_stack_lvl+0xf8/0x160 [ 73.586825][ T4632] dump_stack+0x1c/0x5c [ 73.588042][ T4632] p9_client_clunk+0x280/0x368 [ 73.589438][ T4632] v9fs_statfs+0x154/0x2d0 [ 73.590754][ T4632] user_statfs+0x1bc/0x4f0 [ 73.592046][ T4632] __arm64_sys_statfs+0xc8/0x148 [ 73.593468][ T4632] invoke_syscall+0x98/0x2b8 [ 73.594771][ T4632] el0_svc_common+0x138/0x258 [ 73.596126][ T4632] do_el0_svc+0x58/0x14c [ 73.597342][ T4632] el0_svc+0x78/0x1e0 [ 73.598540][ T4632] el0t_64_sync_handler+0xcc/0xe4 [ 73.599949][ T4632] el0t_64_sync+0x1a0/0x1a4 [ 73.609575][ T417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.611726][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.615539][ T417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.617728][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.620181][ T13] usb 1-1: USB disconnect, device number 3 [ 73.641098][ T417] device bridge_slave_1 left promiscuous mode [ 73.644057][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.734040][ T417] device bridge_slave_0 left promiscuous mode [ 73.735848][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.820193][ T417] device hsr_slave_0 left promiscuous mode [ 73.903702][ T417] device hsr_slave_1 left promiscuous mode [ 74.760271][ T7] cfg80211: failed to load regulatory.db [ 74.899694][ T4657] loop0: detected capacity change from 0 to 128 [ 74.953561][ T4657] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 74.958876][ T417] device veth1_macvtap left promiscuous mode [ 74.960898][ T417] device veth0_macvtap left promiscuous mode [ 74.968364][ T417] device veth1_vlan left promiscuous mode [ 74.970383][ T417] device veth0_vlan left promiscuous mode [ 75.262875][ T4657] FAT-fs (loop0): FAT read failed (blocknr 128) [ 75.378300][ T417] device veth1_macvtap left promiscuous mode [ 75.380183][ T417] device veth0_macvtap left promiscuous mode [ 75.382263][ T417] device veth1_vlan left promiscuous mode [ 75.384091][ T417] device veth0_vlan left promiscuous mode [ 75.950166][ T4664] loop0: detected capacity change from 0 to 2048 [ 75.974114][ T4664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.485327][ T417] team0 (unregistering): Port device team_slave_1 removed [ 76.505175][ T417] team0 (unregistering): Port device team_slave_0 removed [ 76.525225][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.570705][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.798803][ T417] bond0 (unregistering): Released all slaves [ 77.018430][ T4669] loop3: detected capacity change from 0 to 1764 [ 77.055603][ T4671] loop0: detected capacity change from 0 to 2048 [ 77.248646][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.054850][ T417] bond0 (unregistering): Released all slaves [ 78.059622][ T4679] loop0: detected capacity change from 0 to 1764 [ 78.287391][ T4383] device veth1_vlan entered promiscuous mode [ 78.290450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.293781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.912564][ T4364] device veth0_vlan entered promiscuous mode [ 79.924437][ T4651] netlink: 'syz.1.127': attribute type 2 has an invalid length. [ 79.926627][ T4651] netlink: 'syz.1.127': attribute type 8 has an invalid length. [ 79.930676][ T4651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.127'. [ 79.967625][ T4695] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 80.016898][ T4693] loop0: detected capacity change from 0 to 512 [ 80.032583][ T4364] device veth1_vlan entered promiscuous mode [ 80.069397][ T4695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 80.097693][ T4695] bond1 (unregistering): Released all slaves [ 80.144565][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.147731][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.176735][ T4701] loop1: detected capacity change from 0 to 256 [ 80.188883][ T4383] device veth0_macvtap entered promiscuous mode [ 80.216313][ T4383] device veth1_macvtap entered promiscuous mode [ 80.225849][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.239559][ T4693] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.248138][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.260969][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.265468][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.276680][ T4364] device veth0_macvtap entered promiscuous mode [ 80.300307][ T4693] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.138: bg 0: block 127: padding at end of block bitmap is not set [ 80.310946][ T4693] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.138: inode #1: comm syz.0.138: iget: illegal inode # [ 80.358776][ T4693] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.138: error while reading EA inode 1 err=-117 [ 80.363616][ T4364] device veth1_macvtap entered promiscuous mode [ 80.393329][ T4693] EXT4-fs (loop0): 1 orphan inode deleted [ 80.395119][ T4693] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 80.403663][ T4383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.406544][ T4383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.421124][ T4383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.431106][ T4383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.446466][ T4383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.459298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.462133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.465268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.484268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.509798][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.512647][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.515639][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.554701][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.558134][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.561157][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.571565][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.582477][ T4383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.599197][ T4383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.607512][ T4383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.615386][ T4383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.626252][ T4383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.634571][ T4383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.644157][ T4383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.646728][ T4383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.652239][ T4383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.717509][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.720711][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.725119][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.735418][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.751223][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.760620][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.771731][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.783964][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.786761][ T4364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.789660][ T4364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.793539][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.814141][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.819143][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.841169][ T4364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.868467][ T4364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.871051][ T4364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.873550][ T4364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.938615][ T4169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.941792][ T4169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.947061][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.076767][ T472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.079950][ T472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.085679][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.126756][ T4738] loop0: detected capacity change from 0 to 2048 [ 81.170327][ T472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.172753][ T472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.185608][ T4738] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.197305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.208990][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 81.260234][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.260275][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.262054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.581272][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 81.697186][ T4772] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 81.870717][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 81.879492][ T4772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 81.906046][ T4772] bond1 (unregistering): Released all slaves [ 81.928143][ T4069] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.143242][ T4788] loop1: detected capacity change from 0 to 2048 [ 82.207711][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.308143][ T4069] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 82.310398][ T4069] usb 1-1: config 0 has no interface number 0 [ 82.312100][ T4069] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 82.315119][ T4069] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 82.324722][ T4069] usb 1-1: config 0 interface 255 has no altsetting 0 [ 82.326643][ T4069] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 82.338313][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.344826][ T4069] usb 1-1: config 0 descriptor?? [ 82.647992][ T4069] usb 1-1: string descriptor 0 read error: -71 [ 82.650794][ T4069] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 83.462395][ T4069] usb 1-1: USB disconnect, device number 4 [ 83.520835][ T4818] loop1: detected capacity change from 0 to 1024 [ 83.541249][ T4819] loop2: detected capacity change from 0 to 1024 [ 83.590609][ T4818] EXT4-fs (loop1): Ignoring removed orlov option [ 83.592760][ T4818] EXT4-fs (loop1): Ignoring removed nobh option [ 83.594554][ T4818] EXT4-fs (loop1): Ignoring removed bh option [ 83.596197][ T4818] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.626489][ T4819] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.629120][ T4819] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.662922][ T4819] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 83.711660][ T4818] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,noquota,orlov,max_dir_size_kb=0x00000000004007af,data_err=ignore,grpquota,nobh,resuid=0x0000000000000000,bh,dioread_nolock,. Quota mode: writeback. [ 83.897804][ T4836] capability: warning: `syz.3.166' uses deprecated v2 capabilities in a way that may be insecure [ 84.319543][ T4849] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 84.433653][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 84.443995][ T4858] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 84.503229][ T4853] loop1: detected capacity change from 0 to 2048 [ 84.506221][ T4858] CIFS: Unable to determine destination address [ 84.550992][ T4849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 84.555667][ T4860] loop2: detected capacity change from 0 to 128 [ 84.580834][ T4863] fuse: Bad value for 'fd' [ 84.620423][ T4849] bond1 (unregistering): Released all slaves [ 84.637151][ T4860] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 84.694658][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.846284][ T4858] FAT-fs (loop2): FAT read failed (blocknr 128) [ 85.930256][ T4877] loop1: detected capacity change from 0 to 8 [ 86.007092][ T4877] squashfs image failed sanity check [ 86.448354][ T4895] loop3: detected capacity change from 0 to 512 [ 87.818249][ T4908] loop5: detected capacity change from 0 to 256 [ 88.560853][ T4895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.568768][ T4908] exfat: Unknown parameter 'sys_tz' [ 88.628336][ T4895] EXT4-fs (loop3): 1 orphan inode deleted [ 88.629980][ T4895] EXT4-fs (loop3): 1 truncate cleaned up [ 88.631537][ T4895] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 88.665135][ T4921] loop2: detected capacity change from 0 to 128 [ 88.671001][ T4921] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 88.677735][ T4921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.714580][ T4895] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.182: bad inode number: 12 [ 88.747173][ T4925] loop0: detected capacity change from 0 to 128 [ 88.918911][ T4895] EXT4-fs (loop3): Remounting filesystem read-only [ 88.921064][ T4929] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.182: bad inode number: 12 [ 88.958005][ T4929] EXT4-fs (loop3): Remounting filesystem read-only [ 88.989673][ T4925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.108054][ T4938] loop1: detected capacity change from 0 to 128 [ 89.518594][ T4938] loop1: detected capacity change from 0 to 1024 [ 89.644077][ T4938] EXT4-fs (loop1): Ignoring removed orlov option [ 89.646734][ T4938] EXT4-fs (loop1): Ignoring removed nobh option [ 89.648689][ T4938] EXT4-fs (loop1): Ignoring removed bh option [ 89.650592][ T4938] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.789904][ T4941] loop2: detected capacity change from 0 to 1024 [ 89.807789][ T4938] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 90.020043][ T4946] loop0: detected capacity change from 0 to 128 [ 90.131150][ T4946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.502084][ T4908] loop5: detected capacity change from 0 to 512 [ 90.505419][ T4972] loop3: detected capacity change from 0 to 1764 [ 91.001623][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.196'. [ 91.087524][ T4908] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 91.090533][ T4908] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 91.100455][ T4908] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 91.120481][ T4908] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 91.233880][ T4908] EXT4-fs (loop5): 1 truncate cleaned up [ 91.258307][ T4908] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 91.404837][ T4986] udc-core: couldn't find an available UDC or it's busy [ 91.406943][ T4986] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.419225][ T4908] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 91.457692][ T4988] loop0: detected capacity change from 0 to 512 [ 91.487784][ T4992] loop3: detected capacity change from 0 to 128 [ 91.585990][ T4992] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 91.606875][ T4992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.631445][ T4988] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 91.668406][ T4990] loop1: detected capacity change from 0 to 8192 [ 91.715344][ T4988] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.200: corrupted xattr block 33 [ 91.734596][ T4988] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.200: corrupted xattr block 33 [ 91.771566][ T4988] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 91.984346][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'. [ 93.497123][ T5038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.215'. [ 93.501973][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.215'. [ 93.515947][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.542637][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.544851][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.552630][ T5038] device bridge_slave_0 left promiscuous mode [ 93.554722][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.581451][ T5038] device bridge_slave_1 left promiscuous mode [ 93.583560][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.620805][ T5049] loop3: detected capacity change from 0 to 16 [ 93.666889][ T5038] bond0: (slave bond_slave_0): Releasing backup interface [ 93.707035][ T5049] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.842041][ T5038] bond0: (slave bond_slave_1): Releasing backup interface [ 94.057703][ T5038] team0: Port device team_slave_0 removed [ 94.112317][ T5038] team0: Port device team_slave_1 removed [ 94.123797][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.134077][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.159492][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.164283][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.586439][ T5074] loop1: detected capacity change from 0 to 16 [ 94.645170][ T5077] loop2: detected capacity change from 0 to 256 [ 94.652108][ T5074] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.684587][ T5077] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 95.815563][ T5103] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 95.953728][ T5116] loop3: detected capacity change from 0 to 128 [ 95.992412][ T5120] loop5: detected capacity change from 0 to 512 [ 96.001784][ T5116] EXT4-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 96.054718][ T5120] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 96.271862][ T5129] CIFS: Unable to determine destination address [ 96.277766][ T5129] loop3: detected capacity change from 0 to 128 [ 96.584095][ T5129] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 97.134589][ T5129] FAT-fs (loop3): FAT read failed (blocknr 128) [ 97.144644][ T5134] loop1: detected capacity change from 0 to 512 [ 97.161725][ T5134] EXT4-fs (loop1): Ignoring removed nobh option [ 97.163774][ T5134] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.185248][ T5134] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.250: invalid block [ 97.193603][ T5134] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.250: couldn't read orphan inode 11 (err -117) [ 97.208365][ T5134] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 97.380960][ T5142] loop5: detected capacity change from 0 to 8192 [ 97.389412][ T5146] loop3: detected capacity change from 0 to 1764 [ 97.416379][ T5144] loop1: detected capacity change from 0 to 1024 [ 97.423269][ T5142] process 'syz.5.251' launched './file1' with NULL argv: empty string added [ 98.622505][ T5167] loop5: detected capacity change from 0 to 512 [ 98.849418][ T4084] hfsplus: b-tree write err: -5, ino 4 [ 98.909864][ T5167] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 98.912159][ T5167] UDF-fs: Scanning with blocksize 512 failed [ 98.915056][ T5167] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 98.922288][ T5167] UDF-fs: Scanning with blocksize 1024 failed [ 98.924636][ T5167] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 98.926717][ T5167] UDF-fs: Scanning with blocksize 2048 failed [ 98.930841][ T5167] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 98.935783][ T5167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.007646][ T5175] loop2: detected capacity change from 0 to 512 [ 99.064947][ T5180] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 99.094444][ T5175] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 99.198113][ T5188] CIFS: Unable to determine destination address [ 99.202553][ T5188] loop0: detected capacity change from 0 to 128 [ 99.301626][ T5188] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 99.469115][ T5188] FAT-fs (loop0): FAT read failed (blocknr 128) [ 100.238980][ T5201] loop3: detected capacity change from 0 to 1024 [ 100.353544][ T5210] loop1: detected capacity change from 0 to 1024 [ 100.372868][ T5211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 100.427085][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 100.475331][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.517235][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.531334][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.555767][ T5208] device bridge_slave_0 left promiscuous mode [ 100.587306][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.610984][ T5223] udc-core: couldn't find an available UDC or it's busy [ 100.613457][ T4208] hfsplus: b-tree write err: -5, ino 4 [ 100.613728][ T5223] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.680707][ T5208] device bridge_slave_1 left promiscuous mode [ 100.682728][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.802473][ T5208] bond0: (slave bond_slave_0): Releasing backup interface [ 100.864467][ T5208] bond0: (slave bond_slave_1): Releasing backup interface [ 100.919776][ T5236] loop0: detected capacity change from 0 to 512 [ 101.454182][ T5236] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 101.598756][ T5208] team0: Port device team_slave_0 removed [ 101.646740][ T5248] udc-core: couldn't find an available UDC or it's busy [ 101.655288][ T5248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.661231][ T5250] ax25_connect(): syz.3.278 uses autobind, please contact jreuter@yaina.de [ 101.675850][ T5208] team0: Port device team_slave_1 removed [ 101.677290][ T5251] CIFS: Unable to determine destination address [ 101.683493][ T5251] loop1: detected capacity change from 0 to 128 [ 101.698335][ T5208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.700502][ T5208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.711599][ T5208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.713809][ T5208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.728756][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.736010][ T5251] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 101.746426][ T5250] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 101.771517][ T5251] FAT-fs (loop1): FAT read failed (blocknr 128) [ 101.956457][ T5261] loop2: detected capacity change from 0 to 1024 [ 101.970983][ T5263] loop1: detected capacity change from 0 to 1764 [ 101.989704][ T5265] loop3: detected capacity change from 0 to 8 [ 102.153897][ T5269] loop2: detected capacity change from 0 to 128 [ 102.230446][ T26] audit: type=1326 audit(102.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 102.262811][ T26] audit: type=1326 audit(102.210:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 102.300004][ T26] audit: type=1326 audit(102.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 102.306049][ T26] audit: type=1326 audit(102.240:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x7ffc0000 [ 102.924613][ T5278] ax25_connect(): syz.3.292 uses autobind, please contact jreuter@yaina.de [ 102.937750][ T5278] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 102.974994][ T5280] netlink: 28 bytes leftover after parsing attributes in process `syz.5.293'. [ 102.977430][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'. [ 103.036013][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.100037][ T5284] udc-core: couldn't find an available UDC or it's busy [ 103.104514][ T5284] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.207068][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.212969][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.281893][ T5305] loop2: detected capacity change from 0 to 1024 [ 104.285880][ T5304] loop3: detected capacity change from 0 to 2048 [ 104.289543][ T5308] udc-core: couldn't find an available UDC or it's busy [ 104.308001][ T5308] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.317727][ T5304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.558981][ T5320] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 104.742199][ T5323] loop2: detected capacity change from 0 to 1764 [ 104.920423][ T5331] ax25_connect(): syz.1.305 uses autobind, please contact jreuter@yaina.de [ 104.925661][ T5331] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 105.714200][ T5354] netlink: 72 bytes leftover after parsing attributes in process `syz.1.310'. [ 106.102812][ T5359] loop3: detected capacity change from 0 to 128 [ 106.702193][ T5358] loop2: detected capacity change from 0 to 1024 [ 106.926869][ T5365] loop5: detected capacity change from 0 to 2048 [ 106.988681][ T153] hfsplus: b-tree write err: -5, ino 4 [ 107.073792][ T5374] loop3: detected capacity change from 0 to 1024 [ 107.105692][ T5376] loop2: detected capacity change from 0 to 1024 [ 107.131378][ T5365] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.156061][ T5376] EXT4-fs (loop2): Ignoring removed nobh option [ 107.160117][ T5376] EXT4-fs (loop2): inline encryption not supported [ 107.161962][ T5376] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.191647][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 107.207586][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.294258][ T5376] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.317: bad orphan inode 32767 [ 107.297702][ T5376] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,auto_da_alloc=0x0000000000000002,noload,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback. [ 107.317504][ T5374] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.318: path /89/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 107.330221][ T5387] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 107.517740][ T5392] loop0: detected capacity change from 0 to 1024 [ 107.761876][ T4084] hfsplus: b-tree write err: -5, ino 4 [ 108.554256][ T5401] loop2: detected capacity change from 0 to 1764 [ 109.878703][ T5432] loop2: detected capacity change from 0 to 512 [ 109.895662][ T5434] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 110.056622][ T5432] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 110.094283][ T5437] loop3: detected capacity change from 0 to 2048 [ 110.221446][ T5437] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.275890][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 110.287481][ T5452] loop5: detected capacity change from 0 to 2048 [ 110.415021][ T5452] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.462179][ T5452] fs-verity: sha512 using implementation "sha512-arm64" [ 111.249582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.458281][ T5475] hid-generic 0008:0007:0005.0002: item fetching failed at offset 0/1 [ 111.461505][ T5475] hid-generic: probe of 0008:0007:0005.0002 failed with error -22 [ 111.779138][ T5486] loop1: detected capacity change from 0 to 16 [ 111.804863][ T5486] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.808451][ T5496] udc-core: couldn't find an available UDC or it's busy [ 112.824904][ T5496] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.952407][ T5521] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 114.026628][ T5525] netlink: 52 bytes leftover after parsing attributes in process `syz.3.348'. [ 114.086888][ T5521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 114.114880][ T5521] bond1 (unregistering): Released all slaves [ 114.294051][ T5502] chnl_net:caif_netlink_parms(): no params data found [ 114.365051][ T5502] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.367114][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.373502][ T5502] device bridge_slave_0 entered promiscuous mode [ 114.377429][ T5502] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.380622][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.383440][ T5502] device bridge_slave_1 entered promiscuous mode [ 114.410732][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.415459][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.452139][ T5502] team0: Port device team_slave_0 added [ 114.466307][ T5549] loop2: detected capacity change from 0 to 1764 [ 114.466731][ T5502] team0: Port device team_slave_1 added [ 114.520305][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.524632][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.539198][ T5502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.573694][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.596372][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.628783][ T5502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.238989][ T5475] Bluetooth: hci2: command 0x0409 tx timeout [ 115.282597][ T5502] device hsr_slave_0 entered promiscuous mode [ 115.329425][ T5502] device hsr_slave_1 entered promiscuous mode [ 115.421178][ T5502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.423513][ T5502] Cannot create hsr debugfs directory [ 115.483733][ T5565] loop2: detected capacity change from 0 to 16 [ 115.498577][ T5563] udc-core: couldn't find an available UDC or it's busy [ 115.500461][ T5563] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.540425][ T5563] 9pnet: Insufficient options for proto=fd [ 115.542719][ T5565] erofs: (device loop2): mounted with root inode @ nid 36. [ 115.825927][ T5502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 115.906414][ T5583] syz.2.356 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 116.331317][ T5582] loop3: detected capacity change from 0 to 2048 [ 116.556193][ T5502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 116.617049][ T5502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 116.650532][ T5502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 116.675441][ T5596] loop5: detected capacity change from 0 to 128 [ 116.679314][ T5582] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.700109][ T5596] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 116.720342][ T5596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.743213][ T5582] netlink: 880 bytes leftover after parsing attributes in process `syz.3.360'. [ 116.757068][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.769616][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.772421][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.780379][ T5502] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.789049][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.798950][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.805346][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.807473][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.821895][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.824999][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.828967][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.831704][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.833808][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.836280][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.848284][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.851537][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.855699][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.860616][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.863695][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.875835][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.880646][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.883552][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.886278][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.889506][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.892756][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.897116][ T5598] netlink: 'syz.5.364': attribute type 1 has an invalid length. [ 116.942586][ T5601] loop3: detected capacity change from 0 to 1764 [ 116.946263][ T5598] netlink: 52 bytes leftover after parsing attributes in process `syz.5.364'. [ 116.957206][ T5598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.364'. [ 116.977238][ T5598] bond1 (unregistering): Released all slaves [ 117.150925][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.153326][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.159483][ T5502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.320007][ T4070] Bluetooth: hci2: command 0x041b tx timeout [ 118.841661][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.844671][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.891682][ T5627] udc-core: couldn't find an available UDC or it's busy [ 118.893802][ T5627] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.900682][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.903643][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.906861][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.920007][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.929246][ T5502] device veth0_vlan entered promiscuous mode [ 118.947049][ T5502] device veth1_vlan entered promiscuous mode [ 119.019626][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.022495][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.025038][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.027684][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.045180][ T5502] device veth0_macvtap entered promiscuous mode [ 119.055931][ T5502] device veth1_macvtap entered promiscuous mode [ 119.074088][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.077075][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.095616][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.098737][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.109421][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.111546][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.114542][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.117310][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.122980][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.138311][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.141903][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.144579][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.147493][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.156404][ T5634] loop2: detected capacity change from 0 to 2048 [ 119.162972][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.184387][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.187501][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.193013][ T5502] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.195531][ T5502] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.200405][ T5502] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.203263][ T5502] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.235436][ T5634] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.290841][ T417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.293267][ T417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.302158][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.311662][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.314139][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.319214][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.370163][ T5634] netlink: 880 bytes leftover after parsing attributes in process `syz.2.374'. [ 119.395458][ T5640] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 119.397984][ T4070] Bluetooth: hci2: command 0x040f tx timeout [ 119.515876][ T5647] loop6: detected capacity change from 0 to 1764 [ 119.614142][ T5649] loop5: detected capacity change from 0 to 4096 [ 119.700757][ T5649] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 119.706183][ T5653] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 119.706595][ T5649] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,noauto_da_alloc,dioread_nolock,nouid32,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 120.304074][ T5659] netlink: 52 bytes leftover after parsing attributes in process `syz.2.379'. [ 120.600880][ T5653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 120.606361][ T5653] bond1 (unregistering): Released all slaves [ 121.005904][ T5671] loop3: detected capacity change from 0 to 4096 [ 121.020027][ T5671] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 121.036248][ T5671] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodelalloc,nodiscard,i_version,acl,nomblk_io_submit,init_itable,user_xattr,,errors=continue. Quota mode: writeback. [ 121.233962][ T5681] ax25_connect(): syz.3.387 uses autobind, please contact jreuter@yaina.de [ 121.274676][ T5683] loop6: detected capacity change from 0 to 2048 [ 121.323553][ T5683] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.344215][ T5667] loop5: detected capacity change from 0 to 32768 [ 121.354910][ T5683] netlink: 880 bytes leftover after parsing attributes in process `syz.6.389'. [ 121.396923][ T4511] loop5: p1 p2 p3 < p5 p6 > [ 121.402341][ T4511] loop5: p1 size 242222080 extends beyond EOD, truncated [ 121.406532][ T4511] loop5: p2 start 4294967295 is beyond EOD, truncated [ 121.433895][ T5667] loop5: p1 p2 p3 < p5 p6 > [ 121.435757][ T5667] loop5: p1 size 242222080 extends beyond EOD, truncated [ 121.446632][ T5667] loop5: p2 start 4294967295 is beyond EOD, truncated [ 121.455379][ T26] audit: type=1326 audit(121.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.391" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1ee08a8 code=0x0 [ 121.490053][ T5475] Bluetooth: hci2: command 0x0419 tx timeout [ 121.549543][ T5692] loop2: detected capacity change from 0 to 1024 [ 121.844586][ T417] hfsplus: b-tree write err: -5, ino 4 [ 123.359723][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 123.393462][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 123.401798][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 123.438647][ T5716] loop2: detected capacity change from 0 to 1024 [ 123.442697][ T5723] loop6: detected capacity change from 0 to 2048 [ 123.444418][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 123.489768][ T5716] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 123.544326][ T5723] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.594869][ T5723] netlink: 880 bytes leftover after parsing attributes in process `syz.6.403'. [ 123.719268][ T5724] loop3: detected capacity change from 0 to 32768 [ 123.741277][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 123.767794][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 123.814225][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 123.868280][ T4017] loop3: p1 p2 p3 < p5 p6 > [ 123.874328][ T4017] loop3: p1 size 242222080 extends beyond EOD, truncated [ 124.221807][ T4017] loop3: p2 start 4294967295 is beyond EOD, truncated [ 124.482511][ T5734] udevd[5734]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 124.594026][ T5724] loop3: p1 p2 p3 < p5 p6 > [ 124.595540][ T5724] loop3: p1 size 242222080 extends beyond EOD, truncated [ 124.610948][ T5724] loop3: p2 start 4294967295 is beyond EOD, truncated [ 124.622496][ T5741] loop6: detected capacity change from 0 to 1764 [ 124.930680][ T5759] loop2: detected capacity change from 0 to 2048 [ 126.191894][ T5771] loop3: detected capacity change from 0 to 16 [ 126.206848][ T5759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.236801][ T5759] netlink: 880 bytes leftover after parsing attributes in process `syz.2.416'. [ 126.261953][ T5771] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.274928][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 127.304589][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 127.493468][ T5795] loop3: detected capacity change from 0 to 1764 [ 128.629613][ T5807] loop2: detected capacity change from 0 to 2048 [ 128.636168][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 128.665761][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 128.673768][ T4307] udevd[4307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 128.677411][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 129.079248][ T5822] loop5: detected capacity change from 0 to 1024 [ 129.291263][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.391133][ T5807] netlink: 880 bytes leftover after parsing attributes in process `syz.2.431'. [ 129.718063][ T4073] Bluetooth: hci5: command 0x0409 tx timeout [ 129.722357][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 129.772457][ T5833] loop2: detected capacity change from 0 to 256 [ 129.821026][ T5833] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.823852][ T5833] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 129.840955][ T5833] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 130.080889][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.083032][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.108342][ T5800] device bridge_slave_0 entered promiscuous mode [ 130.116655][ T5848] loop6: detected capacity change from 0 to 512 [ 130.193670][ T5827] loop3: detected capacity change from 0 to 32768 [ 130.260610][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.262704][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.265507][ T5800] device bridge_slave_1 entered promiscuous mode [ 130.305972][ T5848] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.323506][ T5827] loop3: p1 p2 p3 < p5 p6 > [ 130.325090][ T5827] loop3: p1 size 242222080 extends beyond EOD, truncated [ 130.327766][ T5827] loop3: p2 start 4294967295 is beyond EOD, truncated [ 130.336986][ T5848] EXT4-fs (loop6): 1 truncate cleaned up [ 130.341071][ T5848] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.429538][ T5851] netlink: 44 bytes leftover after parsing attributes in process `syz.2.440'. [ 130.432988][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 130.971631][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.976734][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.088447][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.090399][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.169717][ T3641] loop3: p1 p2 p3 < p5 p6 > [ 131.172051][ T5854] fuse: Bad value for 'fd' [ 131.172276][ T3641] loop3: p1 size 242222080 extends beyond EOD, truncated [ 131.179822][ T3641] loop3: p2 start 4294967295 is beyond EOD, truncated [ 131.194968][ T5800] team0: Port device team_slave_0 added [ 131.903643][ T4073] Bluetooth: hci5: command 0x041b tx timeout [ 131.919924][ T5800] team0: Port device team_slave_1 added [ 131.997422][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.006409][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.154532][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.177503][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.179995][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.220633][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.124510][ T5868] loop2: detected capacity change from 0 to 2048 [ 133.173913][ T5800] device hsr_slave_0 entered promiscuous mode [ 133.228471][ T5800] device hsr_slave_1 entered promiscuous mode [ 133.243137][ T5868] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.259411][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.261628][ T5800] Cannot create hsr debugfs directory [ 133.375668][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 133.421600][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 133.445094][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 133.457694][ T5882] netlink: 'syz.6.451': attribute type 1 has an invalid length. [ 133.474739][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 133.479960][ T5882] netlink: 52 bytes leftover after parsing attributes in process `syz.6.451'. [ 133.483533][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.451'. [ 133.491756][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 133.538572][ T5888] fuse: Bad value for 'fd' [ 133.544178][ T4307] udevd[4307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 133.731985][ T5800] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 134.459473][ T4034] Bluetooth: hci5: command 0x040f tx timeout [ 134.512786][ T5800] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 134.550807][ T5800] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 134.553636][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 134.559390][ T4307] udevd[4307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 134.564832][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 134.571243][ T4167] udevd[4167]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 134.683961][ T5800] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 134.740434][ T5903] udc-core: couldn't find an available UDC or it's busy [ 134.742675][ T5903] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.865877][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.880865][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.886838][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.903334][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.964893][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.974112][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.986774][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.992276][ T5903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 134.999609][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.009363][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.012938][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.015809][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.017881][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.028897][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.033930][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.037003][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.044326][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.046425][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.075460][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.085312][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.092703][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.106295][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.124862][ T5919] fuse: Bad value for 'fd' [ 135.151305][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.154283][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.157392][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.186917][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.191301][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.198101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.201348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.206028][ T5918] loop6: detected capacity change from 0 to 2048 [ 135.210543][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.282541][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.287335][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.290755][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.307304][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.370499][ T5918] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.416062][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.464'. [ 135.475339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.477714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.495401][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.670932][ T5945] Zero length message leads to an empty skb [ 135.699156][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 136.023679][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.026633][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.092548][ T5800] device veth0_vlan entered promiscuous mode [ 136.119193][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.468'. [ 136.131676][ T5800] device veth1_vlan entered promiscuous mode [ 136.140517][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.143304][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.146239][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.164833][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.167646][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.240000][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.243737][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.247169][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.272051][ T5800] device veth0_macvtap entered promiscuous mode [ 136.280985][ T5800] device veth1_macvtap entered promiscuous mode [ 136.319477][ T5960] netlink: 'syz.5.475': attribute type 1 has an invalid length. [ 136.346242][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.358933][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.361914][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.378141][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.380965][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.383840][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.431456][ T5965] fuse: Bad value for 'fd' [ 136.468347][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.473517][ T5960] netlink: 52 bytes leftover after parsing attributes in process `syz.5.475'. [ 136.476314][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.479686][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.482713][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.486897][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.518126][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 136.527324][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.475'. [ 136.536412][ T5963] bond1 (unregistering): Released all slaves [ 136.572479][ T5968] udc-core: couldn't find an available UDC or it's busy [ 136.574650][ T5968] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.592543][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.595487][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.610585][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.618433][ T5966] loop3: detected capacity change from 0 to 2048 [ 136.630591][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.641504][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.653025][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.667058][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.680305][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.683436][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.714125][ T5800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.716759][ T5800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.722872][ T5800] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.727640][ T5800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.771790][ T5966] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.872798][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.875338][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.892550][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.922397][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.925352][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.940418][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.310816][ T6002] fuse: Bad value for 'fd' [ 138.411591][ T6006] batman_adv: batadv0: Adding interface: dummy0 [ 138.423726][ T6006] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.553718][ T6006] batman_adv: batadv0: Interface activated: dummy0 [ 138.589483][ T6009] __nla_validate_parse: 1 callbacks suppressed [ 138.589495][ T6009] netlink: 72 bytes leftover after parsing attributes in process `syz.6.489'. [ 138.743359][ T6014] loop7: detected capacity change from 0 to 2048 [ 138.803565][ T6006] batadv0: mtu less than device minimum [ 138.809831][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.817482][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.824797][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.832254][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.839481][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.846732][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.854114][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.861472][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.868778][ T6006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.373851][ T6014] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.481069][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.490'. [ 139.846226][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.495'. [ 139.874750][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 141.037427][ T6067] fuse: Bad value for 'fd' [ 141.145237][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.504'. [ 141.332450][ T6083] syz.2.507 uses obsolete (PF_INET,SOCK_PACKET) [ 141.617253][ T6096] udc-core: couldn't find an available UDC or it's busy [ 141.618136][ T6098] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 141.645997][ T6096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 141.691955][ T6101] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 141.828462][ T6109] netlink: 'syz.6.519': attribute type 1 has an invalid length. [ 141.895123][ T6115] netlink: 52 bytes leftover after parsing attributes in process `syz.6.519'. [ 141.939955][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.519'. [ 141.987771][ T6109] bond1 (unregistering): Released all slaves [ 142.087677][ T6117] tipc: Started in network mode [ 142.089361][ T6117] tipc: Node identity 32e2a0907492, cluster identity 4711 [ 142.091649][ T6117] tipc: Enabled bearer , priority 0 [ 142.165624][ T6117] device syzkaller0 entered promiscuous mode [ 142.208959][ T6116] tipc: Resetting bearer [ 142.321383][ T6116] tipc: Disabling bearer [ 142.522367][ T6137] tipc: Enabled bearer , priority 9 [ 143.469244][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 143.505393][ T6173] device bond0 entered promiscuous mode [ 143.549622][ T6173] device gretap0 entered promiscuous mode [ 143.583845][ T6173] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 143.599212][ T7] tipc: Node number set to 1181786256 [ 143.641349][ T6178] netlink: 'syz.6.548': attribute type 1 has an invalid length. [ 143.659523][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 143.663006][ T6180] netlink: 52 bytes leftover after parsing attributes in process `syz.6.548'. [ 143.680881][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.548'. [ 143.695380][ T6178] bond1 (unregistering): Released all slaves [ 143.746090][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 143.849610][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 144.501349][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.555'. [ 144.886390][ T6217] loop6: detected capacity change from 0 to 1764 [ 145.574804][ T6245] [ 145.575719][ T6245] ====================================================== [ 145.577653][ T6245] WARNING: possible circular locking dependency detected [ 145.579640][ T6245] 5.15.185-syzkaller #0 Not tainted [ 145.581088][ T6245] ------------------------------------------------------ [ 145.583061][ T6245] syz.7.571/6245 is trying to acquire lock: [ 145.584755][ T6245] ffff8000162886e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 145.587476][ T6245] [ 145.587476][ T6245] but task is already holding lock: [ 145.589594][ T6245] ffff0000eb6f3120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c [ 145.592274][ T6245] [ 145.592274][ T6245] which lock already depends on the new lock. [ 145.592274][ T6245] [ 145.594315][ T6207] ODEBUG: Out of memory. ODEBUG disabled [ 145.595225][ T6245] [ 145.595225][ T6245] the existing dependency chain (in reverse order) is: [ 145.595232][ T6245] [ 145.595232][ T6245] -> #1 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 145.601608][ T6245] lock_sock_nested+0xd8/0x1d4 [ 145.603129][ T6245] ax25_device_event+0x20c/0x590 [ 145.604699][ T6245] raw_notifier_call_chain+0xd4/0x164 [ 145.606377][ T6245] dev_close_many+0x2cc/0x440 [ 145.607820][ T6245] dev_close+0x148/0x1f8 [ 145.609287][ T6245] bpq_device_event+0x318/0x824 [ 145.610781][ T6245] raw_notifier_call_chain+0xd4/0x164 [ 145.612454][ T6245] dev_close_many+0x2cc/0x440 [ 145.613889][ T6245] dev_close+0x148/0x1f8 [ 145.615225][ T6245] bond_setup_by_slave+0x70/0x318 [ 145.616812][ T6245] bond_enslave+0x624/0x3014 [ 145.618212][ T6245] bond_do_ioctl+0x6ec/0xb3c [ 145.619595][ T6245] dev_ifsioc+0xc44/0xef4 [ 145.620923][ T6245] dev_ioctl+0x4d0/0xc94 [ 145.622298][ T6245] sock_do_ioctl+0x18c/0x240 [ 145.623790][ T6245] sock_ioctl+0x5c8/0x87c [ 145.625113][ T6245] __arm64_sys_ioctl+0x14c/0x1c8 [ 145.626678][ T6245] invoke_syscall+0x98/0x2b8 [ 145.628065][ T6245] el0_svc_common+0x138/0x258 [ 145.629561][ T6245] do_el0_svc+0x58/0x14c [ 145.630873][ T6245] el0_svc+0x78/0x1e0 [ 145.632148][ T6245] el0t_64_sync_handler+0xcc/0xe4 [ 145.633634][ T6245] el0t_64_sync+0x1a0/0x1a4 [ 145.635011][ T6245] [ 145.635011][ T6245] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 145.636962][ T6245] __lock_acquire+0x2928/0x651c [ 145.638469][ T6245] lock_acquire+0x1f4/0x620 [ 145.639861][ T6245] __mutex_lock_common+0x194/0x1edc [ 145.641483][ T6245] mutex_lock_nested+0xac/0x11c [ 145.643069][ T6245] rtnl_lock+0x20/0x2c [ 145.644331][ T6245] ax25_setsockopt+0x870/0xa5c [ 145.645759][ T6245] __sys_setsockopt+0x2f8/0x4b0 [ 145.647261][ T6245] __arm64_sys_setsockopt+0xb8/0xd4 [ 145.648840][ T6245] invoke_syscall+0x98/0x2b8 [ 145.650255][ T6245] el0_svc_common+0x138/0x258 [ 145.651749][ T6245] do_el0_svc+0x58/0x14c [ 145.653093][ T6245] el0_svc+0x78/0x1e0 [ 145.654374][ T6245] el0t_64_sync_handler+0xcc/0xe4 [ 145.655964][ T6245] el0t_64_sync+0x1a0/0x1a4 [ 145.657380][ T6245] [ 145.657380][ T6245] other info that might help us debug this: [ 145.657380][ T6245] [ 145.660296][ T6245] Possible unsafe locking scenario: [ 145.660296][ T6245] [ 145.662395][ T6245] CPU0 CPU1 [ 145.663882][ T6245] ---- ---- [ 145.665417][ T6245] lock(sk_lock-AF_AX25); [ 145.666689][ T6245] lock(rtnl_mutex); [ 145.668564][ T6245] lock(sk_lock-AF_AX25); [ 145.670552][ T6245] lock(rtnl_mutex); [ 145.671709][ T6245] [ 145.671709][ T6245] *** DEADLOCK *** [ 145.671709][ T6245] [ 145.673892][ T6245] 1 lock held by syz.7.571/6245: [ 145.675251][ T6245] #0: ffff0000eb6f3120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c [ 145.677912][ T6245] [ 145.677912][ T6245] stack backtrace: [ 145.679531][ T6245] CPU: 0 PID: 6245 Comm: syz.7.571 Not tainted 5.15.185-syzkaller #0 [ 145.681710][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.684572][ T6245] Call trace: [ 145.685527][ T6245] dump_backtrace+0x0/0x43c [ 145.686830][ T6245] show_stack+0x2c/0x3c [ 145.688037][ T6245] __dump_stack+0x30/0x40 [ 145.689212][ T6245] dump_stack_lvl+0xf8/0x160 [ 145.690491][ T6245] dump_stack+0x1c/0x5c [ 145.691638][ T6245] print_circular_bug+0x148/0x1b0 [ 145.693041][ T6245] check_noncircular+0x240/0x2d4 [ 145.694387][ T6245] __lock_acquire+0x2928/0x651c [ 145.695771][ T6245] lock_acquire+0x1f4/0x620 [ 145.697053][ T6245] __mutex_lock_common+0x194/0x1edc [ 145.698666][ T6245] mutex_lock_nested+0xac/0x11c [ 145.700071][ T6245] rtnl_lock+0x20/0x2c [ 145.701302][ T6245] ax25_setsockopt+0x870/0xa5c [ 145.702752][ T6245] __sys_setsockopt+0x2f8/0x4b0 [ 145.704055][ T6245] __arm64_sys_setsockopt+0xb8/0xd4 [ 145.705493][ T6245] invoke_syscall+0x98/0x2b8 [ 145.706753][ T6245] el0_svc_common+0x138/0x258 [ 145.708136][ T6245] do_el0_svc+0x58/0x14c [ 145.709320][ T6245] el0_svc+0x78/0x1e0 [ 145.710407][ T6245] el0t_64_sync_handler+0xcc/0xe4 [ 145.711814][ T6245] el0t_64_sync+0x1a0/0x1a4 [ 145.734190][ T6245] netlink: 104 bytes leftover after parsing attributes in process `syz.7.571'. [ 148.358603][ C0] net_ratelimit: 11 callbacks suppressed [ 148.358618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog